| Description: | Summary:
The remote host is missing an update for the 'linux-xilinx-zynqmp' package(s) announced via the USN-7475-1 advisory.
Vulnerability Insight:
Jann Horn discovered that the watch_queue event notification subsystem in
the Linux kernel contained an out-of-bounds write vulnerability. A local
attacker could use this to cause a denial of service (system crash) or
escalate their privileges. (CVE-2022-0995)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- iSCSI Boot Firmware Table Attributes driver,
- GPU drivers,
- Network drivers,
- File systems infrastructure,
- NTFS3 file system,
- SMB network file system,
- Network namespace,
- Ethernet bridge,
- Networking core,
- Ethtool driver,
- IPv6 networking,
- Network traffic control,
- VMware vSockets driver,
(CVE-2024-50248, CVE-2024-57798, CVE-2025-21702, CVE-2024-56651,
CVE-2024-26837, CVE-2025-21703, CVE-2024-46826, CVE-2025-21700,
CVE-2024-50256, CVE-2024-35864, CVE-2025-21756, CVE-2025-21993,
CVE-2024-26928, CVE-2024-56658, CVE-2025-21701)
Affected Software/OS:
'linux-xilinx-zynqmp' package(s) on Ubuntu 22.04.
Solution:
Please install the updated package(s).
CVSS Score:
7.2
CVSS Vector:
AV:L/AC:L/Au:N/C:C/I:C/A:C
|
