Multiple security vulnerabilities were discovered in the Linux kernel version linux-aws-6.14, including issues affecting various CPU architectures and numerous kernel subsystems and drivers. Notably, some AMD processors may allow a local attacker to infer data from previous stores, potentially leaking privileged information. These vulnerabilities could allow an attacker to compromise the system. A patch is available in version 6.14.0-1015.15~24.04.1.
Multiple security vulnerabilities were discovered and fixed in the Linux kernel for Azure cloud systems, affecting numerous subsystems and architectures. These flaws could potentially allow an attacker to compromise the system. The update addresses issues across a wide range of kernel components including architectures (ARM64, PowerPC, S390, x86), device drivers, filesystems, networking, security modules, and more. Users of linux-azure, linux-azure-6.8, and linux-azure-nvidia kernels should update to the fixed versions to mitigate these vulnerabilities.
Multiple vulnerabilities in libssh were discovered by Ronald Crane affecting base64 conversions, the privatekey_from_file() function, and memory operations in the sftp server. These issues could allow an attacker to cause libssh to crash, resulting in denial of service, or potentially execute arbitrary code. Fixes have been released for affected Ubuntu package versions.
Multiple vulnerabilities in SQLite were discovered involving incorrect handling of aggregate terms and certain argument values to sqlite3_db_config(). These issues could allow an attacker to cause SQLite to crash (denial of service) or potentially execute arbitrary code. Fixes have been released for Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, and were previously applied to 20.04 LTS.
Multiple security vulnerabilities were discovered in the Linux kernel used in the linux-gke package affecting numerous subsystems and architectures. These flaws could potentially allow an attacker to compromise the system. The issues impact a wide range of kernel components including architectures (ARM64, PowerPC, x86), device drivers, filesystems, networking protocols, security modules, and more. A patch fixing these vulnerabilities is available in version 5.15.0-1081.87.