USN-7344-1: Linux kernel vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848) Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7344-1?
The severity of USN-7344-1 is significant due to the potential for denial of service and arbitrary code execution.
How do I fix USN-7344-1?
To fix USN-7344-1, you should update your Linux kernel to the latest version provided by your Ubuntu package manager.
Which versions of Ubuntu are affected by USN-7344-1?
Ubuntu versions 16.04 and 18.04 are affected by USN-7344-1.
What type of vulnerability is USN-7344-1?
USN-7344-1 describes a use-after-free vulnerability in the CEC driver of the Linux kernel.
Can USN-7344-1 be exploited remotely?
USN-7344-1 is a local vulnerability, meaning it requires local access for exploitation.