Skip to content
OpenAdvisories
Critical USN-8255-1 4 CVEs

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-realtime vulnerabilities

Published May 7, 2026 · Updated Oct 8, 2026

Ecosystem: Ubuntu

Summary

Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS
implementation in the Ubuntu Linux kernel did not properly perform
permission checks in certain situations. A local attacker could possibly
use this to gain elevated privileges. (CVE-2023-2640)

Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in
the Ubuntu Linux kernel did not properly perform permission checks in
certain situations. A local attacker could possibly use this to gain
elevated privileges. (CVE-2023-32629)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- NVME drivers;
(CVE-2026-23112, CVE-2026-23273)

Fixed packages 25

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-177.187
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1106.113
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1111.120
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1106.115
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1102.108
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1089.97
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1100.103
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1101.107
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1098.103
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-177.187
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1101.102
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-tegra 5.15.0-1058.58
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-tegra-igx 5.15.0-1047.47
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1103.109
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1106.113~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-177.187~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1100.103~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-intel-iotg-5.15 5.15.0-1101.107~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-177.187~20.04.1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-aws-fips 5.15.0-1106.113+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-azure-fips 5.15.0-1111.120+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-fips 5.15.0-177.187+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-gcp-fips 5.15.0-1106.115+fips1
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-intel-iot-realtime 5.15.0-1098.100
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-realtime 5.15.0-1105.114

Vulnerabilities 4

  • Critical 9.8
    CVE-2026-23112

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

    In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offs…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2023-2640 Public exploit EPSS 15%

    On Ubuntu kernels carrying both c914c0e27eb0 and "UBUNTU: SAUCE: overlayfs: Skip permission checking for trusted.overla…

    Canonical Ubuntu Kernel linux-raspi2 linux-hwe Ubuntu
  • High 7.8
    CVE-2023-32629 Public exploit

    Local privilege escalation vulnerability in Ubuntu Kernels overlayfs ovl_copy_up_meta_inode_data skip permission checks…

    Canonical Ubuntu Kernel linux-raspi2 linux-hwe Ubuntu
  • High 7.8
    CVE-2026-23273

    macvlan: observe an RCU grace period in macvlan_common_newlink() error path

    In the Linux kernel, the following vulnerability has been resolved: macvlan: observe an RCU grace period in macvlan_common_newlink() error path valis reported that a race condition still happens after my prior patch. macvlan_common_newlink() might have made @…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2023-2640
  • report
    https://ubuntu.com/security/CVE-2023-32629
  • report
    https://ubuntu.com/security/CVE-2026-23112
  • report
    https://ubuntu.com/security/CVE-2026-23273