Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Ubuntu 4.15.0-246 kernel updates prevent crashes and data leaks

published 14 days ago
Summary

The Ubuntu kernel version 4.15.0-246 (including generic, low‑latency, cloud‑tools and header packages) has been updated to fix several coding errors that could cause system crashes, expose memory contents, or allow unauthorized actions. Apply the provided update from Ubuntu as soon as possible to keep your servers and workstations stable and secure.

What to do
  • Update canonical linux-buildinfo-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-cloud-tools-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-headers-4.15.0-246-tuxcare.els44 to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-headers-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-headers-4.15.0-246-tuxcare.els44-lowlatency to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44 to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-hwe-tools-4.15.0-246-tuxcare.els44 to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-image-unsigned-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-modules-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-modules-4.15.0-246-tuxcare.els44-lowlatency to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-modules-extra-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-source-4.15.0 to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-tools-4.15.0-246-tuxcare.els44-generic to version 4.15.0-246.257~16.04.1.
  • Update canonical linux-tools-4.15.0-246-tuxcare.els44-lowlatency to version 4.15.0-246.257~16.04.1.
Affected software
Ecosystem VendorProductAffected versions
TuxCare:Ubuntu:16.04 canonical linux-buildinfo-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-buildinfo-4.15.0-246-tuxcare.els44-lowlatency < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-cloud-tools-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-cloud-tools-4.15.0-246-tuxcare.els44-lowlatency < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-headers-4.15.0-246-tuxcare.els44 < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-headers-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-headers-4.15.0-246-tuxcare.els44-lowlatency < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-hwe-cloud-tools-4.15.0-246-tuxcare.els44 < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-hwe-tools-4.15.0-246-tuxcare.els44 < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-image-unsigned-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-image-unsigned-4.15.0-246-tuxcare.els44-lowlatency < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-modules-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-modules-4.15.0-246-tuxcare.els44-lowlatency < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-modules-extra-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-source-4.15.0 < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-tools-4.15.0-246-tuxcare.els44-generic < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
TuxCare:Ubuntu:16.04 canonical linux-tools-4.15.0-246-tuxcare.els44-lowlatency < 4.15.0-246.257~16.04.1
Fix: upgrade to 4.15.0-246.257~16.04.1
Original advisory text
Fix of 56 CVEs
[ Ubuntu: 4.15.0-246.257 ]
* CVE-url: https://ubuntu.com/security/CVE-2025-21858
- geneve: Fix use-after-free in geneve_find_dev().
* CVE-url: https://ubuntu.com/security/CVE-2024-36921
- wifi: iwlwifi: mvm: guard against invalid STA ID on removal
* CVE-url: https://ubuntu.com/security/CVE-2023-52621
- bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
* CVE-url: https://ubuntu.com/security/CVE-2025-21855
- ibmvnic: Don't reference skb after sending to VIOS
* CVE-url: https://ubuntu.com/security/CVE-2021-47110
- x86/kvm: Disable kvmclock on all CPUs on shutdown
* CVE-url: https://ubuntu.com/security/CVE-2025-21791
- vrf: use RCU protection in l3mdev_l3_out()
* CVE-url: https://ubuntu.com/security/CVE-2024-57980
- media: uvcvideo: Fix double free in error path
* CVE-url: https://ubuntu.com/security/CVE-2025-21718
- net: rose: fix timer races against user threads
* CVE-url: https://ubuntu.com/security/CVE-2025-21735
- NFC: nci: Add bounds checking in nci_hci_create_pipe()
* CVE-url: https://ubuntu.com/security/CVE-2023-52805
- jfs: fix array-index-out-of-bounds in diAlloc
* CVE-url: https://ubuntu.com/security/CVE-2023-52847
- media: bttv: fix use after free error due to btv->timeout timer
* CVE-url: https://ubuntu.com/security/CVE-2024-41014
- xfs: add bounds checking to xlog_recover_process_data
* CVE-url: https://ubuntu.com/security/CVE-2025-21782
- orangefs: fix a oob in orangefs_debug_write
* CVE-url: https://ubuntu.com/security/CVE-2024-26872
- RDMA/srpt: Do not register event handler until srpt device is fully setup
* CVE-url: https://ubuntu.com/security/CVE-2024-26982
- Squashfs: check the inode number is not the invalid value of zero
* CVE-url: https://ubuntu.com/security/CVE-2024-56548
- hfsplus: don't query the device logical block size multiple times
* CVE-url: https://ubuntu.com/security/CVE-2024-57850
- jffs2: Prevent rtime decompress memory corruption
* CVE-url: https://ubuntu.com/security/CVE-2024-49982
- aoe: fix the potential use-after-free problem in more places
* CVE-url: https://ubuntu.com/security/CVE-2024-47696
- RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
* CVE-url: https://ubuntu.com/security/CVE-2024-50074
- parport: Proper fix for array out-of-bounds access
* CVE-url: https://ubuntu.com/security/CVE-2025-21687
- vfio/platform: check the bounds of read/write syscalls
* CVE-url: https://ubuntu.com/security/CVE-2024-57889
- regmap: allow to disable all locking mechanisms
- pinctrl: mcp23s08: Fix sleeping in atomic context due to regmap locking
* CVE-url: https://ubuntu.com/security/CVE-2024-56539
- wifi: mwifiex: Fix memcpy() field-spanning write warning in
mwifiex_config_scan()
* CVE-url: https://ubuntu.com/security/CVE-2024-53680
- ipvs: fix UB due to uninitialized stack access in ip_vs_protocol_init()
* CVE-url: https://ubuntu.com/security/CVE-2024-56630
- ocfs2: free inode when ocfs2_get_init_inode() fails
* CVE-url: https://ubuntu.com/security/CVE-2024-53184
- um: ubd: Do not use drvdata in release
* CVE-url: https://ubuntu.com/security/CVE-2024-57884
- mm: vmscan: account for free pages to prevent infinite Loop in
throttle_direct_reclaim()
* CVE-url: https://ubuntu.com/security/CVE-2024-56597
- jfs: fix shift-out-of-bounds in dbSplit
* CVE-url: https://ubuntu.com/security/CVE-2025-21664
- dm thin: make get_first_thin use rcu-safe list first function
* CVE-url: https://ubuntu.com/security/CVE-2024-56594
- drm/amdgpu: set the right AMDGPU sg segment limitation
* CVE-url: https://ubuntu.com/security/CVE-2024-56681
- crypto: bcm - add error check in the ahash_hmac_init function
* CVE-url: https://ubuntu.com/security/CVE-2024-52332
- igb: Fix potential invalid memory access in igb_init_module()
* CVE-url: https://ubuntu.com/security/CVE-2024-56570
- ovl: Filter invalid inodes with missing lookup function
* CVE-url: https://ubuntu.com/security/CVE-2024-57912
- iio: pressure: zpa2326: fix information leak in triggered buffer
* CVE-url: https://ubuntu.com/security/CVE-2024-53172
- ubi: fastmap: Fix duplicate slab cache names while attaching
* CVE-url: https://ubuntu.com/security/CVE-2024-57929
- dm array: fix releasing a faulty array block twice in dm_array_cursor_end
* CVE-url: https://ubuntu.com/security/CVE-2024-56532
- ALSA: us122l: Use snd_card_free_when_closed() at disconnection
* CVE-url: https://ubuntu.com/security/CVE-2024-53183
- um: net: Do not use drvdata in release
* CVE-url: https://ubuntu.com/security/CVE-2024-56644
- net/ipv6: release expired exception dst cached in socket
* CVE-url: https://ubuntu.com/security/CVE-2024-57948
- mac802154: check local interfaces before deleting sdata list
* CVE-url: https://ubuntu.com/security/CVE-2024-57904
- iio: adc: at91: call input_free_device() on allocated iio_dev
* CVE-url: https://ubuntu.com/security/CVE-2024-56637
- netfilter: ipset: Hold module reference while requesting a module
* CVE-url: https://ubuntu.com/security/CVE-2024-56576
- media: i2c: tc358743: Fix crash in the probe error path when using polling
* CVE-url: https://ubuntu.com/security/CVE-2024-53214
- vfio/pci: Properly hide first-in-list PCIe extended capability
* CVE-url: https://ubuntu.com/security/CVE-2024-56700
- media: wl128x: Fix atomicity violation in fmc_send_cmd()
* CVE-url: https://ubuntu.com/security/CVE-2024-56531
- ALSA: caiaq: Use snd_card_free_when_closed() at disconnection
* CVE-url: https://ubuntu.com/security/CVE-2024-53194
- PCI: Fix use-after-free of slot->bus on hot remove
* CVE-url: https://ubuntu.com/security/CVE-2024-58055
- usb: gadget: f_tcm: Don't free command immediately
* CVE-url: https://ubuntu.com/security/CVE-2024-56619
- nilfs2: fix potential out-of-bounds memory access in nilfs_find_entry()
* CVE-url: https://ubuntu.com/security/CVE-2021-47636
- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
* CVE-url: https://ubuntu.com/security/CVE-2024-5317
- nfsd: make sure exp active before svc_export_show
* CVE-url: https://ubuntu.com/security/CVE-2024-53174
- SUNRPC: make sure cache entry active before cache_show
* CVE-url: https://ubuntu.com/security/CVE-2021-47219
- scsi: scsi_debug: Fix out-of-bound read in resp_report_tgtpgs()
* CVE-url: https://ubuntu.com/security/CVE-2024-50269
- usb: musb: sunxi: Fix accessing an released usb phy
* CVE-url: https://ubuntu.com/security/CVE-2024-57908
- iio: imu: kmx61: fix information leak in triggered buffer
References
Timeline
Published21 Oct 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2025-1744624441 · OSV
Track software like this
Free during beta