Skip to content
OpenAdvisories
Critical USN-8851-1 3 CVEs

linux, linux-aws, linux-azure, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Published Sep 30, 2026 · Updated Sep 30, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network file system (NFS) server daemon;
- IPv6 networking;
- Netfilter;
(CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)

Fixed packages 14

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-5.4 5.4.0-1167.176~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-241.261~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-oracle-5.4 5.4.0-1162.172~18.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux 5.4.0-241.261
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws 5.4.0-1164.175
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure 5.4.0-1169.175
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp 5.4.0-1167.177
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-iot 5.4.0-1068.71
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-kvm 5.4.0-1151.160
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle 5.4.0-1162.172
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-raspi 5.4.0-1147.160
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-xilinx-zynqmp 5.4.0-1082.86
Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS linux-fips 5.4.0-1138.148
Ubuntu · Pro FIPS-updates 20.04 LTS Pro:FIPS-updates:20.04:LTS linux-gcp-fips 5.4.0-1167.176+fips1

Vulnerabilities 3

  • Critical 9.8
    CVE-2025-38724

    nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()

    In the Linux kernel, the following vulnerability has been resolved: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that nfsd4_setclientid_confirm() did not check the return value from get_client_locked(). a SE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.8
    CVE-2026-53221

    ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()

    In the Linux kernel, the following vulnerability has been resolved: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() In vti6_tnl_lookup(), when an exact match for a tunnel fails, the code falls back to searching for wildcard tunnels: - Tunnels matc…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.4
    CVE-2026-53131

    netfilter: require Ethernet MAC header before using eth_hdr()

    In the Linux kernel, the following vulnerability has been resolved: netfilter: require Ethernet MAC header before using eth_hdr() `ip6t_eui64`, `xt_mac`, the `bitmap:ip,mac`, `hash:ip,mac`, and `hash:mac` ipset types, and `nf_log_syslog` access `eth_hdr(skb)`…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-38724
  • report
    https://ubuntu.com/security/CVE-2026-53131
  • report
    https://ubuntu.com/security/CVE-2026-53221