Known vulnerabilities in linux-aws-fips (Ubuntu package) - page 56

Software CPE: cpe:2.3:o:canonical:linux-aws-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 1755
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting linux-aws-fips (Ubuntu package) linux-aws-fips (Ubuntu package) is affected by 1755 known vulnerabilities: 6 high, 4 medium, 1745 low Critical High Medium Low

Vulnerabilities (1755)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117660 - Improper input validation
CVE-2025-40019
CWE-20 Low
Available
No
5.4.0.1128.125, 5.4.0-1128.138, 5.4.0.1154.101, 5.4.0-1154.164+fips1, 5.4.0.1157.99, 5.4.0-1157.166+fips1, 5.15.0.168.96, 5.15.0-168.178+fips1, 5.15.0.1099.89, 5.15.0.1099.95, 5.15.0-1099.106+fips1, 5.15.0-1099.108+fips1, 5.15.0.1103.88, 5.15.0-1103.112+fips1, 6.8.0-94.96+fips1, 6.8.0-1045.47+fips1, 6.8.0-1046.49+fips1 26.10.2025 SB2025102607
SB20251031129
SB20251031132
and 40 more
#VU116055 - Improper input validation
CVE-2025-39880
CWE-20 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1, 6.8.0-106.106+fips1, 6.8.0-1050.53+fips1, 6.8.0-1052.55+fips1 23.09.2025 SB2025092385
SB2025110767
SB2025110768
and 28 more
#VU116045 - NULL Pointer Dereference
CVE-2025-39876
CWE-476 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1, 6.8.0-106.106+fips1, 6.8.0-1050.53+fips1, 6.8.0-1052.55+fips1 23.09.2025 SB2025092374
SB2025111182
SB2025111858
and 29 more
#VU116043 - Out-of-bounds read
CVE-2025-39869
CWE-125 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1, 6.8.0-106.106+fips1, 6.8.0-1050.53+fips1, 6.8.0-1052.55+fips1 23.09.2025 SB2025092371
SB20251015148
SB2025101634
and 33 more
#VU116041 - Use After Free
CVE-2025-39873
CWE-416 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1, 6.8.0-106.106+fips1, 6.8.0-1050.53+fips1, 6.8.0-1052.55+fips1 23.09.2025 SB2025092368
SB20251015148
SB20251017142
and 28 more
#VU114963 - Use After Free
CVE-2025-39698
CWE-416 Low
No
No
6.8.0-94.96+fips1, 6.8.0-1045.47+fips1, 6.8.0-1046.49+fips1 08.09.2025 SB2025090896
SB2025092303
SB2025092902
and 13 more
#VU114290 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-38561
CWE-362 Medium
No
No
5.15.0.168.96, 5.15.0-168.178+fips1, 5.15.0.1099.89, 5.15.0.1099.95, 5.15.0-1099.106+fips1, 5.15.0-1099.108+fips1, 5.15.0.1103.88, 5.15.0-1103.112+fips1, 6.8.0-94.96+fips1, 6.8.0-1045.47+fips1, 6.8.0-1046.49+fips1 20.08.2025 SB2025082091
SB2025102407
SB2025112126
and 21 more
#VU108300 - NULL Pointer Dereference
CVE-2025-23143
CWE-476 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1, 6.8.0-106.106+fips1, 6.8.0-1050.53+fips1, 6.8.0-1052.55+fips1 02.05.2025 SB20250502205
SB2025062462
SB2025062655
and 26 more
#VU107656 - Missing release of memory after effective lifetime
CVE-2025-22058
CWE-401 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1 22.04.2025 SB2025042234
SB2025042801
SB2025050998
and 58 more
#VU105674 - Resource Management Errors
CVE-2025-21861
CWE-399 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1 12.03.2025 SB2025031273
SB2025040917
SB2025040929
and 31 more
#VU105006 - NULL Pointer Dereference
CVE-2024-58011
CWE-476 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1 27.02.2025 SB20250227103
SB2025040917
SB2025040929
and 31 more
#VU104922 - Improper input validation
CVE-2022-49698
CWE-20 Low
No
No
5.4.0.1128.125, 5.4.0-1128.138, 5.4.0.1154.101, 5.4.0-1154.164+fips1, 5.4.0.1157.99, 5.4.0-1157.166+fips1 27.02.2025 SB2025022719
SB20260202102
SB20260202103
and 5 more
#VU102071 - Use After Free
CVE-2024-56538
CWE-416 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1 30.12.2024 SB2024123095
SB2025011046
SB2025011047
and 33 more
#VU102021 - Use After Free
CVE-2024-56606
CWE-416 Low
No
No
4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132 30.12.2024 SB2024123045
SB2025020348
SB2025020351
and 53 more
#VU102008 - Use After Free
CVE-2024-56756
CWE-416 Low
No
No
4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132 30.12.2024 SB2024123032
SB2025011046
SB2025011048
and 52 more
#VU101122 - Improper input validation
CVE-2024-53114
CWE-20 Low
No
No
5.15.0.170.97, 5.15.0-170.180+fips1, 5.15.0.1100.90, 5.15.0.1100.96, 5.15.0-1100.107+fips1, 5.15.0-1100.109+fips1 03.12.2024 SB2024120344
SB2024121502
SB2024121504
and 38 more
#VU100150 - Resource Management Errors
CVE-2024-50195
CWE-399 Low
No
No
4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132 08.11.2024 SB2024110874
SB2024112268
SB2024112949
and 63 more
#VU99144 - Resource Management Errors
CVE-2022-48986
CWE-399 Low
No
No
4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132 22.10.2024 SB20241022256
SB2024110169
SB2026020297
and 4 more
#VU99017 - Improper Locking
CVE-2024-49959
CWE-667 Low
No
No
4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132 22.10.2024 SB20241022129
SB2024110169
SB2024110170
and 58 more
#VU90450 - Missing release of memory after effective lifetime
CVE-2024-27078
CWE-401 Low
No
No
4.15.0.1143.140, 4.15.0-1143.155, 4.15.0.2126.120, 4.15.0-2126.132 31.05.2024 SB20240531359
SB2024070838
SB2024070839
and 33 more


Showing elements 1101 - 1120 out of 1755