USN-7385-1: Linux kernel (IBM) vulnerabilities
Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7385-1?
USN-7385-1 addresses a critical improper access control vulnerability in the Bluetooth driver of the Linux Kernel.
How do I fix USN-7385-1?
To remediate USN-7385-1, upgrade to the linux-image-6.8.0-1022.22 package for Ubuntu 24.04.
What products are affected by USN-7385-1?
USN-7385-1 affects the Ubuntu 24.04 product line with specific packages related to the Linux image version 6.8.0-1022.22.
Who discovered the vulnerability in USN-7385-1?
The vulnerability in USN-7385-1 was discovered by Michael Randrianantenaina.
Can an attacker exploit USN-7385-1 remotely?
Yes, a nearby attacker can exploit USN-7385-1 to connect a rogue Bluetooth device and potentially execute arbitrary code.