Known vulnerabilities in linux-fips (Ubuntu package) - page 56
Vendor:
Canonical Ltd.
Software:
linux-fips (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:linux-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
1273
Public exploits:
7
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.15.0.1110.109
5.15.0.190.111
5.15.0-190.200+fips1
5.15.0-1110.116
4.4.0.1127.129
4.4.0-1127.134
6.8.0-136.136.2~22.04.1
6.8.0-136.136.2
6.8.0-136.136+fips2
6.8.0-1058.61
4.4.0.1125.127
4.4.0-1125.132
6.8.0-116.116+fips1
5.15.0.1105.95
5.15.0.176.102
5.15.0-176.186+fips1
5.15.0-1105.114+fips1
4.4.0.1123.124
4.4.0-1123.130
5.4.0.1159.101
5.4.0.1130.127
5.4.0-1159.168+fips1
5.4.0-1130.140
4.4.0.1122.123
4.4.0-1122.129
5.15.0.171.98
5.15.0-171.181+fips1
6.8.0-1048.51+fips1
6.8.0-101.101+fips1
4.4.0.1121.122
4.4.0-1121.128
4.4.0.1120.121
4.4.0-1120.127
4.4.0.1119.120
4.4.0-1119.126
5.4.0.1154.96
5.4.0.1125.122
5.4.0-1154.163+fips1
5.4.0-1125.135
4.4.0.1117.118
4.4.0-1117.124
4.4.0.1116.117
4.4.0-1116.123
4.4.0.1115.116
4.4.0-1115.122
4.15.0.1136.133
4.15.0-1136.147
4.4.0.1114.115
4.4.0-1114.121
4.4.0.1113.114
4.4.0-1113.120
Vulnerabilities (1273)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122371 - Off-by-one Error CVE-2025-71197 |
CWE-193 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 05.02.2026 |
SB2026020541 SB2026020972 SB2026020973 and 26 more |
||
| #VU122362 - Improper Locking CVE-2025-71194 |
CWE-667 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 05.02.2026 |
SB2026020532 SB2026020972 SB2026020973 and 28 more |
||
| #VU122338 - Out-of-bounds read CVE-2025-71196 |
CWE-125 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 05.02.2026 |
SB2026020504 SB2026020972 SB2026020973 and 26 more |
||
| #VU122332 - Use After Free CVE-2025-71199 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 04.02.2026 |
SB2026020497 SB2026020972 SB2026020973 and 27 more |
||
| #VU122207 - Missing release of memory after effective lifetime CVE-2025-71186 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020257 SB2026020972 SB2026020973 and 27 more |
||
| #VU122183 - Missing release of memory after effective lifetime CVE-2025-71185 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020255 SB2026020972 SB2026020973 and 26 more |
||
| #VU122182 - Missing release of memory after effective lifetime CVE-2025-71188 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020254 SB2026032361 SB2026032664 and 24 more |
||
| #VU122180 - Missing release of memory after effective lifetime CVE-2025-71190 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020252 SB2026020972 SB2026020973 and 26 more |
||
| #VU122179 - Missing release of memory after effective lifetime CVE-2025-71191 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020251 SB2026020972 SB2026020973 and 26 more |
||
| #VU122173 - Missing release of memory after effective lifetime CVE-2026-23026 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020245 SB2026020972 SB2026020973 and 26 more |
||
| #VU122165 - Missing release of memory after effective lifetime CVE-2026-23033 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020236 SB2026020972 SB2026020973 and 27 more |
||
| #VU122163 - Missing release of memory after effective lifetime CVE-2026-23037 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020234 SB2026020972 SB2026020973 and 26 more |
||
| #VU122162 - Missing release of memory after effective lifetime CVE-2026-23038 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 02.02.2026 |
SB2026020233 SB2026020972 SB2026020973 and 30 more |
||
| #VU122029 - Use of Uninitialized Resource CVE-2026-23003 |
CWE-908 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012629 SB2026020972 SB2026020973 and 32 more |
||
| #VU122028 - Error Handling CVE-2026-23011 |
CWE-388 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012628 SB2026020972 SB2026020973 and 32 more |
||
| #VU122024 - NULL Pointer Dereference CVE-2026-22998 |
CWE-476 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012624 SB2026020912 SB2026020972 and 34 more |
||
| #VU122018 - Use After Free CVE-2026-23001 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012618 SB2026020972 SB2026020973 and 54 more |
||
| #VU122017 - Use After Free CVE-2026-22999 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012617 SB2026020972 SB2026020973 and 77 more |
||
| #VU122012 - Missing release of memory after effective lifetime CVE-2026-22997 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012612 SB2026020972 SB2026020973 and 27 more |
||
| #VU122011 - Missing release of memory after effective lifetime CVE-2025-71163 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012611 SB2026020972 SB2026020973 and 27 more |
Showing elements 1101 - 1120 out of 1273