Known vulnerabilities in linux-fips (Ubuntu package) - page 57
Vendor:
Canonical Ltd.
Software:
linux-fips (Ubuntu package)
Software CPE:
cpe:2.3:o:canonical:linux-fips_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website:
https://www.ubuntu.com/
Total vulnerabilities:
1273
Public exploits:
7
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
5.15.0.1110.109
5.15.0.190.111
5.15.0-190.200+fips1
5.15.0-1110.116
4.4.0.1127.129
4.4.0-1127.134
6.8.0-136.136.2~22.04.1
6.8.0-136.136.2
6.8.0-136.136+fips2
6.8.0-1058.61
4.4.0.1125.127
4.4.0-1125.132
6.8.0-116.116+fips1
5.15.0.1105.95
5.15.0.176.102
5.15.0-176.186+fips1
5.15.0-1105.114+fips1
4.4.0.1123.124
4.4.0-1123.130
5.4.0.1159.101
5.4.0.1130.127
5.4.0-1159.168+fips1
5.4.0-1130.140
4.4.0.1122.123
4.4.0-1122.129
5.15.0.171.98
5.15.0-171.181+fips1
6.8.0-1048.51+fips1
6.8.0-101.101+fips1
4.4.0.1121.122
4.4.0-1121.128
4.4.0.1120.121
4.4.0-1120.127
4.4.0.1119.120
4.4.0-1119.126
5.4.0.1154.96
5.4.0.1125.122
5.4.0-1154.163+fips1
5.4.0-1125.135
4.4.0.1117.118
4.4.0-1117.124
4.4.0.1116.117
4.4.0-1116.123
4.4.0.1115.116
4.4.0-1115.122
4.15.0.1136.133
4.15.0-1136.147
4.4.0.1114.115
4.4.0-1114.121
4.4.0.1113.114
4.4.0-1113.120
Vulnerabilities (1273)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122343 - NULL Pointer Dereference CVE-2026-23060 |
CWE-476 | Low | 4.4.0.1123.124, 4.4.0-1123.130 | 05.02.2026 |
SB2026020510 SB2026020972 SB2026020973 and 47 more |
||
| #VU122329 - Use After Free CVE-2026-23074 |
CWE-416 | Low | 4.4.0.1123.124, 4.4.0-1123.130 | 04.02.2026 |
SB2026020494 SB2026020972 SB2026020973 and 106 more |
||
| #VU122019 - Use After Free CVE-2025-71162 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.01.2026 |
SB2026012619 SB2026020972 SB2026020973 and 27 more |
||
| #VU121373 - Use After Free CVE-2025-68817 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 14.01.2026 |
SB2026011425 SB2026020972 SB2026020973 and 34 more |
||
| #VU120718 - Use After Free CVE-2023-54207 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 30.12.2025 |
SB20251230163 SB2026012390 SB2026012633 and 15 more |
||
| #VU120562 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-68725 |
CWE-835 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.12.2025 |
SB20251226304 SB2026020972 SB2026020973 and 30 more |
||
| #VU120545 - Use of Uninitialized Resource CVE-2025-68365 |
CWE-908 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 26.12.2025 |
SB20251226287 SB2026020972 SB2026020973 and 27 more |
||
| #VU120267 - Resource Management Errors CVE-2025-68340 |
CWE-399 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 23.12.2025 |
SB2025122336 SB2026012390 SB2026012633 and 35 more |
||
| #VU120088 - Improper Locking CVE-2025-68211 |
CWE-667 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 16.12.2025 |
SB20251216132 SB2026020973 SB2026021239 and 22 more |
||
| #VU118436 - Resource Management Errors CVE-2025-40164 |
CWE-399 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 12.11.2025 |
SB20251112139 SB2025112816 SB2025112817 and 40 more |
||
| #VU118392 - Use After Free CVE-2025-40149 |
CWE-416 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 12.11.2025 |
SB2025111294 SB2025120578 SB2025120579 and 35 more |
||
| #VU116695 - Missing release of memory after effective lifetime CVE-2023-53662 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 08.10.2025 |
SB2025100814 SB2025111182 SB2025111740 and 20 more |
||
| #VU116262 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2023-53520 |
CWE-362 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 01.10.2025 |
SB2025100182 SB20251015148 SB20251017142 and 18 more |
||
| #VU115916 - NULL Pointer Dereference CVE-2023-53421 |
CWE-476 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 19.09.2025 |
SB2025091994 SB20251015148 SB20251017142 and 17 more |
||
| #VU114293 - Resource Management Errors CVE-2025-38591 |
CWE-399 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1, 6.8.0-116.116+fips1 | 20.08.2025 |
SB2025082094 SB20250918122 SB2025092272 and 29 more |
||
| #VU113315 - Resource Management Errors CVE-2025-38408 |
CWE-399 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 27.07.2025 |
SB2025072790 SB20251015148 SB20251015149 and 40 more |
||
| #VU112298 - NULL Pointer Dereference CVE-2025-38232 |
CWE-476 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 05.07.2025 |
SB2025070524 SB2025102386 SB2025102387 and 36 more |
||
| #VU112268 - Improper input validation CVE-2025-38125 |
CWE-20 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 04.07.2025 |
SB20250704115 SB2025081162 SB2025081163 and 46 more |
||
| #VU111419 - Missing release of memory after effective lifetime CVE-2025-38057 |
CWE-401 | Low | 5.15.0.176.102, 5.15.0-176.186+fips1, 5.15.0.1105.95, 5.15.0-1105.114+fips1 | 19.06.2025 |
SB20250619133 SB2025072898 SB20250820120 and 35 more |
||
| #VU105056 - Memory corruption CVE-2025-21735 |
CWE-119 | Low | 4.4.0.1123.124, 4.4.0-1123.130 | 27.02.2025 |
SB20250227151 SB2025031471 SB2025031472 and 57 more |
Showing elements 1121 - 1140 out of 1273