Back to vendor advisories
Ubuntu Security NoticesUSN-9018-1

USN-9018-1: Linux kernel vulnerabilities

Severity not listed 77 CVEs Published Nov 10, 2026 at 8:42 AM UTC

Summary

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

- Network file systems library;

- Stream parser;

- ARM64 architecture;

- PowerPC architecture;

- RISC-V architecture;

- S390 architecture;

- User-Mode Linux (UML);

- x86 architecture;

- Block layer subsystem;

- Android drivers;

- Bluetooth drivers;

- TPM device driver;

- DPLL subsystem;

- EDAC drivers;

- GPIO subsystem;

- GPU drivers;

- HID subsystem;

- IIO subsystem;

- IIO ADC drivers;

- InfiniBand drivers;

- Input Device (Miscellaneous) drivers;

- Multiple devices driver;

- MemoryStick subsystem;

- MMC subsystem;

- MTD block device drivers;

- Network drivers;

- Ethernet bonding driver;

- Mellanox network drivers;

- STMicroelectronics network drivers;

- Ethernet team driver;

- MediaTek network drivers;

- NVME drivers;

- Device tree and open firmware driver;

- Power sequencing drivers;

- Voltage and Current Regulator drivers;

- Real Time Clock drivers;

- SCSI subsystem;

- Greybus lights staging drivers;

- Trusted Execution Environment drivers;

- Thunderbolt and USB4 drivers;

- TTY drivers;

- Cadence USB3 driver;

- USB Device Class drivers;

- USB core drivers;

- DesignWare USB2 driver;

- DesignWare USB3 driver;

- USB Gadget drivers;

- USB Serial drivers;

- USB Mass Storage drivers;

- USB Type-C support driver;

- USB Type-C Port Controller Manager driver;

- TI TPS6598x USB Power Delivery controller driver;

- USB Type-C Connector System Software Interface driver;

- Amazon Nitro Enclaves driver;

- Virtual machine generation ID driver;

- BTRFS file system;

- File systems infrastructure;

- SMB network file system;

- XFS file system;

- BPF subsystem;

- io_uring subsystem;

- Netfilter;

- Namespaces infrastructure;

- Networking core;

- Networking subsytem;

- Virtio network driver;

- Bluetooth subsystem;

- IPv4 networking;

- Network traffic control;

- Audit subsystem;

- Control group (cgroup);

- Perf events;

- Kernel fork() syscall;

- Kernel futex primitives;

- KProbes tracing;

- Kexec HandOver (KHO);

- Kernel module support;

- Tracing infrastructure;

- Workqueue subsystem;

- Memory management;

- Ethernet bridge;

- Devlink API;

- IPv6 networking;

- MAC80211 subsystem;

- Management Component Transport Protocol (MCTP);

- Open vSwitch;

- Packet sockets;

- SCTP protocol;

- SMC sockets;

- TIPC protocol;

- VMware vSockets driver;

- Wireless networking;

- XFRM subsystem;

- Drivers core;

- Key management;

- SELinux security module;

- ALSA framework;

- Creative Sound Blaster X-Fi driver;

- Analog Devices audio codecs;

- Maxim audio codecs;

- Realtek audio codecs;

- QCOM ASoC drivers;

- Samsung ASoC drivers;

- SoundWire (SDCA) ASoC drivers;

- USB sound devices;

View 379 CVE identifiers

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

This update corrects flaws in the following subsystems:

  • Network file systems library
  • Stream parser
  • ARM64 architecture
  • PowerPC architecture
  • RISC-V architecture
  • S390 architecture
  • User-Mode Linux (UML)
  • x86 architecture
  • Block layer subsystem
  • Android drivers
  • Bluetooth drivers
  • TPM device driver
  • DPLL subsystem
  • EDAC drivers
  • GPIO subsystem
  • GPU drivers
  • HID subsystem
  • IIO subsystem
  • IIO ADC drivers
  • InfiniBand drivers
  • Input Device (Miscellaneous) drivers
  • Multiple devices driver
  • MemoryStick subsystem
  • MMC subsystem
  • MTD block device drivers
  • Network drivers
  • Ethernet bonding driver
  • Mellanox network drivers
  • STMicroelectronics network drivers
  • Ethernet team driver
  • MediaTek network drivers
  • NVME drivers
  • Device tree a

CVEs in this advisory 77

Updates

  1. Published by Ubuntu

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.