Critical Vulnerabilities in Linux Kernel Packages: USN-7591-1
Summary
USN-7591-1: Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability. Affects linux versions < 5.15.0-142.152. Fixed in 5.15.0-142.152. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing system resources and facilitating communication between hardware and software. It supports a wide range of functionalities, including process management, memory management, device drivers, and file systems. The kernel is essential for system stability and performance, making its security paramount. The vulnerabilities identified in USN-7591-1 affect various Linux kernel packages, including linux, linux-gcp, linux-gke, and others, potentially compromising system integrity and security.
Vulnerability Detail
Michael Randrianantenaina discovered that the Bluetooth driver in the Linux Kernel contained an improper access control vulnerability, allowing nearby attackers to connect rogue devices and possibly execute arbitrary code (CVE-2024-8805). Additionally, the CIFS network file system implementation did not properly verify the target namespace when handling upcalls, which could expose sensitive information (CVE-2025-2312). Other security issues across multiple subsystems could allow attackers to compromise the system, affecting architectures, drivers, and file systems.
How To Fix
Minimum fixed version
5.15.0-142.152
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can disable Bluetooth functionality to mitigate the risk of unauthorized access via the Bluetooth driver. This can be done by executing the following command in the terminal:
sudo systemctl stop bluetooth
This command stops the Bluetooth service until the system is updated with the patched kernel.
Conclusion
The vulnerabilities identified in USN-7591-1 pose significant risks to the security of Linux kernel packages in Ubuntu 22.04 LTS. It is crucial for users to update their systems promptly to mitigate these risks and ensure the integrity of their operating environments.
See every vulnerability recorded for linux →
FAQ
USN-7591-1 is a security notice issued for vulnerabilities found in various Linux kernel packages, affecting Ubuntu 22.04 LTS.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring any signup.
The vulnerabilities could allow attackers to execute arbitrary code, expose sensitive information, and compromise system integrity across various subsystems.
It is recommended to regularly check for updates and apply security patches as soon as they are released to protect your system from vulnerabilities.
If immediate updates are not possible, consider disabling vulnerable services, such as Bluetooth, as a temporary measure to reduce risk.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
