Ubuntu alert USN-7922-2 (linux-fips, linux-aws-fips, linux-gcp-fips)
| From: | Rodrigo Figueiredo Zaiden <rodrigo.zaiden@canonical.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-7922-2] Linux kernel (FIPS) vulnerabilities | |
| Date: | Thu, 11 Dec 2025 13:42:30 -0300 | |
| Message-ID: | <5f483e40-a044-4716-9e9c-a45d2e005611@canonical.com> |
========================================================================== Ubuntu Security Notice USN-7922-2 December 11, 2025 linux-fips, linux-aws-fips, linux-gcp-fips vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - ACPI drivers; - InfiniBand drivers; - Media drivers; - Network drivers; - Pin controllers subsystem; - AFS file system; - F2FS file system; - Tracing infrastructure; - Memory management; - Appletalk network protocol; - Netfilter; (CVE-2022-49026, CVE-2022-49390, CVE-2024-47691, CVE-2024-49935, CVE-2024-50067, CVE-2024-50095, CVE-2024-50196, CVE-2024-53090, CVE-2024-53218, CVE-2025-21855, CVE-2025-37958, CVE-2025-38666, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS linux-image-5.4.0-1127-fips 5.4.0-1127.137 Available with Ubuntu Pro linux-image-5.4.0-1153-aws-fips 5.4.0-1153.163+fips1 Available with Ubuntu Pro linux-image-5.4.0-1156-gcp-fips 5.4.0-1156.165+fips1 Available with Ubuntu Pro linux-image-aws-fips 5.4.0.1153.100 Available with Ubuntu Pro linux-image-aws-fips-5.4 5.4.0.1153.100 Available with Ubuntu Pro linux-image-fips 5.4.0.1127.124 Available with Ubuntu Pro linux-image-fips-5.4 5.4.0.1127.124 Available with Ubuntu Pro linux-image-gcp-fips 5.4.0.1156.98 Available with Ubuntu Pro linux-image-gcp-fips-5.4 5.4.0.1156.98 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7922-2 https://ubuntu.com/security/notices/USN-7922-1 CVE-2022-49026, CVE-2022-49390, CVE-2024-47691, CVE-2024-49935, CVE-2024-50067, CVE-2024-50095, CVE-2024-50196, CVE-2024-53090, CVE-2024-53218, CVE-2025-21855, CVE-2025-37958, CVE-2025-38666, CVE-2025-39964, CVE-2025-39993, CVE-2025-40018 Package Information: https://launchpad.net/ubuntu/+source/linux-aws-fips/5.4.0... https://launchpad.net/ubuntu/+source/linux-fips/5.4.0-112... https://launchpad.net/ubuntu/+source/linux-gcp-fips/5.4.0...
Attachment: OpenPGP_signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- wsB5BAABCAAjFiEEYrygdx1GDec9TV8EZ0GeRcM5nt0FAmk69HcFAwAAAAAACgkQZ0GeRcM5nt0s ggf+O0A3nT2A7WN6u0GJFSzZkOtzwCdL5/CksT4ai3MZF0O81TDaNIwCc9cbMYBIZ19xfmp9t09Z 2TW4g22mfU/VV3G5QJBAHm48ohpohg/Nmnc8JBlp4Bmzu2iH5Y87PwIEBAs8rNG4xH7Vr4cOoZ4l urEPxvJHBg3xQwtgLpQ7IYVnAhdVZ3Dz3FFD++8brhQIvxfadXNQb/kZU3V+63CxYQ/6sJkbGU8y GqZd5VhiCJPUsZW+LmAO0WRFOCmUnwWJN1SNHAjXpdOH4H7QLy9EUL1qNy1ToBTDdaN7OhpWQ0S1 YpXBuUCeU+HEGsEbE823zFTgJ40u8Ej7AGsLVoNfBw== =wvW1 -----END PGP SIGNATURE-----