GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
usn-7506-3
Vulnerability from osv_ubuntu
Published
2025-05-12 13:17
Modified
2026-09-09 11:24
Summary
linux-fips vulnerabilities
Details

Demi Marie Obenour and Simon Gaiser discovered that several Xen para- virtualization device frontends did not properly restrict the access rights of device backends. An attacker could possibly use a malicious Xen backend to gain access to memory pages of a guest VM or cause a denial of service in the guest. (CVE-2022-23041)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Hardware crypto device drivers; - GPU drivers; - IIO subsystem; - Media drivers; - Network drivers; - SCSI subsystem; - SPI subsystem; - USB Gadget drivers; - Ceph distributed file system; - File systems infrastructure; - JFS file system; - Network file system (NFS) client; - Network file system (NFS) server daemon; - NILFS2 file system; - SMB network file system; - CAN network layer; - IPv6 networking; - MAC80211 subsystem; - Netfilter; - Netlink; - Network traffic control; - SCTP protocol; - TIPC protocol; (CVE-2024-56598, CVE-2024-56650, CVE-2024-46771, CVE-2024-53173, CVE-2024-53063, CVE-2024-26974, CVE-2021-46959, CVE-2024-53066, CVE-2021-47163, CVE-2024-50237, CVE-2021-47587, CVE-2024-56631, CVE-2024-50256, CVE-2021-47150, CVE-2021-47506, CVE-2021-47219, CVE-2023-52741, CVE-2024-49944, CVE-2025-21971, CVE-2024-26689, CVE-2024-46780, CVE-2024-53140, CVE-2021-47245, CVE-2024-56642, CVE-2021-47500, CVE-2024-36934, CVE-2024-26996, CVE-2024-35864, CVE-2021-47191, CVE-2024-26915, CVE-2024-56770)

References
https://ubuntu.com/security/notices/USN-7506-3 ADVISORY
https://ubuntu.com/security/CVE-2021-46959 REPORT
https://ubuntu.com/security/CVE-2021-47150 REPORT
https://ubuntu.com/security/CVE-2021-47163 REPORT
https://ubuntu.com/security/CVE-2021-47191 REPORT
https://ubuntu.com/security/CVE-2021-47219 REPORT
https://ubuntu.com/security/CVE-2021-47245 REPORT
https://ubuntu.com/security/CVE-2021-47500 REPORT
https://ubuntu.com/security/CVE-2021-47506 REPORT
https://ubuntu.com/security/CVE-2021-47587 REPORT
https://ubuntu.com/security/CVE-2022-23041 REPORT
https://ubuntu.com/security/CVE-2023-52741 REPORT
https://ubuntu.com/security/CVE-2024-26689 REPORT
https://ubuntu.com/security/CVE-2024-26915 REPORT
https://ubuntu.com/security/CVE-2024-26974 REPORT
https://ubuntu.com/security/CVE-2024-26996 REPORT
https://ubuntu.com/security/CVE-2024-35864 REPORT
https://ubuntu.com/security/CVE-2024-36934 REPORT
https://ubuntu.com/security/CVE-2024-46771 REPORT
https://ubuntu.com/security/CVE-2024-46780 REPORT
https://ubuntu.com/security/CVE-2024-49944 REPORT
https://ubuntu.com/security/CVE-2024-50237 REPORT
https://ubuntu.com/security/CVE-2024-50256 REPORT
https://ubuntu.com/security/CVE-2024-53063 REPORT
https://ubuntu.com/security/CVE-2024-53066 REPORT
https://ubuntu.com/security/CVE-2024-53140 REPORT
https://ubuntu.com/security/CVE-2024-53173 REPORT
https://ubuntu.com/security/CVE-2024-56598 REPORT
https://ubuntu.com/security/CVE-2024-56631 REPORT
https://ubuntu.com/security/CVE-2024-56642 REPORT
https://ubuntu.com/security/CVE-2024-56650 REPORT
https://ubuntu.com/security/CVE-2024-56770 REPORT
https://ubuntu.com/security/CVE-2025-21971 REPORT
To clipboard 

{
  "affected": [
    {
      "database_specific": {
        "cves_map": {
          "cves": [
            {
              "id": "CVE-2021-46959",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47150",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47163",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47191",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47219",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47245",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47500",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47506",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2021-47587",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2022-23041",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "low",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2023-52741",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-26689",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-26915",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-26974",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-26996",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-35864",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-36934",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-46771",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-46780",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-49944",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-50237",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-50256",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-53063",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-53066",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-53140",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-53173",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-56598",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "high",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-56631",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-56642",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-56650",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2024-56770",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            },
            {
              "id": "CVE-2025-21971",
              "severity": [
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  "type": "CVSS_V3"
                },
                {
                  "score": "medium",
                  "type": "Ubuntu"
                }
              ]
            }
          ],
          "ecosystem": "Ubuntu:Pro:FIPS:16.04:LTS"
        }
      },
      "ecosystem_specific": {
        "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
        "binaries": [
          {
            "binary_name": "block-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "crypto-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "dasd-extra-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "dasd-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "fat-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "fb-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "firewire-core-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "floppy-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "fs-core-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "fs-secondary-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "input-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "ipmi-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "irda-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "kernel-image-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-buildinfo-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-fips-cloud-tools-common",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-fips-headers-4.4.0-1113",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-fips-source-4.4.0",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-fips-tools-4.4.0-1113",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-headers-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-image-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-image-hmac-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-image-unsigned-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-image-unsigned-hmac-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-modules-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-modules-extra-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-tools-4.4.0-1113-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "linux-udebs-fips",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "md-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "message-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "mouse-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "multipath-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "nfs-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "nic-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "nic-pcmcia-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "nic-shared-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "nic-usb-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "parport-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "pata-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "pcmcia-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "pcmcia-storage-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "plip-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "ppp-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "sata-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "scsi-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "serial-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "speakup-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "storage-core-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "usb-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "virtio-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          },
          {
            "binary_name": "vlan-modules-4.4.0-1113-fips-di",
            "binary_version": "4.4.0-1113.120"
          }
        ]
      },
      "package": {
        "ecosystem": "Ubuntu:Pro:FIPS:16.04:LTS",
        "name": "linux-fips",
        "purl": "pkg:deb/ubuntu/linux-fips@4.4.0-1113.120?arch=source\u0026distro=fips-updates/xenial"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "4.4.0-1113.120"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "4.4.0-1003.3",
        "4.4.0-1005.5",
        "4.4.0-1006.6",
        "4.4.0-1008.10",
        "4.4.0-1010.13",
        "4.4.0-1011.14",
        "4.4.0-1012.16",
        "4.4.0-1013.17",
        "4.4.0-1015.20",
        "4.4.0-1017.22",
        "4.4.0-1019.24",
        "4.4.0-1021.26",
        "4.4.0-1022.27",
        "4.4.0-1023.28",
        "4.4.0-1025.30",
        "4.4.0-1026.31",
        "4.4.0-1027.32",
        "4.4.0-1028.33",
        "4.4.0-1029.34",
        "4.4.0-1031.36",
        "4.4.0-1032.37",
        "4.4.0-1033.38",
        "4.4.0-1034.39",
        "4.4.0-1041.46",
        "4.4.0-1042.47",
        "4.4.0-1043.48",
        "4.4.0-1044.49",
        "4.4.0-1045.50",
        "4.4.0-1046.51",
        "4.4.0-1048.53",
        "4.4.0-1049.55",
        "4.4.0-1051.57",
        "4.4.0-1052.58",
        "4.4.0-1054.60",
        "4.4.0-1055.61",
        "4.4.0-1056.62",
        "4.4.0-1057.63",
        "4.4.0-1058.64",
        "4.4.0-1060.66",
        "4.4.0-1061.67",
        "4.4.0-1062.68",
        "4.4.0-1063.69",
        "4.4.0-1064.70",
        "4.4.0-1065.71",
        "4.4.0-1066.72",
        "4.4.0-1067.73",
        "4.4.0-1068.74",
        "4.4.0-1069.75",
        "4.4.0-1071.77",
        "4.4.0-1072.78",
        "4.4.0-1073.79",
        "4.4.0-1074.80",
        "4.4.0-1077.84",
        "4.4.0-1079.86",
        "4.4.0-1080.87",
        "4.4.0-1081.88",
        "4.4.0-1082.89",
        "4.4.0-1083.90",
        "4.4.0-1084.91",
        "4.4.0-1085.92",
        "4.4.0-1086.93",
        "4.4.0-1088.95",
        "4.4.0-1089.96",
        "4.4.0-1090.97",
        "4.4.0-1091.98",
        "4.4.0-1092.99",
        "4.4.0-1093.100",
        "4.4.0-1094.101",
        "4.4.0-1095.102",
        "4.4.0-1097.104",
        "4.4.0-1099.106",
        "4.4.0-1100.107",
        "4.4.0-1101.108",
        "4.4.0-1102.109",
        "4.4.0-1103.110",
        "4.4.0-1104.111",
        "4.4.0-1105.112",
        "4.4.0-1106.113",
        "4.4.0-1107.114",
        "4.4.0-1108.115",
        "4.4.0-1109.116",
        "4.4.0-1110.117",
        "4.4.0-1111.118",
        "4.4.0-1112.119"
      ]
    }
  ],
  "aliases": [],
  "details": "\nDemi Marie Obenour and Simon Gaiser discovered that several Xen para-\nvirtualization device frontends did not properly restrict the access rights\nof device backends. An attacker could possibly use a malicious Xen backend\nto gain access to memory pages of a guest VM or cause a denial of service\nin the guest. (CVE-2022-23041)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - Hardware crypto device drivers;\n  - GPU drivers;\n  - IIO subsystem;\n  - Media drivers;\n  - Network drivers;\n  - SCSI subsystem;\n  - SPI subsystem;\n  - USB Gadget drivers;\n  - Ceph distributed file system;\n  - File systems infrastructure;\n  - JFS file system;\n  - Network file system (NFS) client;\n  - Network file system (NFS) server daemon;\n  - NILFS2 file system;\n  - SMB network file system;\n  - CAN network layer;\n  - IPv6 networking;\n  - MAC80211 subsystem;\n  - Netfilter;\n  - Netlink;\n  - Network traffic control;\n  - SCTP protocol;\n  - TIPC protocol;\n(CVE-2024-56598, CVE-2024-56650, CVE-2024-46771, CVE-2024-53173,\nCVE-2024-53063, CVE-2024-26974, CVE-2021-46959, CVE-2024-53066,\nCVE-2021-47163, CVE-2024-50237, CVE-2021-47587, CVE-2024-56631,\nCVE-2024-50256, CVE-2021-47150, CVE-2021-47506, CVE-2021-47219,\nCVE-2023-52741, CVE-2024-49944, CVE-2025-21971, CVE-2024-26689,\nCVE-2024-46780, CVE-2024-53140, CVE-2021-47245, CVE-2024-56642,\nCVE-2021-47500, CVE-2024-36934, CVE-2024-26996, CVE-2024-35864,\nCVE-2021-47191, CVE-2024-26915, CVE-2024-56770)\n",
  "id": "USN-7506-3",
  "modified": "2026-09-09T11:24:07Z",
  "published": "2025-05-12T13:17:12Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://ubuntu.com/security/notices/USN-7506-3"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-46959"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47150"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47163"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47191"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47219"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47245"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47500"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47506"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2021-47587"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2022-23041"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2023-52741"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-26689"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-26915"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-26974"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-26996"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-35864"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-36934"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-46771"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-46780"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-49944"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-50237"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-50256"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-53063"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-53066"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-53140"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-53173"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-56598"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-56631"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-56642"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-56650"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2024-56770"
    },
    {
      "type": "REPORT",
      "url": "https://ubuntu.com/security/CVE-2025-21971"
    }
  ],
  "related": [],
  "schema_version": "1.7.0",
  "summary": "linux-fips vulnerabilities",
  "upstream": [
    "UBUNTU-CVE-2021-46959",
    "UBUNTU-CVE-2021-47150",
    "UBUNTU-CVE-2021-47163",
    "UBUNTU-CVE-2021-47191",
    "UBUNTU-CVE-2021-47219",
    "UBUNTU-CVE-2021-47245",
    "UBUNTU-CVE-2021-47500",
    "UBUNTU-CVE-2021-47506",
    "UBUNTU-CVE-2021-47587",
    "UBUNTU-CVE-2022-23041",
    "UBUNTU-CVE-2023-52741",
    "UBUNTU-CVE-2024-26689",
    "UBUNTU-CVE-2024-26915",
    "UBUNTU-CVE-2024-26974",
    "UBUNTU-CVE-2024-26996",
    "UBUNTU-CVE-2024-35864",
    "UBUNTU-CVE-2024-36934",
    "UBUNTU-CVE-2024-46771",
    "UBUNTU-CVE-2024-46780",
    "UBUNTU-CVE-2024-49944",
    "UBUNTU-CVE-2024-50237",
    "UBUNTU-CVE-2024-50256",
    "UBUNTU-CVE-2024-53063",
    "UBUNTU-CVE-2024-53066",
    "UBUNTU-CVE-2024-53140",
    "UBUNTU-CVE-2024-53173",
    "UBUNTU-CVE-2024-56598",
    "UBUNTU-CVE-2024-56631",
    "UBUNTU-CVE-2024-56642",
    "UBUNTU-CVE-2024-56650",
    "UBUNTU-CVE-2024-56770",
    "UBUNTU-CVE-2025-21971"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.