Known vulnerabilities in linux-azure-fips (Ubuntu package) - page 48
Vendor:
Canonical Ltd.
Software:
linux-azure-fips (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:linux-azure-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
3168
Public exploits:
20
Known exploited (KEV):
3
Breakdown by Severity Chart
5.15.0.1117.102
5.15.0-1117.126+fips1
5.15.0.1116.101
5.15.0-1116.125+fips1
6.8.0-1063.71+fips2
6.8.0-134.134+fips1
6.8.0-1062.69+fips1
6.8.0-1059.65+fips1
6.8.0-1054.60+fips1
5.15.0.1110.95
5.15.0-1110.119+fips1
5.15.0.1109.94
5.15.0-1109.118+fips1
6.8.0-1052.58+fips1
5.4.0.1160.97
5.4.0-1160.166+fips1
6.8.0-1047.53+fips1
4.15.0.2106.102
4.15.0-2106.112
6.8.0-1046.52+fips1
6.8.0-1044.50+fips1
5.4.0.1157.94
5.4.0-1157.164+fips1
4.15.0.2104.100
4.15.0-2104.110
5.15.0.1101.86
5.15.0-1101.110+fips1
5.4.0.1155.92
5.4.0-1155.162+fips1
5.15.0.1097.82
5.15.0-1097.106+fips1
4.15.0.2102.98
4.15.0-2102.108
5.15.0.1096.81
5.15.0-1096.105+fips1
4.15.0.2085.83
4.15.0.1139.136
4.15.0.2101.97
4.15.0-2101.107
4.15.0-2085.91
4.15.0-1139.150
5.15.0.1094.79
5.15.0-1094.103+fips1
5.4.0.1121.118
5.4.0.1153.90
5.4.0-1153.160+fips1
5.4.0-1121.131
5.15.0.1091.76
5.15.0-1091.100+fips1
4.15.0.2098.94
4.15.0-2098.104
5.15.0.1089.74
5.15.0-1089.98+fips1
5.4.0.1151.88
5.4.0-1151.158+fips1
Vulnerabilities (3168)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124551 - Out-of-bounds write CVE-2026-23315 |
CWE-787 | Medium | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325147 SB20260513116 SB2026051411 and 16 more |
||
| #VU124540 - Resource exhaustion CVE-2026-23313 |
CWE-400 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325145 SB20260513116 SB20260522107 and 17 more |
||
| #VU124539 - Uncontrolled Recursion CVE-2026-23312 |
CWE-674 | Medium | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325144 SB20260513116 SB2026051411 and 32 more |
||
| #VU124536 - Incomplete Blacklist to Cross-Site Scripting CVE-2026-23321 |
CWE-692 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325140 SB2026041129 SB2026041130 and 19 more |
||
| #VU124530 - Use After Free CVE-2026-23319 |
CWE-416 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325138 SB2026042426 SB20260430100 and 18 more |
||
| #VU124529 - Out-of-bounds read CVE-2026-23318 |
CWE-125 | Medium | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325137 SB2026050126 SB20260513116 and 31 more |
||
| #VU124528 - NULL Pointer Dereference CVE-2026-23317 |
CWE-476 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325135 SB2026042426 SB2026042427 and 36 more |
||
| #VU124521 - Out-of-bounds write CVE-2026-23325 |
CWE-787 | Medium | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325130 SB20260513116 SB2026060229 and 15 more |
||
| #VU124520 - Improper Resource Shutdown or Release CVE-2026-23324 |
CWE-404 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325129 SB20260513116 SB2026051411 and 29 more |
||
| #VU124517 - Improper input validation CVE-2026-23334 |
CWE-20 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325126 SB20260513116 SB20260721108 and 13 more |
||
| #VU124513 - Improper Resource Shutdown or Release CVE-2026-23330 |
CWE-404 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325122 SB20260513116 SB20260721108 and 13 more |
||
| #VU124511 - Use After Free CVE-2026-23340 |
CWE-416 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325120 SB20260513116 SB2026051411 and 33 more |
||
| #VU124510 - Missing release of memory after effective lifetime CVE-2026-23339 |
CWE-401 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325119 SB20260513116 SB2026051411 and 29 more |
||
| #VU124507 - Use After Free CVE-2026-23336 |
CWE-416 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325116 SB20260513116 SB2026051411 and 29 more |
||
| #VU124506 - Exposure of sensitive information to an unauthorized actor CVE-2026-23335 |
CWE-200 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325115 SB20260513116 SB2026051411 and 29 more |
||
| #VU124505 - Resource exhaustion CVE-2026-23347 |
CWE-400 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325110 SB20260513116 SB20260721108 and 13 more |
||
| #VU124501 - Integer overflow CVE-2026-23343 |
CWE-190 | Low | 6.8.0-1063.71+fips2 | 25.03.2026 |
SB20260325104 SB2026041129 SB2026041130 and 19 more |
||
| #VU124495 - Type conversion CVE-2026-23352 |
CWE-704 | Low | 5.15.0-1117.126+fips1, 5.15.0.1117.102, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB2026032598 SB2026040337 SB20260513116 and 32 more |
||
| #VU124486 - On-Chip Debug and Test Interface With Improper Access Control CVE-2026-23357 |
CWE-1191 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB2026032589 SB20260513116 SB2026051411 and 29 more |
||
| #VU124485 - Unchecked Return Value to NULL Pointer Dereference CVE-2026-23356 |
CWE-690 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-1063.71+fips2 | 25.03.2026 |
SB2026032588 SB20260513116 SB2026051411 and 27 more |
Showing elements 941 - 960 out of 3168