Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.3

CVE-2026-23321: Linux kernel packages may let attackers run code

CVE-2026-23321 · published 2 days ago
Summary

Several Canonical Linux kernel packages, including the standard and cloud versions, have a weakness that could allow a malicious user to run their own code on the server. This could give the attacker control over the system and expose sensitive data. Install the latest updates from Canonical as soon as possible to close the gap.

What to do
  • Update debian linux to version 6.19.8-1.
  • Update debian rootio-linux to version 6.1.164-1.root.io.120.
  • Update linux kernel to version 6.19.7.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.73.
  • Update canonical linux-bluefield to version 6.8.0-1028.33.
  • Update canonical linux-aws-6.8 to version 6.8.0-1061.64~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1063.71~22.04.1.
  • Update canonical linux-azure-fde-6.8 to version 6.8.0-1062.69~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1064.72~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-136.136~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1061.62~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-136.136.2~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1059.62~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1058.61~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-136.136~22.04.3.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1056.57~22.04.2.
  • Update canonical linux to version 6.8.0-136.136.
  • Update canonical linux-aws to version 6.8.0-1061.64.
  • Update canonical linux-azure to version 6.8.0-1063.71.
  • Update canonical linux-azure-fde to version 6.8.0-1062.69.
  • Update canonical linux-gcp to version 6.8.0-1064.72.
  • Update canonical linux-gke to version 6.8.0-1059.67.
  • Update canonical linux-gkeop to version 6.8.0-1046.50.
  • Update canonical linux-ibm to version 6.8.0-1061.62.
  • Update canonical linux-lowlatency to version 6.8.0-136.136.2.
  • Update canonical linux-nvidia to version 6.8.0-1059.62.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1059.62.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1030.31.
  • Update canonical linux-oracle to version 6.8.0-1058.61.
  • Update canonical linux-raspi to version 6.8.0-1061.65.
  • Update canonical linux-xilinx to version 6.8.0-1033.34.
  • Update canonical linux-aws-fips to version 6.8.0-1061.64+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1063.71+fips2.
  • Update canonical linux-fips to version 6.8.0-136.136+fips2.
  • Update canonical linux-gcp-fips to version 6.8.0-1064.72+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2050.52.
  • Update canonical linux-realtime to version 6.8.1-1056.57.
  • Update debian rootio-linux to version 6.12.74-2.root.io.110.
  • Update canonical rootio-linux to version 6.8.0-117.117.root.io.68.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.70.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.71.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.79.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
  • Update debian linux to version 6.1.170-1.
  • Update debian linux to version 6.12.85-1.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update linux to version 6.8.0-147.147.aikido.90.
  • Update rootio-linux to version 6.8.0-147.147.aikido.90.
  • Update linux to version 6.12.113-1.aikido.163.
  • Update rootio-linux to version 6.12.113-1.aikido.163.
  • Update linux linux to version c5c877e140e5f46023a74a51e577ce5edd0a4be7 or later.
Affected software
Ecosystem VendorProductAffected versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1061.64~22.04.1
Fix: upgrade to 6.8.0-1061.64~22.04.1
Showing 50 of 164. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1063.71~22.04.1
Fix: upgrade to 6.8.0-1063.71~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 < 6.8.0-1062.69~22.04.1
Fix: upgrade to 6.8.0-1062.69~22.04.1
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1064.72~22.04.1
Fix: upgrade to 6.8.0-1064.72~22.04.1
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-136.136~22.04.1
Fix: upgrade to 6.8.0-136.136~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1061.62~22.04.1
Fix: upgrade to 6.8.0-1061.62~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-136.136.2~22.04.1
Fix: upgrade to 6.8.0-136.136.2~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1059.62~22.04.1
Fix: upgrade to 6.8.0-1059.62~22.04.1
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1058.61~22.04.1
Fix: upgrade to 6.8.0-1058.61~22.04.1
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-136.136~22.04.3
Fix: upgrade to 6.8.0-136.136~22.04.3
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1056.57~22.04.2
Fix: upgrade to 6.8.1-1056.57~22.04.2
Ubuntu:24.04:LTS canonical linux < 6.8.0-136.136
Fix: upgrade to 6.8.0-136.136
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1061.64
Fix: upgrade to 6.8.0-1061.64
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1063.71
Fix: upgrade to 6.8.0-1063.71
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde < 6.8.0-1062.69
Fix: upgrade to 6.8.0-1062.69
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1064.72
Fix: upgrade to 6.8.0-1064.72
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.17 All versions
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1059.67
Fix: upgrade to 6.8.0-1059.67
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1046.50
Fix: upgrade to 6.8.0-1046.50
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.17 All versions
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1061.62
Fix: upgrade to 6.8.0-1061.62
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-136.136.2
Fix: upgrade to 6.8.0-136.136.2
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1059.62
Fix: upgrade to 6.8.0-1059.62
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.17 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1059.62.1
Fix: upgrade to 6.8.0-1059.62.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1030.31
Fix: upgrade to 6.8.0-1030.31
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.17 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1058.61
Fix: upgrade to 6.8.0-1058.61
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.17 All versions
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1061.65
Fix: upgrade to 6.8.0-1061.65
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.17 All versions
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1033.34
Fix: upgrade to 6.8.0-1033.34
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1028.33
Fix: upgrade to 6.8.0-1028.33
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1061.64+fips1
Fix: upgrade to 6.8.0-1061.64+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1063.71+fips2
Fix: upgrade to 6.8.0-1063.71+fips2
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-136.136+fips2
Fix: upgrade to 6.8.0-136.136+fips2
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1064.72+fips1
Fix: upgrade to 6.8.0-1064.72+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2050.52
Fix: upgrade to 6.8.0-2050.52
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1056.57
Fix: upgrade to 6.8.1-1056.57
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 All versions
Ubuntu:25.10 canonical linux All versions
Ubuntu:25.10 canonical linux-aws All versions
Ubuntu:25.10 canonical linux-azure All versions
Ubuntu:25.10 canonical linux-azure-fde All versions
Ubuntu:25.10 canonical linux-gcp All versions
Ubuntu:25.10 canonical linux-oracle All versions
Ubuntu:25.10 canonical linux-raspi All versions
Ubuntu:25.10 canonical linux-realtime All versions
Ubuntu:25.10 canonical linux-riscv All versions
Debian:12 debian linux < 6.1.170-1
Fix: upgrade to 6.1.170-1
Debian:13 debian linux < 6.12.85-1
Fix: upgrade to 6.12.85-1
Debian:14 debian linux < 6.19.8-1
Fix: upgrade to 6.19.8-1
Root:Debian:12 debian rootio-linux < 6.1.164-1.root.io.120
Fix: upgrade to 6.1.164-1.root.io.120
– linux linux_kernel >= 6.1.106, < 6.1.167
>= 6.6.46, < 6.6.130
>= 6.10.5, < 6.11
>= 6.11.1, < 6.12.78
>= 6.13, < 6.18.17
>= 6.19, < 6.19.7
6.11
7.0
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Linux linux kernel >= 6.13.0, < 6.19.7
Fix: upgrade to 6.19.7
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-124.124.root.io.73
< 6.8.0-117.117.root.io.68
< 6.8.0-124.124.root.io.70
< 6.8.0-124.124.root.io.71
< 6.8.0-134.134.root.io.79
< 6.8.0-134.134.root.io.80
< 6.8.0-136.136.root.io.82
< 6.8.0-136.136.root.io.83
Fix: upgrade to 6.8.0-124.124.root.io.73
– linux linux < c5c877e140e5f46023a74a51e577ce5edd0a4be7
6.11
Root:Debian:13 debian rootio-linux < 6.12.74-2.root.io.110
Fix: upgrade to 6.12.74-2.root.io.110
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Debian:13 – linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:13 – rootio-linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Original advisory text
CVE-2026-23321 in linux - Patched by Root
Root has patched CVE-2026-23321 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
3.3 Low
Exploitation
<1% chance of attack within 30 days
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen25 Mar 2026
Track software like this
Free during beta