Skip to content
OpenAdvisories
Critical USN-8273-1 3 CVEs

linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-azure, linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

Published May 19, 2026 · Updated Oct 29, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- NVME drivers;
- IPv4 networking;
(CVE-2024-50304, CVE-2026-23112, CVE-2026-23209)

Fixed packages 20

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws-5.4 5.4.0-1158.168~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-5.4 5.4.0-1162.168~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-5.4 5.4.0-1161.170~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-229.249~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-ibm-5.4 5.4.0-1104.109~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-oracle-5.4 5.4.0-1156.166~18.04.2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux 5.4.0-229.249
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws 5.4.0-1158.168
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure 5.4.0-1162.168
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-bluefield 5.4.0-1117.124
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp 5.4.0-1161.170
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm 5.4.0-1104.109
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-iot 5.4.0-1062.65
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-kvm 5.4.0-1145.154
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle 5.4.0-1156.166
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-xilinx-zynqmp 5.4.0-1076.80
Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS linux-aws-fips 5.4.0-1158.168+fips1
Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS linux-azure-fips 5.4.0-1162.168+fips1
Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS linux-fips 5.4.0-1132.142
Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS linux-gcp-fips 5.4.0-1161.170+fips1

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-23112

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

    In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offs…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-23209

    macvlan: fix error recovery in macvlan_common_newlink()

    In the Linux kernel, the following vulnerability has been resolved: macvlan: fix error recovery in macvlan_common_newlink() valis provided a nice repro to crash the kernel: ip link add p1 type veth peer p2 ip link set address 00:00:00:00:00:20 dev p1 ip link …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2024-50304

    ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find()

    In the Linux kernel, the following vulnerability has been resolved: ipv4: ip_tunnel: Fix suspicious RCU usage warning in ip_tunnel_find() The per-netns IP tunnel hash table is protected by the RTNL mutex and ip_tunnel_find() is only called from the control pa…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2024-50304
  • report
    https://ubuntu.com/security/CVE-2026-23112
  • report
    https://ubuntu.com/security/CVE-2026-23209