Skip to content
OpenAdvisories
Critical USN-9027-1 5 CVEs

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-5.15, linux-azure-fde-5.15, linux-azure-fips, linux-gcp, linux-gcp-5.15, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-oracle-5.15, linux-realtime vulnerabilities

Published Nov 10, 2026 · Updated Nov 11, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Hardware monitoring drivers;
- OCFS2 file system;
- IPv4 networking;
- Ethernet bridge;
- Netfilter;
- XFRM subsystem;
(CVE-2025-21656, CVE-2026-63940, CVE-2026-74350, CVE-2026-98432,
CVE-2026-99999)

Fixed packages 28

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-203.213
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1120.127
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1126.135
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1121.131
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1116.122
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1103.111
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1114.118
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1115.121
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1112.117
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-198.208
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1115.116
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-tegra 5.15.0-1071.73
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1117.123
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1120.127~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure-5.15 5.15.0-1126.135~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure-fde-5.15 5.15.0-1125.134~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1121.131~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-203.213~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1114.118~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-intel-iotg-5.15 5.15.0-1115.121~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-198.208~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-nvidia-tegra-5.15 5.15.0-1071.73~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle-5.15 5.15.0-1117.123~20.04.1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-aws-fips 5.15.0-1120.127+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-azure-fips 5.15.0-1126.135+fips1
Ubuntu · Pro FIPS-updates 22.04 LTS Pro:FIPS-updates:22.04:LTS linux-gcp-fips 5.15.0-1121.131+fips1
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-intel-iot-realtime 5.15.0-1112.116
Ubuntu · Pro Realtime 22.04 LTS Pro:Realtime:22.04:LTS linux-realtime 5.15.0-1119.128

Vulnerabilities 5

  • Critical 9.8
    CVE-2026-74350

    ocfs2: validate fast symlink target during inode read

    In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate fast symlink target during inode read ocfs2_validate_inode_block() already rejects several inconsistent self-contained dinodes before they are exposed to the rest of the files…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.8
    CVE-2026-98432 Public exploit

    ipv4: free inet_opt and ireq_opt after an RCU grace period

    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.3
    CVE-2026-63940

    KVM: SEV: Ignore Port I/O requests of length '0'

    In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or count '0'), so that setting up the software scratch area (and other code) doesn't have t…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Critical 9.3
    CVE-2026-99999 Public exploit

    ipv4: validate checksum_start before completing checksum

    In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad checksum metadata gets into the ipv4 stack, skb_checksum_help can corrupt the network header and cause a bunch of…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • Unscored —
    CVE-2025-21656

    hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

    In the Linux kernel, the following vulnerability has been resolved: hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur scsi_execute_cmd() function can return both negative (linux codes) and positive (scsi_cmnd result field) error code…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2025-21656
  • report
    https://ubuntu.com/security/CVE-2026-63940
  • report
    https://ubuntu.com/security/CVE-2026-74350
  • report
    https://ubuntu.com/security/CVE-2026-98432
  • report
    https://ubuntu.com/security/CVE-2026-99999