Multiple security vulnerabilities were discovered in the Linux kernel affecting numerous subsystems and architectures, including AMD processors that may allow local attackers to infer data from previous stores, potentially leaking privileged information. These issues affect a wide range of kernel components and drivers. Fixes have been released in updated Linux kernel versions.
Multiple security vulnerabilities were discovered and fixed in the Linux kernel for Azure cloud systems, affecting numerous subsystems and architectures. These flaws could potentially allow an attacker to compromise the system. The update addresses issues across a wide range of kernel components including architectures (ARM64, PowerPC, S390, x86), device drivers, filesystems, networking, security modules, and more. Users of linux-azure, linux-azure-6.8, and linux-azure-nvidia kernels should update to the fixed versions to mitigate these vulnerabilities.
Multiple vulnerabilities in libssh were discovered by Ronald Crane affecting base64 conversions, the privatekey_from_file() function, and memory operations in the sftp server. These issues could allow an attacker to cause libssh to crash, resulting in denial of service, or potentially execute arbitrary code. Fixes have been released for affected Ubuntu package versions.
Multiple vulnerabilities in SQLite were discovered involving incorrect handling of aggregate terms and certain argument values to sqlite3_db_config(). These issues could allow an attacker to cause SQLite to crash (denial of service) or potentially execute arbitrary code. Fixes have been released for Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, and were previously applied to 20.04 LTS.
Multiple security vulnerabilities were discovered in the Linux kernel used in the linux-gke package affecting numerous subsystems and architectures. These flaws could potentially allow an attacker to compromise the system. The issues impact a wide range of kernel components including architectures (ARM64, PowerPC, x86), device drivers, filesystems, networking protocols, security modules, and more. A patch fixing these vulnerabilities is available in version 5.15.0-1081.87.