Skip to content
OpenAdvisories
Critical USN-8254-1 3 CVEs

linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities

Published May 7, 2026 · Updated Oct 8, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- NVME drivers;
- Netfilter;
(CVE-2026-23112, CVE-2026-23231, CVE-2026-23273)

Fixed packages 20

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-aws-6.8 6.8.0-1053.56~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-hwe-6.8 6.8.0-111.111~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm-6.8 6.8.0-1052.52~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency-hwe-6.8 6.8.0-111.111.1~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle-6.8 6.8.0-1050.51~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux 6.8.0-111.111
Ubuntu · 24.04 LTS 24.04:LTS linux-aws 6.8.0-1053.56
Ubuntu · 24.04 LTS 24.04:LTS linux-gcp 6.8.0-1055.58
Ubuntu · 24.04 LTS 24.04:LTS linux-gke 6.8.0-1051.57
Ubuntu · 24.04 LTS 24.04:LTS linux-gkeop 6.8.0-1038.41
Ubuntu · 24.04 LTS 24.04:LTS linux-ibm 6.8.0-1052.52
Ubuntu · 24.04 LTS 24.04:LTS linux-lowlatency 6.8.0-111.111.1
Ubuntu · 24.04 LTS 24.04:LTS linux-oracle 6.8.0-1050.51
Ubuntu · 24.04 LTS 24.04:LTS linux-raspi 6.8.0-1053.57
Ubuntu · Pro FIPS-updates 24.04 LTS Pro:FIPS-updates:24.04:LTS linux-aws-fips 6.8.0-1053.56+fips1
Ubuntu · Pro FIPS-updates 24.04 LTS Pro:FIPS-updates:24.04:LTS linux-fips 6.8.0-111.111+fips1
Ubuntu · Pro FIPS-updates 24.04 LTS Pro:FIPS-updates:24.04:LTS linux-gcp-fips 6.8.0-1055.58+fips1
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-realtime-6.8 6.8.1-1048.49~22.04.1
Ubuntu · Pro Realtime 24.04 LTS Pro:Realtime:24.04:LTS linux-raspi-realtime 6.8.0-2043.44
Ubuntu · Pro Realtime 24.04 LTS Pro:Realtime:24.04:LTS linux-realtime 6.8.1-1048.49

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-23112

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

    In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offs…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23231 Public exploit

    netfilter: nf_tables: fix use-after-free in nf_tables_addchain()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: nf_tables: fix use-after-free in nf_tables_addchain() nf_tables_addchain() publishes the chain to table->chains via list_add_tail_rcu() (in nft_chain_add()) before registering hook…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23273

    macvlan: observe an RCU grace period in macvlan_common_newlink() error path

    In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path valis reported that a race condition still happens after my prior patch. macvlan_common_newlink() might have made @…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2026-23112
  • report
    https://ubuntu.com/security/CVE-2026-23231
  • report
    https://ubuntu.com/security/CVE-2026-23273