Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux Kernel Vulnerabilities Expose System Data
published 1 year ago
Summary
This update fixes multiple security issues in the Linux kernel, which could allow an attacker to access sensitive system information or compromise the system. It's essential to apply this update to prevent potential security breaches. Affected systems should be updated as soon as possible to ensure the latest security patches are in place.
What to do
- Update canonical linux-iot to version 5.4.0-1051.54.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot |
< 5.4.0-1051.54 Fix: upgrade to 5.4.0-1051.54
|
Original advisory text
linux-iot vulnerabilities
It was discovered that the CIFS network file system implementation in the
Linux kernel did not properly verify the target namespace when handling
upcalls. An attacker could use this to expose sensitive information.
(CVE-2025-2312)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- x86 architecture;
- Block layer subsystem;
- Drivers core;
- Network block device driver;
- Character device driver;
- iSCSI Boot Firmware Table Attributes driver;
- GPU drivers;
- HID subsystem;
- InfiniBand drivers;
- Media drivers;
- MemoryStick subsystem;
- Network drivers;
- NTB driver;
- PCI subsystem;
- PPS (Pulse Per Second) driver;
- PTP clock framework;
- RapidIO drivers;
- Real Time Clock drivers;
- SCSI subsystem;
- SLIMbus drivers;
- QCOM SoC drivers;
- Trusted Execution Environment drivers;
- Thermal drivers;
- USB DSL drivers;
- USB Device Class drivers;
- USB core drivers;
- USB Gadget drivers;
- USB Host Controller drivers;
- Renesas USBHS Controller drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- JFS file system;
- NILFS2 file system;
- UBI file system;
- KVM subsystem;
- L3 Master device support module;
- Netfilter;
- Process Accounting mechanism;
- printk logging mechanism;
- Scheduler infrastructure;
- Tracing infrastructure;
- Memory management;
- 802.1Q VLAN protocol;
- Asynchronous Transfer Mode (ATM) subsystem;
- B.A.T.M.A.N. meshing protocol;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- Tomoyo security module;
- USB sound devices;
(CVE-2025-21753, CVE-2025-22071, CVE-2025-21898, CVE-2025-22073,
CVE-2024-58072, CVE-2025-21905, CVE-2024-57986, CVE-2025-21749,
CVE-2024-58020, CVE-2025-21806, CVE-2025-21917, CVE-2025-21719,
CVE-2025-21835, CVE-2025-21735, CVE-2025-21922, CVE-2025-21781,
CVE-2025-21904, CVE-2025-39735, CVE-2025-21715, CVE-2025-22007,
CVE-2024-58010, CVE-2024-58052, CVE-2025-22021, CVE-2025-21996,
CVE-2025-22086, CVE-2025-21971, CVE-2023-53034, CVE-2025-21721,
CVE-2025-22035, CVE-2025-21722, CVE-2025-22045, CVE-2025-21935,
CVE-2024-58069, CVE-2024-58017, CVE-2025-21823, CVE-2025-21959,
CVE-2024-26996, CVE-2024-58058, CVE-2025-21846, CVE-2024-58009,
CVE-2025-22018, CVE-2025-21926, CVE-2024-57980, CVE-2025-21728,
CVE-2025-21909, CVE-2025-21992, CVE-2024-26689, CVE-2024-57973,
CVE-2025-21772, CVE-2024-56599, CVE-2025-21791, CVE-2025-21718,
CVE-2025-21866, CVE-2025-21708, CVE-2024-58055, CVE-2025-21957,
CVE-2025-37937, CVE-2025-21704, CVE-2024-58093, CVE-2025-21877,
CVE-2025-22054, CVE-2023-52664, CVE-2025-21776, CVE-2024-50055,
CVE-2025-21765, CVE-2025-21862, CVE-2025-21865, CVE-2024-58014,
CVE-2021-47211, CVE-2025-21956, CVE-2025-21736, CVE-2021-47191,
CVE-2025-21647, CVE-2025-21920, CVE-2024-58051, CVE-2025-21782,
CVE-2025-21934, CVE-2023-52741, CVE-2025-38637, CVE-2025-21925,
CVE-2025-21763, CVE-2025-22063, CVE-2024-26982, CVE-2025-23136,
CVE-2024-57979, CVE-2025-22079, CVE-2025-22005, CVE-2025-21785,
CVE-2025-21859, CVE-2024-58085, CVE-2025-21764, CVE-2024-53168,
CVE-2024-58002, CVE-2025-21928, CVE-2025-21914, CVE-2024-56551,
CVE-2024-58007, CVE-2024-58001, CVE-2024-57981, CVE-2024-58083,
CVE-2025-21762, CVE-2025-21910, CVE-2025-21760, CVE-2025-21948,
CVE-2025-21993, CVE-2024-58090, CVE-2025-21991, CVE-2025-21848,
CVE-2025-21811, CVE-2024-58071, CVE-2025-21787, CVE-2025-21731,
CVE-2025-21814, CVE-2025-22004, CVE-2025-21744, CVE-2025-21858,
CVE-2025-21916, CVE-2023-52927, CVE-2025-22020, CVE-2025-21871,
CVE-2025-21761, CVE-2024-58063, CVE-2024-57977)
Linux kernel did not properly verify the target namespace when handling
upcalls. An attacker could use this to expose sensitive information.
(CVE-2025-2312)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- x86 architecture;
- Block layer subsystem;
- Drivers core;
- Network block device driver;
- Character device driver;
- iSCSI Boot Firmware Table Attributes driver;
- GPU drivers;
- HID subsystem;
- InfiniBand drivers;
- Media drivers;
- MemoryStick subsystem;
- Network drivers;
- NTB driver;
- PCI subsystem;
- PPS (Pulse Per Second) driver;
- PTP clock framework;
- RapidIO drivers;
- Real Time Clock drivers;
- SCSI subsystem;
- SLIMbus drivers;
- QCOM SoC drivers;
- Trusted Execution Environment drivers;
- Thermal drivers;
- USB DSL drivers;
- USB Device Class drivers;
- USB core drivers;
- USB Gadget drivers;
- USB Host Controller drivers;
- Renesas USBHS Controller drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- JFS file system;
- NILFS2 file system;
- UBI file system;
- KVM subsystem;
- L3 Master device support module;
- Netfilter;
- Process Accounting mechanism;
- printk logging mechanism;
- Scheduler infrastructure;
- Tracing infrastructure;
- Memory management;
- 802.1Q VLAN protocol;
- Asynchronous Transfer Mode (ATM) subsystem;
- B.A.T.M.A.N. meshing protocol;
- Bluetooth subsystem;
- Networking core;
- IPv4 networking;
- IPv6 networking;
- Logical Link layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Sun RPC protocol;
- Wireless networking;
- Tomoyo security module;
- USB sound devices;
(CVE-2025-21753, CVE-2025-22071, CVE-2025-21898, CVE-2025-22073,
CVE-2024-58072, CVE-2025-21905, CVE-2024-57986, CVE-2025-21749,
CVE-2024-58020, CVE-2025-21806, CVE-2025-21917, CVE-2025-21719,
CVE-2025-21835, CVE-2025-21735, CVE-2025-21922, CVE-2025-21781,
CVE-2025-21904, CVE-2025-39735, CVE-2025-21715, CVE-2025-22007,
CVE-2024-58010, CVE-2024-58052, CVE-2025-22021, CVE-2025-21996,
CVE-2025-22086, CVE-2025-21971, CVE-2023-53034, CVE-2025-21721,
CVE-2025-22035, CVE-2025-21722, CVE-2025-22045, CVE-2025-21935,
CVE-2024-58069, CVE-2024-58017, CVE-2025-21823, CVE-2025-21959,
CVE-2024-26996, CVE-2024-58058, CVE-2025-21846, CVE-2024-58009,
CVE-2025-22018, CVE-2025-21926, CVE-2024-57980, CVE-2025-21728,
CVE-2025-21909, CVE-2025-21992, CVE-2024-26689, CVE-2024-57973,
CVE-2025-21772, CVE-2024-56599, CVE-2025-21791, CVE-2025-21718,
CVE-2025-21866, CVE-2025-21708, CVE-2024-58055, CVE-2025-21957,
CVE-2025-37937, CVE-2025-21704, CVE-2024-58093, CVE-2025-21877,
CVE-2025-22054, CVE-2023-52664, CVE-2025-21776, CVE-2024-50055,
CVE-2025-21765, CVE-2025-21862, CVE-2025-21865, CVE-2024-58014,
CVE-2021-47211, CVE-2025-21956, CVE-2025-21736, CVE-2021-47191,
CVE-2025-21647, CVE-2025-21920, CVE-2024-58051, CVE-2025-21782,
CVE-2025-21934, CVE-2023-52741, CVE-2025-38637, CVE-2025-21925,
CVE-2025-21763, CVE-2025-22063, CVE-2024-26982, CVE-2025-23136,
CVE-2024-57979, CVE-2025-22079, CVE-2025-22005, CVE-2025-21785,
CVE-2025-21859, CVE-2024-58085, CVE-2025-21764, CVE-2024-53168,
CVE-2024-58002, CVE-2025-21928, CVE-2025-21914, CVE-2024-56551,
CVE-2024-58007, CVE-2024-58001, CVE-2024-57981, CVE-2024-58083,
CVE-2025-21762, CVE-2025-21910, CVE-2025-21760, CVE-2025-21948,
CVE-2025-21993, CVE-2024-58090, CVE-2025-21991, CVE-2025-21848,
CVE-2025-21811, CVE-2024-58071, CVE-2025-21787, CVE-2025-21731,
CVE-2025-21814, CVE-2025-22004, CVE-2025-21744, CVE-2025-21858,
CVE-2025-21916, CVE-2023-52927, CVE-2025-22020, CVE-2025-21871,
CVE-2025-21761, CVE-2024-58063, CVE-2024-57977)
References
- https://ubuntu.com/security/notices/USN-7640-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2021-47191 Third Party Advisory
- https://ubuntu.com/security/CVE-2021-47211 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52664 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52741 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-52927 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-53034 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26689 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26982 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-26996 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-50055 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-53168 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-56551 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-56599 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57973 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57977 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57979 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57980 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57981 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-57986 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58001 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58002 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58007 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58009 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58010 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58014 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58017 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58020 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58051 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58052 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58055 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58058 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58063 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58069 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58071 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58072 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58083 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58085 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58090 Third Party Advisory
- https://ubuntu.com/security/CVE-2024-58093 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-2312 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21647 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21704 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21708 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21715 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21718 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21719 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21721 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21722 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21728 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21731 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21735 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21736 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21744 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21749 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21753 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21760 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21761 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21762 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21763 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21764 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21765 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21772 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21776 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21781 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21782 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21785 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21787 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21791 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21806 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21811 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21814 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21823 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21835 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21846 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21848 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21858 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21859 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21862 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21865 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21866 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21871 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21877 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21898 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21904 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21905 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21909 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21910 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21914 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21916 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21917 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21920 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21922 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21925 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21926 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21928 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21934 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21935 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21948 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21956 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21957 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21959 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21971 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21991 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21992 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21993 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21996 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22004 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22005 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22007 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22018 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22020 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22021 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22035 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22045 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22054 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22063 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22071 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22073 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22079 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-22086 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-23136 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37937 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38637 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-39735 Third Party Advisory
Timeline
Published16 Jul 2025
Updated5 Jul 2026
First seen5 Jul 2026
Sources
USN-7640-1 · OSV
Track software like this
Free during beta