FlawAtlas
Search the atlas
USN-7455-1 Not scored

linux, linux-aws, linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-raspi vulnerabilities

Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - File systems infrastructure; - NTFS3 file system; - Ethernet bridge; - Ethtool driver; - IPv6 networking; - Network traffic control; - VMware vSockets driver; (CVE-2025-21703, CVE-2024-56651, CVE-2024-50248, CVE-2025-21701, CVE-2024-26837, CVE-2024-46826, CVE-2025-21993, CVE-2025-21702, CVE-2024-50256, CVE-2025-21756, CVE-2025-21700)

Exploit probability Not scored
Published April 24, 2025
Required by Not available
Last source change August 6, 2026

02 / AFFECTED SOFTWARE

Affected packages

Ubuntu:20.04:LTS linux-azure-5.15

55 explicit affected versions

Ubuntu:20.04:LTS linux-azure-fde-5.15

46 explicit affected versions

Ubuntu:20.04:LTS linux-hwe-5.15

54 explicit affected versions

Ubuntu:20.04:LTS linux-lowlatency-hwe-5.15

57 explicit affected versions

Ubuntu:22.04:LTS linux

71 explicit affected versions

Ubuntu:22.04:LTS linux-aws

63 explicit affected versions

Ubuntu:22.04:LTS linux-azure

64 explicit affected versions

Ubuntu:22.04:LTS linux-azure-fde

45 explicit affected versions

Ubuntu:22.04:LTS linux-gcp

64 explicit affected versions

Ubuntu:22.04:LTS linux-gke

63 explicit affected versions

Ubuntu:22.04:LTS linux-gkeop

56 explicit affected versions

Ubuntu:22.04:LTS linux-ibm

61 explicit affected versions

Ubuntu:22.04:LTS linux-intel-iotg

51 explicit affected versions

Ubuntu:22.04:LTS linux-kvm

65 explicit affected versions

Ubuntu:22.04:LTS linux-lowlatency

68 explicit affected versions

Ubuntu:22.04:LTS linux-nvidia

48 explicit affected versions

Ubuntu:22.04:LTS linux-nvidia-tegra

21 explicit affected versions

Ubuntu:22.04:LTS linux-nvidia-tegra-igx

17 explicit affected versions

Ubuntu:22.04:LTS linux-oracle

64 explicit affected versions

Ubuntu:22.04:LTS linux-raspi

62 explicit affected versions

03 / CONNECTIONS

Connected vulnerabilities

04 / EVIDENCE

Source records

Open Source Vulnerabilities USN-7455-1

Jann Horn discovered that the watch_queue event notification subsystem in the Linux kernel contained an out-of-bounds write vulnerability. A local attacker could use this to cause a denial of service (system crash) or escalate their privileges. (CVE-2022-0995) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - File systems infrastructure; - NTFS3 file system; - Ethernet bridge; - Ethtool driver; - IPv6 networking; - Network traffic control; - VMware vSockets driver; (CVE-2025-21703, CVE-2024-56651, CVE-2024-50248, CVE-2025-21701, CVE-2024-26837, CVE-2024-46826, CVE-2025-21993, CVE-2025-21702, CVE-2024-50256, CVE-2025-21756, CVE-2025-21700)

View original source

05 / REFERENCES

Further evidence