Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux‑FIPS kernels could let attackers take control
published 1 year ago
Summary
The Linux kernel packages built for FIPS compliance on AWS, GCP, and standard environments have flaws in the NTFS file handling and network traffic control components. An attacker could exploit these weaknesses to gain unauthorized access or disrupt the system. Install the latest update from your Linux provider to fix the problems.
What to do
- Update canonical linux-aws-fips to version 5.15.0-1091.98+fips1.
- Update canonical linux-fips to version 5.15.0-153.163+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1091.100+fips1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1091.98+fips1 Fix: upgrade to 5.15.0-1091.98+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-153.163+fips1 Fix: upgrade to 5.15.0-153.163+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1091.100+fips1 Fix: upgrade to 5.15.0-1091.100+fips1
|
Original advisory text
linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NTFS3 file system;
- Network traffic control;
(CVE-2024-27407, CVE-2024-57996, CVE-2025-37752, CVE-2025-38350)
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- NTFS3 file system;
- Network traffic control;
(CVE-2024-27407, CVE-2024-57996, CVE-2025-37752, CVE-2025-38350)
References
- https://ubuntu.com/security/notices/USN-7726-3 Vendor Advisory
- https://ubuntu.com/security/CVE-2024-27407 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57996 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37752 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38350 Third Party Advisory
Timeline
Published28 Aug 2025
Updated30 Oct 2026
First seen30 Oct 2026
Sources
USN-7726-3 · OSV
Track software like this
Free during beta