--- title: 'USN-7186-2: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-7186-2 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-7186-2 --- # USN-7186-2: Linux kernel vulnerabilities Publication date 9 January 2025 Overview Several security issues were fixed in the Linux kernel. Releases [22.04 LTS](https://ubuntu.com/security/notices?release=jammy) [20.04 LTS](https://ubuntu.com/security/notices?release=focal) --- Open side navigation ## Packages * [linux-azure](https://ubuntu.com/security/cves?package=linux-azure) - Linux kernel for Microsoft Azure Cloud systems * [linux-intel-iotg-5.15](https://ubuntu.com/security/cves?package=linux-intel-iotg-5.15) - Linux kernel for Intel IoT platforms ## Details Andy Nguyen discovered that the Bluetooth L2CAP implementation in the Linux kernel contained a type-confusion error. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. ([CVE-2020-12351](https://ubuntu.com/security/CVE-2020-12351)) Andy Nguyen discovered that the Bluetooth A2MP implementation in the Linux kernel did not properly initialize memory in some situations. A physically proximate remote attacker could use this to expose sensitive information (kernel memory). ([CVE-2020-12352](https://ubuntu.com/security/CVE-2020-12352)) Andy Nguyen discovered that the Bluetooth HCI event packet parser in the Linux kernel did not properly handle event advertisements of certain sizes, leading to a heap-based buffer overflow. A physically proximate remote attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. ( --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 22.04 LTS jammy | [linux-image-5.15.0-1078-azure](https://launchpad.net/ubuntu/+source/linux-signed-azure) –  [5.15.0-1078.87](https://launchpad.net/ubuntu/+source/linux-signed-azure/5.15.0-1078.87) | | | | [linux-image-azure-lts-22.04](https://launchpad.net/ubuntu/+source/linux-meta-azure) –  [5.15.0.1078.76](https://launchpad.net/ubuntu/+source/linux-meta-azure/5.15.0.1078.76) | | | | 20.04 LTS focal | [linux-image-5.15.0-1071-intel-iotg](https://launchpad.net/ubuntu/+source/linux-signed-intel-iotg-5.15) –  [5.15.0-1071.77~20.04.1](https://launchpad.net/ubuntu/+source/linux-signed-intel-iotg-5.15/5.15.0-1071.77~20.04.1) | | | | [linux-image-intel](https://launchpad.net/ubuntu/+source/linux-meta-intel-iotg-5.15) –  [5.15.0.1071.77~20.04.1](https://launchpad.net/ubuntu/+source/linux-meta-intel-iotg-5.15/5.15.0.1071.77~20.04.1) | | | | [linux-image-intel-iotg](https://launchpad.net/ubuntu/+source/linux-meta-intel-iotg-5.15) –  [5.15.0.1071.77~20.04.1](https://launchpad.net/ubuntu/+source/linux-meta-intel-iotg-5.15/5.15.0.1071.77~20.04.1) | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References *Search* * [CVE-2024-53057](https://ubuntu.com/security/CVE-2024-53057) * [CVE-2024-50264](https://ubuntu.com/security/CVE-2024-50264) * [CVE-2024-50191](https://ubuntu.com/security/CVE-2024-50191) * [CVE-2024-50189](https://ubuntu.com/security/CVE-2024-50189) * [CVE-2024-50188](https://ubuntu.com/security/CVE-2024-50188) * [CVE-2024-50186](https://ubuntu.com/security/CVE-2024-50186) * [CVE-2024-50184](https://ubuntu.com/security/CVE-2024-50184) * [CVE-2024-50181](https://ubuntu.com/security/CVE-2024-50181) * [CVE-2024-50180](https://ubuntu.com/security/CVE-2024-50180) * [CVE-2024-50179](https://ubuntu.com/security/CVE-2024-50179) --- Show 171 more references ## Related notices id="usn" *Search* * [USN-8274-1](https://ubuntu.com/security/notices/USN-8274-1) * [USN-8267-1](https://ubuntu.com/security/notices/USN-8267-1) * [USN-8266-1](https://ubuntu.com/security/notices/USN-8266-1) * [USN-8224-1](https://ubuntu.com/security/notices/USN-8224-1) * [USN-8201-1](https://ubuntu.com/security/notices/USN-8201-1) * [USN-8112-1](https://ubuntu.com/security/notices/USN-8112-1) * [USN-8112-2](https://ubuntu.com/security/notices/USN-8112-2) * [USN-8112-3](https://ubuntu.com/security/notices/USN-8112-3) * [USN-8112-4](https://ubuntu.com/security/notices/USN-8112-4) * [USN-8112-5](https://ubuntu.com/security/notices/USN-8112-5) --- Show 237 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)