USN-7301-1: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7301-1?
The USN-7301-1 vulnerability is classified as high severity due to its potential to cause denial of service and possible arbitrary code execution.
How do I fix USN-7301-1?
To mitigate the USN-7301-1 vulnerability, update the affected Ubuntu packages to version 6.8.0-54.56 or later.
What causes the USN-7301-1 vulnerability?
The USN-7301-1 vulnerability is caused by a heap overflow in the HFS+ file system implementation of the Linux Kernel.
Which systems are affected by USN-7301-1?
USN-7301-1 affects Ubuntu 24.04 systems running specific versions of the Linux kernel packages.
What type of attack can exploit USN-7301-1?
An attacker can exploit the USN-7301-1 vulnerability by using a specially crafted file system image that triggers a system crash or arbitrary code execution.