Update05/25/2025

USN-7521-1: Linux kernel vulnerabilities

Ubuntu Desktop
Canonical

Update from:
patrick-devicebase (expert)

USN-7521-1: Linux kernel vulnerabilities

Packages

linux - Linux kernel
linux-azure - Linux kernel for Microsoft Azure Cloud systems
linux-azure-6.11 - Linux kernel for Microsoft Azure cloud systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-6.11 - Linux kernel for Google Cloud Platform (GCP) systems
linux-hwe-6.11 - Linux hardware enablement (HWE) kernel
linux-oem-6.11 - Linux kernel for OEM systems
linux-raspi - Linux kernel for Raspberry Pi systems
linux-realtime - Linux kernel for Real-time systems

Details
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
x86 architecture;
Block layer subsystem;
Serial ATA and Parallel ATA drivers;
Drivers core;
Network block device driver;
Bluetooth drivers;
Character device driver;
TPM device driver;
Clock framework and drivers;
Hardware crypto device drivers;
FireWire subsystem;
EFI core;
Qualcomm firmware drivers;
GPIO subsystem;
GPU drivers;
HID subsystem;
I2C subsystem;
I3C subsystem;
InfiniBand drivers;
Input Device (Mouse) drivers;
IOMMU subsystem;
Multiple devices driver;
Media drivers;
NVIDIA Tegra memory controller driver;
Fastrpc Driver;
Network drivers;
Operating Performance Points (OPP) driver;
PCI subsystem;
x86 platform drivers;
PPS (Pulse Per Second) driver;
PTP clock framework;
Remote Processor subsystem;
Real Time Clock drivers;
S/390 drivers;
SCSI subsystem;
QCOM SoC drivers;
SPI subsystem;
Media staging drivers;
Trusted Execution Environment drivers;
TTY drivers;
UFS subsystem;
USB Device Class drivers;
USB core drivers;
USB Gadget drivers;
USB Host Controller drivers;
Framebuffer layer;
File systems infrastructure;
BTRFS file system;
Ceph distributed file system;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
Overlay file system;
SMB network file system;
UBI file system;
BPF subsystem;
Timer subsystem;
KVM subsystem;
Networking core;
ptr_ring data structure definitions;
Networking subsytem;
Amateur Radio drivers;
L3 Master device support module;
TCP network protocol;
XFRM subsystem;
Tracing infrastructure;
io_uring subsystem;
Process Accounting mechanism;
Perf events;
Padata parallel execution mechanism;
printk logging mechanism;
Scheduler infrastructure;
Workqueue subsystem;
Memory management;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netfilter;
NFC subsystem;
Open vSwitch;
Rose network layer;
RxRPC session sockets;
Network traffic control;
Wireless networking;
Key management;
Landlock security;
Linux Security Modules (LSM) Framework;
Tomoyo security module;
SoC audio core drivers;
SOF drivers

Update instructions
After a standard system update you need to reboot your computer to make all the necessary changes.

The problem can be corrected by updating your system to the following package versions:

24.10 oracular

linux-image-6.11.0-1010-realtime – 6.11.0-1010.10
linux-image-6.11.0-1013-raspi – 6.11.0-1013.13
linux-image-6.11.0-1015-azure – 6.11.0-1015.15
linux-image-6.11.0-1015-azure-fde – 6.11.0-1015.15
linux-image-6.11.0-1015-gcp – 6.11.0-1015.15
linux-image-6.11.0-1015-gcp-64k – 6.11.0-1015.15
linux-image-6.11.0-26-generic – 6.11.0-26.26
linux-image-6.11.0-26-generic-64k – 6.11.0-26.26
linux-image-azure – 6.11.0-1015.15
linux-image-azure-fde – 6.11.0-1015.15
linux-image-gcp – 6.11.0-1015.15
linux-image-gcp-64k – 6.11.0-1015.15
linux-image-generic – 6.11.0-26.26
linux-image-generic-64k – 6.11.0-26.26
linux-image-raspi – 6.11.0-1013.13
linux-image-realtime – 6.11.0-1010.10
linux-image-virtual – 6.11.0-26.26

24.04 noble

linux-image-6.11.0-1015-azure – 6.11.0-1015.15~24.04.1
linux-image-6.11.0-1015-azure-fde – 6.11.0-1015.15~24.04.1
linux-image-6.11.0-1015-gcp – 6.11.0-1015.15~24.04.1
linux-image-6.11.0-1015-gcp-64k – 6.11.0-1015.15~24.04.1
linux-image-6.11.0-1022-oem – 6.11.0-1022.22
linux-image-6.11.0-26-generic – 6.11.0-26.26~24.04.1
linux-image-6.11.0-26-generic-64k – 6.11.0-26.26~24.04.1
linux-image-azure – 6.11.0-1015.15~24.04.1
linux-image-azure-fde – 6.11.0-1015.15~24.04.1
linux-image-gcp – 6.11.0-1015.15~24.04.1
linux-image-gcp-64k – 6.11.0-1015.15~24.04.1
linux-image-generic-64k-hwe-24.04 – 6.11.0-26.26~24.04.1
linux-image-generic-hwe-24.04 – 6.11.0-26.26~24.04.1
linux-image-oem-24.04b – 6.11.0-1022.22
linux-image-virtual-hwe-24.04 – 6.11.0-26.26~24.04.1