Back to vendor advisories
Ubuntu Security NoticesUSN-8920-1

USN-8920-1: Linux kernel vulnerabilities

Severity not listed 12 CVEs Published Oct 13, 2026 at 3:09 PM UTC

Summary

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

- Ethernet bonding driver;

- Network drivers;

- F2FS file system;

- Network file system (NFS) server daemon;

- Tracing infrastructure;

- io_uring subsystem;

- Networking core;

- IPv6 networking;

- IUCV driver;

- Netfilter;

- RxRPC session sockets;

View 12 CVE identifiers

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

This update corrects flaws in the following subsystems:

  • Ethernet bonding driver
  • Network drivers
  • F2FS file system
  • Network file system (NFS) server daemon
  • Tracing infrastructure
  • io_uring subsystem
  • Networking core
  • IPv6 networking
  • IUCV driver
  • Netfilter
  • RxRPC session sockets; (CVE-2022-49149, CVE-2022-49170, CVE-2022-49182, CVE-2022-49201, CVE-2024-53187, CVE-2024-53210, CVE-2024-56763, CVE-2025-38724, CVE-2026-43456, CVE-2026-52910, CVE-2026-53131, CVE-2026-53221)

CVEs in this advisory 12

Updates

  1. Published by Ubuntu

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.