Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Canonical Linux Azure could allow attacker to take control
published 1 year ago
Summary
The Linux Azure system from Canonical has several flaws in its networking and driver components that could let a malicious user gain unauthorized access. This could lead to loss of data or disruption of services. Apply the latest update from Canonical as soon as possible to fix the issues.
What to do
- Update canonical linux-azure to version 6.8.0-1031.36.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1031.36 Fix: upgrade to 6.8.0-1031.36
|
Original advisory text
linux-azure vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- Netfilter;
- Network traffic control;
(CVE-2025-38001, CVE-2025-37798, CVE-2025-37932, CVE-2025-37997,
CVE-2025-38000, CVE-2025-22088, CVE-2025-37890)
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- Netfilter;
- Network traffic control;
(CVE-2025-38001, CVE-2025-37798, CVE-2025-37932, CVE-2025-37997,
CVE-2025-38000, CVE-2025-22088, CVE-2025-37890)
References
- https://ubuntu.com/security/notices/USN-7609-4 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-22088 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37798 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37890 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37932 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37997 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38000 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38001 Third Party Advisory
Timeline
Published8 Jul 2025
Updated30 Oct 2026
First seen30 Oct 2026
Sources
USN-7609-4 · OSV
Track software like this
Free during beta