Ubuntu USN-8529-1: Linux Kernel Security Bulletin Fixing Multiple CVEs (RCE/LoE)

Vulnerability Overview Vulnerability ID: USN-8529-1 Release Date: July 10, 2026 Vulnerability Description: Multiple security vulnerabilities exist in the Linux kernel, including logical errors, driver issues, and filesystem problems. Specific vulnerabilities include: - Logic errors in the XFRM ESP-in-TCP subsystem (CVE-2026-43503) - Security issues in subsystems such as InfiniBand drivers, SCSI subsystems, thermal drivers, USB over IP drivers, NFS server daemons, SMB network file system, tracing infrastructure, BATMAN.meshing protocol, Ethernet bridge, Ceph core library, DCCP, IPv4 networking, IPv6 networking, Netfilter, and RxRPC sessions. Scope of Impact Affected Systems: Linux Kernel Affected Versions: 18.04 LTS Remediation Update Instructions: - A system restart is required after a standard system update to apply all changes. - Due to ABI changes, kernel updates are assigned new version numbers, requiring all third-party kernel modules to be recompiled and installed. - Standard system upgrades will automatically perform this operation after manually uninstalling standard kernel meta-packages (such as , , , ). Specific Update Package Versions: - - 4.15.0-1149.161 - - 4.15.0-1156.167 - - 4.15.0-1176.181 - - 4.15.0-1187.204 - - 4.15.0-1204.219 - - 4.15.0-2095.101 - - 4.15.0-2112.118 - - 4.15.0-253.265 - - 4.15.0-253.265 - - 4.15.0.1204.172 - - 4.15.0.2112.108 - - 4.15.0.2112.108 - - 4.15.0.1204.172 - - 4.15.0.1149.146 - - 4.15.0.1187.200 - - 4.15.0.2095.93 - - 4.15.0.2095.93 - - 4.15.0.1187.200 - - 4.15.0.253.237 - - 4.15.0.1176.167 - - 4.15.0.253.237 - - 4.15.0.1156.161 - - 4.15.0.1156.161 - - 4.15.0.253.237 References CVE-2026-46243 CVE-2026-46119 CVE-2026-46043 CVE-2026-45988 CVE-2026-43503 CVE-2026-43414 CVE-2026-43407 CVE-2026-43383 CVE-2026-43038 CVE-2026-43037 Related Notices USN-8528-1 USN-8527-1 USN-8508-1 USN-8507-1 USN-8501-1 USN-8499-1 USN-8498-1 USN-8497-1 USN-8493-1 USN-8493-2 Additional Information Reduce Security Risks: Ubuntu Pro provides ten years of security coverage for packages in the main and universe repositories, with free usage for up to five machines. Contact Information For further questions, please contact team members. Footer Information Includes trademark and legal statements for Ubuntu, Canonical, etc.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8529-1: Linux Kernel Security Bulletin Fixing Multiple CVEs (RCE/LoE)

More from this source