Bugs addressed in recent updates
| Origin | Bug number | Title | Packages |
|---|---|---|---|
| CVE | CVE-2026-53388 | In the Linux kernel, the following vulnerability has been resolved: fuse: re-lock request before replacing page cache folio fuse_try_move_folio() u | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-53385 | In the Linux kernel, the following vulnerability has been resolved: vc_screen: fix null-ptr-deref in vcs_notifier() during concurrent vcs_write A K | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-53383 | In the Linux kernel, the following vulnerability has been resolved: ksmbd: reject non-VALID session in compound request branch smb2_check_user_sess | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-53382 | In the Linux kernel, the following vulnerability has been resolved: media: vidtv: fix NULL pointer dereference in vidtv_mux_push_si syzbot reported | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-53381 | In the Linux kernel, the following vulnerability has been resolved: virtiofs: fix UAF on submount umount iput() called from fuse_release_end() can | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63807 | In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before checking max mapping level W | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63836 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: avoid divide-by-zero for dec_cwnd The cwnd is always MSS | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63835 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: v: prevent OGM aggregation on disabled hardif When an interface get | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63834 | In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: restrict number of unacked list entries When the unacked_ | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-53366 | In the Linux kernel, the following vulnerability has been resolved: ipv4: account for fraggap on the paged allocation path In __ip_append_data(), w | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63833 | In the Linux kernel, the following vulnerability has been resolved: ntfs3: reject direct userspace writes to reserved $LX* xattrs NTFS3 uses $LXUID | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63831 | In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: add skb_cow_data() before in-place crypto llsec_do_encrypt_un | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-64254 | In the Linux kernel, the following vulnerability has been resolved: NTB: epf: Avoid pci_iounmap() with offset when PEER_SPAD and CONFIG share BAR W | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63826 | In the Linux kernel, the following vulnerability has been resolved: fbdev: fix use-after-free in store_modes() store_modes() replaces a framebuffer | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63824 | In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal ou | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63823 | In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_key() | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63822 | In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix warning when unbinding If there is an error during some initi | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63821 | In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: usb: fix memory leaks on USB write failures When rtw_usb_write_por | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63814 | In the Linux kernel, the following vulnerability has been resolved: f2fs: validate ACL entry sizes in f2fs_acl_from_disk() f2fs_acl_count() only va | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
| CVE | CVE-2026-63812 | In the Linux kernel, the following vulnerability has been resolved: f2fs: fix incorrect FI_NO_EXTENT handling in __destroy_extent_node() When __des | linux linux-hwe-6.8 linux linux-riscv-6.8 linux-lowlatency-hwe-6.8 linux-riscv-6.8 |
About
-
Send Feedback to @ubuntu_updates
