USN-7401-1: Linux kernel (AWS) vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848) Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7401-1?
The severity of USN-7401-1 is critical due to a use-after-free vulnerability that can cause system crashes or allow for arbitrary code execution.
How do I fix USN-7401-1?
To fix USN-7401-1, you should update your Linux kernel to version 5.4.0-1142.152~18.04.1 or later.
What is the cause of the vulnerability in USN-7401-1?
The vulnerability in USN-7401-1 is caused by a use-after-free flaw in the CEC driver of the Linux kernel.
Who discovered the vulnerability in USN-7401-1?
The vulnerability in USN-7401-1 was discovered by security researcher Chenyuan Yang.
What impact does the vulnerability in USN-7401-1 have on systems?
The impact of the vulnerability in USN-7401-1 can lead to a denial of service or potential remote code execution.