Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux‑Oracle kernel patches stop system takeover
published 1 year ago
Summary
The Linux kernel used in Canonical's Linux‑Oracle images has bugs in several components such as device drivers, file systems, Bluetooth and networking. Attackers could exploit these flaws to gain control of the server. Apply the latest kernel update from Canonical as soon as possible to close the gaps.
What to do
- Update canonical linux-oracle to version 4.15.0-1145.156.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1145.156 Fix: upgrade to 4.15.0-1145.156
|
Original advisory text
linux-oracle vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Device tree and open firmware driver;
- SCSI subsystem;
- TTY drivers;
- Ext4 file system;
- SMB network file system;
- Bluetooth subsystem;
- Network traffic control;
- Sun RPC protocol;
- USB sound devices;
(CVE-2024-38541, CVE-2024-49883, CVE-2023-52757, CVE-2024-49950,
CVE-2024-53239, CVE-2023-52885, CVE-2024-56748, CVE-2023-52975,
CVE-2024-50073, CVE-2025-37797)
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Device tree and open firmware driver;
- SCSI subsystem;
- TTY drivers;
- Ext4 file system;
- SMB network file system;
- Bluetooth subsystem;
- Network traffic control;
- Sun RPC protocol;
- USB sound devices;
(CVE-2024-38541, CVE-2024-49883, CVE-2023-52757, CVE-2024-49950,
CVE-2024-53239, CVE-2023-52885, CVE-2024-56748, CVE-2023-52975,
CVE-2024-50073, CVE-2025-37797)
References
- https://ubuntu.com/security/notices/USN-7685-4 Vendor Advisory
- https://ubuntu.com/security/CVE-2023-52757 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52885 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52975 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-38541 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-49883 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-49950 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-50073 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-53239 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-56748 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37797 Third Party Advisory
Timeline
Published5 Aug 2025
Updated23 Oct 2026
First seen23 Oct 2026
Sources
USN-7685-4 · OSV
Track software like this
Free during beta