linux, linux-aws, linux-gcp, linux-ibm, linux-nvidia, linux-oracle, linux-raspi, linux-realtime vulnerabilities
Affects Linux kernelSource GCVE Database
Mentioned vulnerabilities
Public exploit available (Metasploit, Exploit-DB) · fixed in 7.0.0-22.22 : patch Linux kernel as a priority.
Data as of 6 Nov 2026, 15:03 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
- Patch
- Available – fixed in 7.0.0-22.22, 7.0.0-1006.6, 7.0.0-1005.5 +4
Exploitation evidence
t = 0 is the CVE’s publication on cve.org
Disclosed: evidence found.
CVE published 2 Jun 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: evidence found.
1 Metasploit module · 2 Exploit-DB entries, the first 6 days before disclosure
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
Timeline
First Exploit-DB entry (opens in a new tab)
Linux Kernel - Local Privilege Escalation +1 more
, 6 days before disclosure
CVE published
on cve.org
, t = 0
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 6 Nov 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Patches and advisories
Affected software
| Product | Affected | Fixed in |
|---|---|---|
Ubuntu 26.04 LTSlinuxpkg:deb/ubuntu/linux?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSlinux-awspkg:deb/ubuntu/linux-aws?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSlinux-gcppkg:deb/ubuntu/linux-gcp?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSlinux-ibmpkg:deb/ubuntu/linux-ibm?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSlinux-nvidiapkg:deb/ubuntu/linux-nvidia?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Ubuntu 26.04 LTSlinux-oraclepkg:deb/ubuntu/linux-oracle?arch=source&distro=resoluteOther threats | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available and should be applied promptly. Ubuntu has released fixed Linux kernel packages (e.g., version 7.0.0-22.22 and later) addressing these vulnerabilities. Users should update their systems using standard package management tools and reboot to apply the kernel updates. Due to ABI changes, third-party kernel modules must be recompiled and reinstalled after updating. No other specific mitigations are indicated by the vendor advisory.
Description
Multiple security vulnerabilities were discovered in the Linux kernel affecting various subsystems including socket buffer handling (Dirty Frag and Fragnesia flaws), ptrace race conditions, and AppArmor notification handling. These issues could allow local attackers to escalate privileges, escape containers, cause resource exhaustion, kernel crashes, memory corruption, or information disclosure. The vulnerabilities affect Ubuntu Linux kernel versions 6.8, 6.17, 7.0, and related variants. Fixes have been released and are available in updated kernel packages.
References
- ubuntu.com/security/notices/USN-8370-1 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43284 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43494 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43500 (opens in a new tab)
- ubuntu.com/security/CVE-2026-43503 (opens in a new tab)
- ubuntu.com/security/CVE-2026-45998 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46000 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46300 (opens in a new tab)
- ubuntu.com/security/CVE-2026-46333 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47326 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47327 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47328 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47329 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47330 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47332 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47333 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47334 (opens in a new tab)
- ubuntu.com/security/CVE-2026-47337 (opens in a new tab)