Known vulnerabilities in linux-iot (Ubuntu package)

Vendor: Canonical Ltd.
Software: linux-iot (Ubuntu package)
Software CPE: cpe:2.3:o:canonical:linux-iot_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Website: https://www.ubuntu.com/
Total vulnerabilities: 179
Public exploits: 5
Known exploited (KEV): 3
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting linux-iot (Ubuntu package) linux-iot (Ubuntu package) is affected by 179 known vulnerabilities: 2 high, 177 low Critical High Medium Low

Vulnerabilities (179)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU130685 - Out-of-bounds write
CVE-2026-43078		 CWE-787 Low
No
No
 5.4.0-1063.66 07.05.2026 SB20260507288
SB2026052080
SB2026052081
and 25 more
#VU130684 - Improper input validation
CVE-2026-43077		 CWE-20 Low
No
No
 5.4.0-1063.66 07.05.2026 SB20260507287
SB20260509165
SB2026052080
and 81 more
#VU128887 - Always-Incorrect Control Flow Implementation
CVE-2026-43033		 CWE-670 Low
No
No
 5.4.0-1063.66 02.05.2026 SB2026050238
SB2026051411
SB2026052080
and 24 more
#VU127864 - Improper control of a resource through its lifetime
CVE-2026-31431		 CWE-664 High
Available
Exploited
 5.4.0-1063.66 25.04.2026 SB20260425182
SB2026043080
SB2026050204
and 129 more
#VU127638 - Use After Free
CVE-2026-31504		 CWE-416 Low
No
No
 5.4.0-1063.66 24.04.2026 SB20260424207
SB20260513116
SB2026051411
and 58 more
#VU127614 - Use After Free
CVE-2026-31533		 CWE-416 Low
No
No
 5.4.0-1063.66 24.04.2026 SB20260424183
SB20260513116
SB2026051411
and 56 more
#VU119194 - Improper Locking
CVE-2025-40215		 CWE-667 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 04.12.2025 SB2025120484
SB2026012384
SB2026012390
and 67 more
#VU117654 - Use After Free
CVE-2025-40018		 CWE-416 Low
No
No
 5.4.0-1057.60 26.10.2025 SB2025102601
SB2025111182
SB2025111213
and 79 more
#VU117250 - Use After Free
CVE-2025-39993		 CWE-416 Low
No
No
 5.4.0-1057.60 15.10.2025 SB2025101599
SB20251031129
SB20251031132
and 53 more
#VU116928 - Improper input validation
CVE-2025-39964		 CWE-20 Low
Available
Exploited
 5.4.0-1057.60 13.10.2025 SB2025101384
SB2025111213
SB2025112816
and 41 more
#VU114494 - Use After Free
CVE-2025-38666		 CWE-416 Low
No
No
 5.4.0-1057.60 28.08.2025 SB2025082843
SB2025102407
SB2025112126
and 37 more
#VU109532 - Improper Locking
CVE-2025-37958		 CWE-667 Low
No
No
 5.4.0-1057.60 21.05.2025 SB2025052136
SB2025061222
SB2025061343
and 64 more
#VU105652 - Use After Free
CVE-2025-21855		 CWE-416 Low
No
No
 5.4.0-1057.60 12.03.2025 SB2025031251
SB2025040917
SB2025040929
and 41 more
#VU105464 - Memory corruption
CVE-2022-49267		 CWE-119 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 10.03.2025 SB2025031017
SB2025120578
SB2025120579
and 25 more
#VU105057 - Memory corruption
CVE-2025-21780		 CWE-119 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 27.02.2025 SB20250227152
SB2025032664
SB2025040916
and 45 more
#VU104626 - NULL Pointer Dereference
CVE-2022-49072		 CWE-476 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 26.02.2025 SB20250226444
SB2026033108
SB2026033114
and 9 more
#VU102027 - Use After Free
CVE-2024-56640		 CWE-416 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 30.12.2024 SB2024123051
SB2025020805
SB2025020809
and 45 more
#VU99148 - Resource Management Errors
CVE-2024-49927		 CWE-399 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 22.10.2024 SB20241022260
SB2024110167
SB2024110169
and 46 more
#VU96364 - Error Handling
CVE-2022-48875		 CWE-388 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 21.08.2024 SB2024082188
SB2024090668
SB2024091076
and 29 more
#VU93763 - Double Free
CVE-2021-47599		 CWE-415 Low
No
No
 5.4.0-1060.63, 5.4.0.1143.139, 5.4.0-1143.152 04.07.2024 SB2024070439
SB2024081370
SB2024081372
and 26 more


Showing elements 1 - 20 out of 179