CVE-2026-43284: linux-azure vulnerabilities
Affects Linux kernelSource GCVE Database
Mentioned vulnerabilities
Public exploit available (Metasploit, Exploit-DB) : upgrade to 7.0.0-1007.7 as a priority.
Data as of 6 Nov 2026, 15:03 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 7.0.0-1007.7
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 22 Jun 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
1 Metasploit module · 2 Exploit-DB entries, the first 26 days before disclosure
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
First Exploit-DB entry (opens in a new tab)
Linux Kernel - Local Privilege Escalation +1 more
, 26 days before disclosure
CVE published
on cve.org
, t = 0
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade the Ubuntu linux-azure package to 7.0.0-1007.7.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu 26.04 LTSlinux-azurepkg:deb/ubuntu/linux-azure?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and has been released in linux-azure kernel version 7.0.0-1007.7. Users should update their systems to this version or later and reboot to apply the fixes. Due to an ABI change, recompilation and reinstallation of third-party kernel modules may be required. Follow the official Ubuntu security notice USN-8461-1 for detailed update instructions.
Description
Multiple security vulnerabilities were discovered in the Linux kernel for Azure (linux-azure), including logic flaws in networking subsystems (XFRM ESP-in-TCP, RxRPC), race conditions in ptrace, and various memory handling issues in AppArmor notifications. These issues could allow local attackers to escalate privileges, escape containers, cause resource exhaustion, kernel panics, or disclose sensitive information. The vulnerabilities affect specific linux-azure kernel versions prior to 7.0.0-1007.7 and have been addressed in updated kernel releases.
References
- ubuntu.com/security/notices/USN-8461-1 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43284 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43494 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43500 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43503 (opens in a new tab)
- ubuntu.com/security/CVE-2026-45998 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46000 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46300 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46323 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46333 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47326 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47327 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47328 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47329 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47330 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47332 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47333 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47334 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47337 (opens in a new tab)