Advisories

Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; - IPv4 networking; - Ethernet bridge; - Netfilter; - XFRM subsystem; (CVE-2025-21656, CVE-2026-63940, CVE-2026-74350, CVE-2026-98432, CVE-2026-99999)

Read at Ubuntu Security Notices

Vendor

Canonical, Linux kernel

Product

Linux kernel

EPSS

0.008 (p57)

Exposure class

Operating system

• Ubuntu Security Notices (ubuntu.com)
• CVE-2025-21656 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-63940 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-74350 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-98432 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-99999 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 46
   Ubuntu notice Ubuntu 20h ago

   Linux kernel (HWE) vulnerabilities

   CVE-2026-68305CVE-2026-72404CVE-2026-72497+57 more Canonical Google
2. 37
   Ubuntu notice Ubuntu 2d ago

   Linux kernel (NVIDIA BaseOS) vulnerabilities

   CVE-2026-98239CVE-2026-98432 Canonical Linux kernel
3. 27
   Ubuntu notice Ubuntu 3d ago

   Linux kernel (Raspberry Pi) vulnerabilities

   CVE-2022-1205CVE-2022-3114CVE-2022-49234+57 more Canonical Linux kernel
4. 21
   Ubuntu notice Ubuntu 3d ago

   Linux kernel (AWS) vulnerabilities

   CVE-2022-23037CVE-2021-47633CVE-2022-49058+15 more Canonical Linux kernel
5. 21
   Ubuntu notice Ubuntu 3d ago

   Linux kernel vulnerabilities

   CVE-2022-23036CVE-2022-23037CVE-2021-47633+16 more Canonical Linux kernel
6. 32
   Threat signal FortiGuard 9d ago

   Linux Kernel Remote Code Execution

   Fix available CVE-2026-98432 Fortinet Linux kernel
7. 16
   Research Check Point Research 10d ago

   2nd November – Threat Intelligence Report

   CVE-2026-111497CVE-2026-98432CVE-2026-118539+1 more
8. 16
   ISC diary SANS ISC 10d ago

   Mutipath TCP: Use and Detection

   CVE-2026-98432
9. 54
   Advisory Fortinet PSIRT 11d ago

   Linux kernel RCE CVE-2026-98432

   CVSS 9.8 Fix available CVE-2026-98432 Fortinet Linux kernel
10. 31
    AWS bulletin AWS 13d ago

    CVE-2026-98432 - Linux kernel IPv4 TCP use-after-free Issue

    CVE-2026-98432 Amazon Web Services Linux kernel
11. 22
    CCCS advisory CCCS 13d ago

    Linux security advisory (AV26-1108)

    CVE-2026-98432
12. 43
    Google Cloud bulletin Google Cloud 20d ago

    GCP-2026-081

    Fix available CVE-2024-36350CVE-2024-36357CVE-2026-0004+9 more Google AMD
13. 26
    News The Register 25d ago

    Linux KVM guest-host escape rated critical, may represent a new way to attack penguin-powered networking

    CVE-2026-99999
14. 31
    AWS bulletin AWS 28d ago

    Issue in the Linux kernel virtio-net/TAP networking path affecting KVM-based hypervisors

    No fix yet CVE-2026-99999 Amazon Web Services Linux kernel
15. 46
    CVE NVD 28d ago

    In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a packet with bad…

    CVSS 9.3 Fix available CVE-2026-99999 Linux kernel
16. 28
    CVE NVD 28d ago

    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU grace period tcp_v4_syn_recv_sock()…

    Fix available CVE-2026-98432 Linux kernel
17. 20
    Advisory MSRC 21 Jul 2026

    CVE-2026-63940 KVM: SEV: Ignore Port I/O requests of length '0'

    CVE-2026-63940 Microsoft
18. 28
    CVE NVD 19 Jul 2026

    In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O…

    Fix available CVE-2026-63940 Linux kernel