Known vulnerabilities in linux-fips (Ubuntu package) - page 47
Vendor:
Canonical Ltd.
Software:
linux-fips (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:linux-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
1273
Public exploits:
7
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.15.0.1110.109
5.15.0.190.111
5.15.0-190.200+fips1
5.15.0-1110.116
4.4.0.1127.129
4.4.0-1127.134
6.8.0-136.136.2~22.04.1
6.8.0-136.136.2
6.8.0-136.136+fips2
6.8.0-1058.61
4.4.0.1125.127
4.4.0-1125.132
6.8.0-116.116+fips1
5.15.0.1105.95
5.15.0.176.102
5.15.0-176.186+fips1
5.15.0-1105.114+fips1
4.4.0.1123.124
4.4.0-1123.130
5.4.0.1159.101
5.4.0.1130.127
5.4.0-1159.168+fips1
5.4.0-1130.140
4.4.0.1122.123
4.4.0-1122.129
5.15.0.171.98
5.15.0-171.181+fips1
6.8.0-1048.51+fips1
6.8.0-101.101+fips1
4.4.0.1121.122
4.4.0-1121.128
4.4.0.1120.121
4.4.0-1120.127
4.4.0.1119.120
4.4.0-1119.126
5.4.0.1154.96
5.4.0.1125.122
5.4.0-1154.163+fips1
5.4.0-1125.135
4.4.0.1117.118
4.4.0-1117.124
4.4.0.1116.117
4.4.0-1116.123
4.4.0.1115.116
4.4.0-1115.122
4.15.0.1136.133
4.15.0-1136.147
4.4.0.1114.115
4.4.0-1114.121
4.4.0.1113.114
4.4.0-1113.120
Vulnerabilities (1273)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU127638 - Use After Free CVE-2026-31504 |
CWE-416 | Low | 4.4.0.1125.127, 4.4.0-1125.132 | 24.04.2026 |
SB20260424207 SB20260513116 SB2026051411 and 58 more |
||
| #VU124494 - Use After Free CVE-2026-23351 |
CWE-416 | Low | 6.8.0-116.116+fips1 | 25.03.2026 |
SB2026032597 SB2026041129 SB2026041130 and 28 more |
||
| #VU124443 - Double Free CVE-2026-23394 |
CWE-415 | Low | 6.8.0-116.116+fips1 | 25.03.2026 |
SB2026032549 SB2026041129 SB2026041130 and 12 more |
||
| #VU124186 - Out-of-bounds write CVE-2026-23262 |
CWE-787 | Low | 6.8.0-116.116+fips1 | 20.03.2026 |
SB2026032091 SB2026050126 SB2026052083 and 13 more |
||
| #VU124179 - Type conversion CVE-2026-23264 |
CWE-704 | Low | 6.8.0-116.116+fips1 | 20.03.2026 |
SB2026032084 SB2026052083 SB2026052160 and 6 more |
||
| #VU124171 - Exposure of resource to wrong sphere CVE-2026-23274 |
CWE-668 | Low | 6.8.0-116.116+fips1 | 20.03.2026 |
SB2026032076 SB2026041129 SB2026041130 and 48 more |
||
| #VU122874 - Use After Free CVE-2025-71221 |
CWE-416 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 16.02.2026 |
SB2026021658 SB2026030678 SB2026031530 and 30 more |
||
| #VU122850 - Missing release of memory after effective lifetime CVE-2025-71203 |
CWE-401 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 16.02.2026 |
SB2026021635 SB2026021911 SB2026070614 and 15 more |
||
| #VU121999 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-71161 |
CWE-835 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 24.01.2026 |
SB2026012401 SB20260513116 SB2026051411 and 32 more |
||
| #VU121996 - Improper Locking CVE-2025-71152 |
CWE-667 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 23.01.2026 |
SB20260123117 SB2026032753 SB2026040335 and 21 more |
||
| #VU120592 - Incorrect Calculation CVE-2025-68736 |
CWE-682 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 26.12.2025 |
SB20251226334 SB2026032361 SB2026032664 and 21 more |
||
| #VU120240 - Resource Management Errors CVE-2025-68334 |
CWE-399 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 22.12.2025 |
SB2025122265 SB2026033107 SB2026033117 and 21 more |
||
| #VU120136 - Resource Management Errors CVE-2025-68239 |
CWE-399 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 16.12.2025 |
SB20251216180 SB2026012390 SB2026012633 and 37 more |
||
| #VU120129 - Resource Management Errors CVE-2025-68175 |
CWE-399 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 16.12.2025 |
SB20251216173 SB2026021239 SB2026021240 and 18 more |
||
| #VU118424 - Improper input validation CVE-2025-40150 |
CWE-20 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 12.11.2025 |
SB20251112126 SB2026021239 SB2026021240 and 18 more |
||
| #VU118393 - Use After Free CVE-2025-40135 |
CWE-416 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 12.11.2025 |
SB2025111295 SB2025121262 SB2025121263 and 38 more |
||
| #VU115360 - Missing release of memory after effective lifetime CVE-2025-39764 |
CWE-401 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 16.09.2025 |
SB20250916102 SB20251015148 SB20251015149 and 36 more |
||
| #VU113296 - Improper input validation CVE-2025-38426 |
CWE-20 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 27.07.2025 |
SB2025072771 SB20250818103 SB20250820120 and 26 more |
||
| #VU107756 - Error Handling CVE-2025-22116 |
CWE-388 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 22.04.2025 |
SB20250422133 SB2025052639 SB2025061222 and 23 more |
||
| #VU105043 - Use of Uninitialized Resource CVE-2025-21709 |
CWE-908 | Low | 6.8.0-136.136+fips2, 6.8.0-136.136.2, 6.8.0-136.136.2~22.04.1, 6.8.0-1058.61 | 27.02.2025 |
SB20250227138 SB2025042540 SB2025042544 and 15 more |
Showing elements 921 - 940 out of 1273