Known vulnerabilities in linux-azure-fips (Ubuntu package) - page 65
Vendor:
Canonical Ltd.
Software:
linux-azure-fips (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:linux-azure-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
3168
Public exploits:
20
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.15.0.1117.102
5.15.0-1117.126+fips1
5.15.0.1116.101
5.15.0-1116.125+fips1
6.8.0-1063.71+fips2
6.8.0-134.134+fips1
6.8.0-1062.69+fips1
6.8.0-1059.65+fips1
6.8.0-1054.60+fips1
5.15.0.1110.95
5.15.0-1110.119+fips1
5.15.0.1109.94
5.15.0-1109.118+fips1
6.8.0-1052.58+fips1
5.4.0.1160.97
5.4.0-1160.166+fips1
6.8.0-1047.53+fips1
4.15.0.2106.102
4.15.0-2106.112
6.8.0-1046.52+fips1
6.8.0-1044.50+fips1
5.4.0.1157.94
5.4.0-1157.164+fips1
4.15.0.2104.100
4.15.0-2104.110
5.15.0.1101.86
5.15.0-1101.110+fips1
5.4.0.1155.92
5.4.0-1155.162+fips1
5.15.0.1097.82
5.15.0-1097.106+fips1
4.15.0.2102.98
4.15.0-2102.108
5.15.0.1096.81
5.15.0-1096.105+fips1
4.15.0.2085.83
4.15.0.1139.136
4.15.0.2101.97
4.15.0-2101.107
4.15.0-2085.91
4.15.0-1139.150
5.15.0.1094.79
5.15.0-1094.103+fips1
5.4.0.1121.118
5.4.0.1153.90
5.4.0-1153.160+fips1
5.4.0-1121.131
5.15.0.1091.76
5.15.0-1091.100+fips1
4.15.0.2098.94
4.15.0-2098.104
5.15.0.1089.74
5.15.0-1089.98+fips1
5.4.0.1151.88
5.4.0-1151.158+fips1
Vulnerabilities (3168)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU132651 - Improper control of a resource through its lifetime CVE-2025-71304 |
CWE-664 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 28.05.2026 |
SB20260528239 SB2026070284 SB2026070309 and 19 more |
||
| #VU132643 - Integer overflow CVE-2025-71305 |
CWE-190 | Low | 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 28.05.2026 |
SB20260528231 SB2026070284 SB2026070309 and 10 more |
||
| #VU124209 - NULL Pointer Dereference CVE-2026-23242 |
CWE-476 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 20.03.2026 |
SB20260320115 SB2026042426 SB20260430100 and 24 more |
||
| #VU124204 - Out-of-bounds read CVE-2026-23243 |
CWE-125 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 20.03.2026 |
SB20260320109 SB2026040337 SB20260415174 and 72 more |
||
| #VU124199 - NULL Pointer Dereference CVE-2026-23249 |
CWE-476 | Low | 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 20.03.2026 |
SB20260320104 SB20260513116 SB2026070284 and 9 more |
||
| #VU124081 - Insufficient Logging CVE-2026-23241 |
CWE-778 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 17.03.2026 |
SB2026031750 SB2026070284 SB2026070309 and 20 more |
||
| #VU123547 - Memory corruption CVE-2026-23233 |
CWE-119 | Low | 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 04.03.2026 |
SB2026030465 SB2026031306 SB2026070284 and 9 more |
||
| #VU123546 - Error Handling CVE-2026-23238 |
CWE-388 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 04.03.2026 |
SB2026030464 SB2026031305 SB2026031306 and 22 more |
||
| #VU123543 - NULL Pointer Dereference CVE-2026-23237 |
CWE-476 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 04.03.2026 |
SB2026030461 SB2026031305 SB2026031306 and 27 more |
||
| #VU123542 - Out-of-bounds read CVE-2026-23235 |
CWE-125 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 04.03.2026 |
SB2026030460 SB2026031305 SB2026031306 and 22 more |
||
| #VU123541 - Use After Free CVE-2026-23234 |
CWE-416 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 04.03.2026 |
SB2026030459 SB2026031305 SB2026031306 and 21 more |
||
| #VU123540 - Missing release of memory after effective lifetime CVE-2026-23236 |
CWE-401 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 04.03.2026 |
SB2026030458 SB2026031305 SB2026031306 and 24 more |
||
| #VU123063 - Improper input validation CVE-2026-23230 |
CWE-20 | Low | 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 19.02.2026 |
SB2026021908 SB2026021911 SB2026031305 and 13 more |
||
| #VU123053 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2026-23220 |
CWE-835 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 18.02.2026 |
SB20260218103 SB2026021911 SB2026031305 and 25 more |
||
| #VU123052 - Memory corruption CVE-2026-23222 |
CWE-119 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 18.02.2026 |
SB20260218102 SB2026021911 SB2026031305 and 24 more |
||
| #VU123045 - Improper Locking CVE-2026-23229 |
CWE-667 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 18.02.2026 |
SB2026021892 SB2026021911 SB2026031305 and 27 more |
||
| #VU123035 - Use After Free CVE-2026-23221 |
CWE-416 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 18.02.2026 |
SB2026021880 SB2026031305 SB2026031306 and 26 more |
||
| #VU123028 - Missing release of memory after effective lifetime CVE-2026-23228 |
CWE-401 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 18.02.2026 |
SB2026021871 SB2026021911 SB2026031305 and 25 more |
||
| #VU122909 - Improper Locking CVE-2026-23169 |
CWE-667 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 16.02.2026 |
SB2026021694 SB2026021911 SB2026031305 and 33 more |
||
| #VU122387 - Incorrect Calculation CVE-2026-23100 |
CWE-682 | Low | 5.15.0.1117.102, 5.15.0-1117.126+fips1, 6.8.0-134.134+fips1, 6.8.0-1062.69+fips1 | 05.02.2026 |
SB2026020557 SB2026031306 SB2026032072 and 32 more |
Showing elements 1281 - 1300 out of 3168