USN-7276-1: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.11.0-1010-lowlatencyto a version that resolves this vulnerability.Fixed in 6.11.0-1010.11 - Upgrade
Upgrade
ubuntu/linux-image-6.11.0-1010-lowlatency-64kto a version that resolves this vulnerability.Fixed in 6.11.0-1010.11 - Upgrade
Upgrade
ubuntu/linux-image-6.11.0-18-genericto a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-6.11.0-18-generic-64kto a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-24.04to a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-24.04to a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-lowlatencyto a version that resolves this vulnerability.Fixed in 6.11.0-1010.11 - Upgrade
Upgrade
ubuntu/linux-image-lowlatency-64kto a version that resolves this vulnerability.Fixed in 6.11.0-1010.11 - Upgrade
Upgrade
ubuntu/linux-image-oem-24.04to a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-oem-24.04ato a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-24.04to a version that resolves this vulnerability.Fixed in 6.11.0-18.18 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-7276-1
Event History
Frequently Asked Questions
What is the severity of USN-7276-1?
The severity of USN-7276-1 is considered critical due to the heap overflow vulnerability in the HFS+ file system implementation that can lead to denial of service or arbitrary code execution.
How do I fix USN-7276-1?
To fix USN-7276-1, update to the recommended Linux kernel versions: 6.11.0-1010.11 or 6.11.0-18.18.
What products are affected by USN-7276-1?
USN-7276-1 affects Ubuntu 24.10 and specific Linux kernel packages associated with it.
What type of vulnerability is described in USN-7276-1?
USN-7276-1 describes a heap overflow vulnerability that could be exploited by an attacker through a specially crafted file system image.
Is there a workaround for USN-7276-1?
Currently, the best approach for USN-7276-1 is to apply the patch by upgrading to the fixed kernel versions, as no specific workarounds have been noted.