Skip to content
OpenAdvisories
Unscored USN-8390-2 0 CVEs

linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerability

Published Jun 17, 2026 · Updated Aug 19, 2026

Summary

It was discovered that the Linux kernel did not properly handle shared page
fragments during socket buffer operations, collectively known as Dirty
Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the
RxRPC networking subsystem when processing paged fragments. A local
attacker could use this to escalate privileges, or possibly escape a
container.

Fixed packages 4

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-azure 4.15.0-1202.217~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-gcp 4.15.0-1186.203~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-hwe 4.15.0-251.263~16.04.1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS linux-oracle 4.15.0-1155.166~16.04.1

References

  • report
    https://ubuntu.com/security/CVE-2026-43284