Known vulnerabilities in linux-aws-fips (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:linux-aws-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 1755
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting linux-aws-fips (Ubuntu package) linux-aws-fips (Ubuntu package) is affected by 1755 known vulnerabilities: 6 high, 4 medium, 1745 low Critical High Medium Low

Vulnerabilities (1755)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122865 - Use After Free
CVE-2026-23209
CWE-416 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 16.02.2026 SB2026021649
SB2026021911
SB2026031305
and 111 more
#VU122003 - Resource Management Errors
CVE-2025-71149
CWE-399 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 24.01.2026 SB2026012405
SB2026020972
SB2026020973
and 25 more
#VU121980 - Missing release of memory after effective lifetime
CVE-2025-71151
CWE-401 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 23.01.2026 SB20260123101
SB2026020690
SB2026020691
and 21 more
#VU121979 - Missing release of memory after effective lifetime
CVE-2025-71150
CWE-401 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 23.01.2026 SB20260123100
SB2026020972
SB2026020973
and 34 more
#VU121978 - Missing release of memory after effective lifetime
CVE-2025-71148
CWE-401 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 23.01.2026 SB2026012399
SB2026020972
SB2026032361
and 20 more
#VU121974 - Missing release of memory after effective lifetime
CVE-2025-71153
CWE-401 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 23.01.2026 SB2026012395
SB2026020972
SB2026041671
and 18 more
#VU121523 - Resource Management Errors
CVE-2025-71119
CWE-399 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114180
SB2026020690
SB2026020691
and 26 more
#VU121518 - Resource Management Errors
CVE-2025-71144
CWE-399 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114175
SB2026020972
SB2026031305
and 16 more
#VU121516 - Integer overflow
CVE-2025-71109
CWE-190 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114173
SB2026020972
SB2026041671
and 20 more
#VU121513 - Error Handling
CVE-2025-71141
CWE-388 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114170
SB2026021185
SB2026021261
and 21 more
#VU121510 - Improper input validation
CVE-2025-71122
CWE-20 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114167
SB2026020972
SB2026041671
and 18 more
#VU121505 - Improper Locking
CVE-2025-71126
CWE-667 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114162
SB2026020972
SB2026020973
and 21 more
#VU121501 - NULL Pointer Dereference
CVE-2025-71130
CWE-476 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114158
SB2026020972
SB2026020973
and 24 more
#VU121498 - NULL Pointer Dereference
CVE-2025-71140
CWE-476 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114155
SB2026020972
SB2026041671
and 18 more
#VU121497 - NULL Pointer Dereference
CVE-2025-71138
CWE-476 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114152
SB2026020972
SB2026021185
and 21 more
#VU121496 - NULL Pointer Dereference
CVE-2025-71135
CWE-476 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114151
SB2026020972
SB2026021185
and 21 more
#VU121490 - Out-of-bounds read
CVE-2025-71143
CWE-125 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114144
SB2026020972
SB2026021185
and 21 more
#VU121486 - Missing release of memory after effective lifetime
CVE-2025-71123
CWE-401 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 14.01.2026 SB20260114139
SB2026020972
SB2026020973
and 24 more
#VU109619 - Improper Verification of Cryptographic Signature
CVE-2024-36347
CWE-347 Low
No
No
6.8.0-110.110+fips2, 6.8.0-1052.55+fips1, 6.8.0-1054.57+fips1 21.05.2025 SB20250521149
SB2025052618
SB2025071509
and 20 more
#VU104619 - NULL Pointer Dereference
CVE-2022-49046
CWE-476 Low
No
No
5.4.0.1131.128, 5.4.0-1131.141, 5.4.0.1157.104, 5.4.0-1157.167+fips1, 5.4.0.1160.102, 5.4.0-1160.169+fips1, 5.4.0.1161.97, 5.4.0-1161.167+fips1 26.02.2025 SB20250226437
SB20250416110
SB2025052216
and 5 more


Showing elements 1 - 20 out of 1755