Skip to content
OpenAdvisories
Critical USN-8658-1 3 CVEs

linux, linux-aws, linux-aws-fips, linux-azure-fips, linux-gkeop, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities

Published Aug 20, 2026 · Updated Oct 8, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Open vSwitch;
- SCTP protocol;
(CVE-2026-53224, CVE-2026-53246, CVE-2026-64531)

Fixed packages 17

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-190.200
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1114.121
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1097.105
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1109.115
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1106.111
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1109.110
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-tegra 5.15.0-1066.68
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1111.117
Ubuntu · 22.04 LTS 22.04:LTS linux-xilinx-zynqmp 5.15.0-1077.81
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1108.112~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-intel-iotg-5.15 5.15.0-1109.115~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-nvidia-tegra-5.15 5.15.0-1066.68~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle-5.15 5.15.0-1111.117~20.04.1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-aws-fips 5.15.0-1114.121+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-azure-fips 5.15.0-1119.128+fips1
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-intel-iot-realtime 5.15.0-1106.108
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-realtime 5.15.0-1113.122

Vulnerabilities 3

  • Critical 9.8
    CVE-2026-53246

    sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing

    In the Linux kernel, the following vulnerability has been resolved: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing When a listening SCTP server processes a COOKIE_ECHO chunk, the cached peer INIT chunk embedded after the cookie is pars…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.1
    CVE-2026-53224

    sctp: validate embedded INIT chunk and address list lengths in cookie

    In the Linux kernel, the following vulnerability has been resolved: sctp: validate embedded INIT chunk and address list lengths in cookie sctp_unpack_cookie() only checked that the embedded INIT chunk length did not exceed the remaining cookie payload, but di…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2026-64531 Public exploit

    net: openvswitch: reject oversized nested action attrs

    In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: reject oversized nested action attrs Open vSwitch stores generated flow actions as nlattrs, whose nla_len field is u16. Commit a1e64addf3ff ("net: openvswitch: remove misbeh…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-53224
  • report
    https://ubuntu.com/security/CVE-2026-53246
  • report
    https://ubuntu.com/security/CVE-2026-64531