USN-7323-2: Linux kernel vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-6.11.0-1010-azureto a version that resolves this vulnerability.Fixed in 6.11.0-1010.10 - Upgrade
Upgrade
ubuntu/linux-image-6.11.0-1010-azure-fdeto a version that resolves this vulnerability.Fixed in 6.11.0-1010.10 - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in 6.11.0-1010.10 - Upgrade
Upgrade
ubuntu/linux-image-azure-fdeto a version that resolves this vulnerability.Fixed in 6.11.0-1010.10
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-7323-2?
The USN-7323-2 vulnerability has been classified as a serious vulnerability due to its potential to cause denial of service and arbitrary code execution.
How do I fix USN-7323-2?
To fix USN-7323-2, users should update to the linux-image packages version 6.11.0-1010.10 or later.
What specific systems are affected by USN-7323-2?
USN-7323-2 affects Ubuntu 24.10 systems running vulnerable linux-image packages.
What type of vulnerability is USN-7323-2?
USN-7323-2 is classified as a heap overflow vulnerability in the HFS+ file system implementation.
Can USN-7323-2 lead to remote exploitation?
Yes, USN-7323-2 could potentially allow an attacker to execute arbitrary code by exploiting the vulnerability through specially crafted file system images.