Skip to main content
CVE-2026-43284VulnerabilityPublished Updated

linux, linux-aws, linux-gcp, linux-ibm, linux-nvidia, linux-oracle, linux-raspi, linux-realtime vulnerabilities

Affects Linux kernelSource GCVE Database

0
Compare

Mentioned vulnerabilities

Public exploit available (Metasploit, Exploit-DB) · fixed in 7.0.0-22.22 : patch Linux kernel as a priority.

Data as of 6 Nov 2026, 15:03 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Patch
Available – fixed in 7.0.0-22.22, 7.0.0-1006.6, 7.0.0-1005.5 +4

Exploitation evidence

t = 0 is the CVE’s publication on cve.org

  1. Disclosed: evidence found.

    CVE published 2 Jun 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  4. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

Timeline

  1. First Exploit-DB entry (opens in a new tab)

    Linux Kernel - Local Privilege Escalation +1 more

    , 6 days before disclosure

  2. CVE published

    on cve.org

    , t = 0

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
Ubuntu 26.04 LTSlinuxpkg:deb/ubuntu/linux?arch=source&distro=resoluteOther threatsAffected
  • <7.0.0-22.22
Fixed in
  • 7.0.0-22.22
Ubuntu 26.04 LTSlinux-awspkg:deb/ubuntu/linux-aws?arch=source&distro=resoluteOther threatsAffected
  • <7.0.0-1006.6
Fixed in
  • 7.0.0-1006.6
Ubuntu 26.04 LTSlinux-gcppkg:deb/ubuntu/linux-gcp?arch=source&distro=resoluteOther threatsAffected
  • <7.0.0-1005.5
Fixed in
  • 7.0.0-1005.5
Ubuntu 26.04 LTSlinux-ibmpkg:deb/ubuntu/linux-ibm?arch=source&distro=resoluteOther threatsAffected
  • <7.0.0-1007.7
Fixed in
  • 7.0.0-1007.7
Ubuntu 26.04 LTSlinux-nvidiapkg:deb/ubuntu/linux-nvidia?arch=source&distro=resoluteOther threatsAffected
  • <7.0.0-1009.9
Fixed in
  • 7.0.0-1009.9
Ubuntu 26.04 LTSlinux-oraclepkg:deb/ubuntu/linux-oracle?arch=source&distro=resoluteOther threatsAffected
  • <7.0.0-1005.5
Fixed in
  • 7.0.0-1005.5

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and should be applied promptly. Ubuntu has released fixed Linux kernel packages (e.g., version 7.0.0-22.22 and later) addressing these vulnerabilities. Users should update their systems using standard package management tools and reboot to apply the kernel updates. Due to ABI changes, third-party kernel modules must be recompiled and reinstalled after updating. No other specific mitigations are indicated by the vendor advisory.

Description

Multiple security vulnerabilities were discovered in the Linux kernel affecting various subsystems including socket buffer handling (Dirty Frag and Fragnesia flaws), ptrace race conditions, and AppArmor notification handling. These issues could allow local attackers to escalate privileges, escape containers, cause resource exhaustion, kernel crashes, memory corruption, or information disclosure. The vulnerabilities affect Ubuntu Linux kernel versions 6.8, 6.17, 7.0, and related variants. Fixes have been released and are available in updated kernel packages.

References

Community reviews

Loading reviews…