USN-7344-2: Linux kernel vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848) Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7344-2?
The severity of USN-7344-2 is critical due to the potential for local attackers to execute arbitrary code or cause a denial of service.
How do I fix USN-7344-2?
To fix USN-7344-2, upgrade to the patched versions of the affected Linux kernel packages as specified in the advisory.
What systems are affected by USN-7344-2?
USN-7344-2 affects Ubuntu 14.04, 16.04, and 18.04 for specific Linux kernel package versions.
What type of vulnerability is described in USN-7344-2?
USN-7344-2 describes a use-after-free vulnerability found in the CEC driver of the Linux kernel.
Who discovered the vulnerability in USN-7344-2?
The vulnerability in USN-7344-2 was discovered by Chenyuan Yang and Attila Szász.