[QSA-0826251]
Linux kernel vulnerabilities
Qlustar Security Advisory 0826251
August 26th, 2025
Summary:
The system could crash or be made to run programs as an administrator.
Package(s) : linux-image-ql-generic,
qlustar-module-core-jammy-amd64-13.3,
qlustar-module-core-noble-amd64-14.0
Qlustar releases : 13, 14
Affected versions: All versions prior to this update
Vulnerability : privilege escalation/denial of service
Problem type : local
Qlustar-specific : no
CVE Id(s) : Not documented
A number of vulnerabilities and bugs have been discovered in the 6.12.x Linux kernel series since the last Qlustar 14 release based on 6.12.35. They may lead to a denial of service or privilege escalation. Please check the following web pages that contain details of the fixes in each release after 6.12.35 up to the current Qlustar kernel 6.12.43:
Linux kernel 6.12.43 Linux kernel 6.12.42 Linux kernel 6.12.41 Linux kernel 6.12.40 Linux kernel 6.12.39 Linux kernel 6.12.38 Linux kernel 6.12.37 Linux kernel 6.12.36
A number of vulnerabilities and bugs have been discovered in the 5.15.x Linux kernel series since the last Qlustar 13.0 release based on 5.15.186. They may lead to a denial of service or privilege escalation. Please check the following web pages that contain details of the fixes in each release after 5.15.186 up to the current Qlustar kernel 5.15.189:
Linux kernel 5.15.189 Linux kernel 5.15.188 Linux kernel 5.15.187
Update instructions:
The problem can be corrected by updating your system to the following or more recent package versions:
For Qlustar 14
linux-image-ql-generic 6.12.43-ql-generic-14-4
qlustar-module-core-noble-amd64-14.0 14.0.3-b586f1597
For Qlustar 13
linux-image-ql-generic 5.15.189-ql-generic-13.0-22
qlustar-module-core-jammy-amd64-13.3 13.3.3-b587f1600
Special Update instructions:
In addition to the steps described in the general Qlustar Update Instructions these updates require the following:
- No special instructions