Skip to content
OpenAdvisories
Critical USN-9044-1 2 CVEs

linux-nvidia-bos vulnerabilities

Published Nov 11, 2026 · Updated Nov 12, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- IPv4 networking;
(CVE-2026-98239, CVE-2026-98432)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 26.04 LTS 26.04:LTS linux-nvidia-bos 7.0.0-2024.25

Vulnerabilities 2

  • Critical 9.8
    CVE-2026-98432 Public exploit

    ipv4: free inet_opt and ireq_opt after an RCU grace period

    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock() transfers ownership of ireq->ireq_opt to the child socket (newinet->inet_opt) without copying it. Another cpu…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.1
    CVE-2026-98239

    net: lan743x: fix RX checksum use-after-free

    In the Linux kernel, the following vulnerability has been resolved: net: lan743x: fix RX checksum use-after-free lan743x_rx_process_buffer() adds each non-first receive buffer to the head skb's frag_list. On the last descriptor, lan743x_rx_trim_skb() lineariz…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2026-98239
  • report
    https://ubuntu.com/security/CVE-2026-98432