USN-7463-1: Linux kernel (IBM) vulnerabilities
Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2024-23848) Attila Szász discovered that the HFS+ file system implementation in the Linux Kernel contained a heap overflow vulnerability. An attacker could use a specially crafted file system image that, when mounted, could cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2025-0927) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Event History
Frequently Asked Questions
What is the severity of USN-7463-1?
USN-7463-1 is classified as a critical vulnerability due to its potential to cause a denial of service or execute arbitrary code.
How do I fix USN-7463-1?
To fix USN-7463-1, update your system to the latest version of the affected package, specifically linux-image-5.4.0-1090-ibm for Ubuntu 18.04.
What causes the vulnerability USN-7463-1?
The vulnerability USN-7463-1 is caused by a use-after-free issue in the CEC driver within the Linux kernel.
Who discovered USN-7463-1?
USN-7463-1 was discovered by Chenyuan Yang and Attila Szász.
What versions of Ubuntu are affected by USN-7463-1?
USN-7463-1 affects Ubuntu 18.04 systems running specific versions of the linux-image packages.