USN-7458-1: Linux kernel (IBM) vulnerabilities
Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7458-1?
The severity of USN-7458-1 is high due to the potential for denial of service and arbitrary code execution.
How do I fix USN-7458-1?
To fix USN-7458-1, update your system to the latest version of the linux-image packages as specified in the advisory.
What systems are affected by USN-7458-1?
USN-7458-1 affects Ubuntu 20.04 systems running specific versions of the linux-image package.
What type of vulnerability is described in USN-7458-1?
USN-7458-1 describes a heap overflow vulnerability in the HFS+ file system implementation of the Linux Kernel.
Can USN-7458-1 be exploited remotely?
Yes, USN-7458-1 can be exploited by attackers using specially crafted file system images when mounted.