Distro News

Ubuntu releases security updates for Linux kernel OEM vulnerabilities

Key Takeaway

Ubuntu has patched numerous vulnerabilities in the Linux kernel OEM subsystem affecting networking, file systems, and drivers.

Summary

Ubuntu has issued security notice USN-8911-1 to address several vulnerabilities within the Linux kernel (OEM). These flaws could potentially allow an attacker to compromise a system. The update covers a wide range of subsystems including networking protocols, file systems, and various hardware drivers.

Affected kernel subsystems

  • Networking: IPv4, IPv6, Netfilter, Open vSwitch, SCTP, TIPC, and RxRPC session sockets.
  • File Systems: GFS2, OCFS2, and SMB.
  • Drivers: Hardware crypto device drivers, NVIDIA Tegra memory controller, Network drivers, USB core, and SoundWire (SDCA) ASoC.
  • Other: B.A.T.M.A.N. meshing protocol and Ceph Core library.
  • CVEs: Includes CVE-2026-43095, CVE-2026-52914, and 27 other identified vulnerabilities.

Why it matters

Users running Ubuntu OEM kernels should apply these updates immediately to mitigate risks across critical networking and storage subsystems.

Original reference: ubuntu.com →