USN-7403-1: Linux kernel (HWE) vulnerabilities
Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. A nearby attacker could use this to connect a rougue device and possibly execute arbitrary code. (CVE-2024-8805) Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7403-1?
USN-7403-1 addresses a high-severity improper access control vulnerability in the Bluetooth driver of the Linux Kernel.
How do I fix USN-7403-1?
To fix USN-7403-1, upgrade to the linux-image package version 6.8.0-57.59~22.04.1 or later.
Who discovered the vulnerability detailed in USN-7403-1?
The vulnerability in USN-7403-1 was discovered by Michael Randrianantenaina and Attila Szász.
What products are affected by USN-7403-1?
USN-7403-1 affects various Ubuntu 22.04 packages including linux-image-generic and linux-image-oem.
Can USN-7403-1 lead to remote code execution?
Yes, USN-7403-1 could potentially allow nearby attackers to execute arbitrary code through a rogue Bluetooth device.