Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2026-43500: Linux kernel could expose data in shared network packets
CVE-2026-43500 · published 5 months ago
Summary
The Linux kernel versions used in Canonical's GCP, IBM, Azure 5.3, Azure 5.4, and Azure Edge builds may mishandle network packets that contain shared memory fragments, potentially allowing unauthorized access to packet contents. This can happen when certain packet handling tricks are used, causing the data to be processed without proper isolation. Updating the affected kernel packages to the latest version resolves the issue.
What to do
- Update debian linux to version 5.10.251-4.
- Update debian linux to version 6.1.170-3.
- Update debian linux to version 6.12.86-1.
- Update debian linux to version 7.0.4-1.
- Update debian linux-6.1 to version 6.1.170-3~deb11u1.
- Update linux kernel to version 7.0.6.
- Update canonical linux-aws-5.4 to version 5.4.0-1160.170~18.04.1.
- Update canonical linux-azure-5.4 to version 5.4.0-1164.170~18.04.1.
- Update canonical linux-gcp-5.4 to version 5.4.0-1163.172~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-231.251~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1107.112~18.04.1.
- Update canonical linux-oracle-5.4 to version 5.4.0-1158.168~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1143.156~18.04.1.
- Update canonical linux to version 5.4.0-231.251.
- Update canonical linux-aws to version 5.4.0-1160.170.
- Update canonical linux-aws-5.15 to version 5.15.0-1109.116~20.04.1.
- Update canonical linux-azure to version 5.4.0-1164.170.
- Update canonical linux-azure-5.15 to version 5.15.0-1114.123~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1119.126.
- Update canonical linux-gcp to version 5.4.0-1163.172.
- Update canonical linux-gcp-5.15 to version 5.15.0-1109.118~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-181.191~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1107.112.
- Update canonical linux-ibm-5.15 to version 5.15.0-1103.106~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1104.110~20.04.1.
- Update canonical linux-iot to version 5.4.0-1064.67.
- Update canonical linux-kvm to version 5.4.0-1147.156.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-181.191~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1061.61~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1158.168.
- Update canonical linux-oracle-5.15 to version 5.15.0-1106.112~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1143.156.
- Update canonical linux-riscv-5.15 to version 5.15.0-1103.107~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1078.82.
- Update canonical linux-aws-fips to version 5.4.0-1160.170+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1164.170+fips1.
- Update canonical linux-fips to version 5.4.0-1134.144.
- Update canonical linux-gcp-fips to version 5.4.0-1163.172+fips1.
- Update canonical linux to version 5.15.0-181.191.
- Update canonical linux-aws to version 5.15.0-1109.116.
- Update canonical linux-aws-6.8 to version 6.8.0-1057.60~22.04.1.
- Update canonical linux-azure to version 5.15.0-1114.123.
- Update canonical linux-azure-6.8 to version 6.8.0-1059.65~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1109.118.
- Update canonical linux-gcp-6.8 to version 6.8.0-1060.63~22.04.1.
- Update canonical linux-gke to version 5.15.0-1105.111.
- Update canonical linux-gkeop to version 5.15.0-1092.100.
- Update canonical linux-hwe-6.8 to version 6.8.0-124.124~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1103.106.
- Update canonical linux-ibm-6.8 to version 6.8.0-1057.58~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1104.110.
- Update canonical linux-kvm to version 5.15.0-1101.106.
- Update canonical linux-lowlatency to version 5.15.0-181.191.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-134.134.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1104.105.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1055.58~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1061.61.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1050.50.
- Update canonical linux-oracle to version 5.15.0-1106.112.
- Update canonical linux-oracle-6.8 to version 6.8.0-1054.55~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1103.106.
- Update canonical linux-riscv-6.8 to version 6.8.0-124.124~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1074.78.
- Update canonical linux-bluefield to version 5.15.0-1093.95.
- Update canonical linux-aws-fips to version 5.15.0-1109.116+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1114.123+fips1.
- Update canonical linux-fips to version 5.15.0-181.191+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1109.118+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1101.103.
- Update canonical linux-realtime to version 5.15.0-1108.117.
- Update canonical linux-realtime-6.8 to version 6.8.1-1052.53~22.04.1.
- Update canonical linux to version 6.8.0-124.124.
- Update canonical linux-aws to version 6.8.0-1057.60.
- Update canonical linux-aws-6.17 to version 6.17.0-1017.17~24.04.1.
- Update canonical linux-azure to version 6.8.0-1058.64.
- Update canonical linux-azure-6.17 to version 6.17.0-1017.17~24.04.1.
- Update canonical linux-gcp to version 6.8.0-1060.63.
- Update canonical linux-gcp-6.17 to version 6.17.0-1018.19~24.04.1.
- Update canonical linux-gke to version 6.8.0-1055.61.
- Update canonical linux-gkeop to version 6.8.0-1042.45.
- Update canonical linux-hwe-6.17 to version 6.17.0-35.35~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1057.58.
- Update canonical linux-lowlatency to version 6.8.0-134.134.1.
- Update canonical linux-nvidia to version 6.8.0-1055.58.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1021.21.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1055.58.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1026.26.
- Update canonical linux-oem-6.17 to version 6.17.0-1024.24.
- Update canonical linux-oracle to version 6.8.0-1054.55.
- Update canonical linux-oracle-6.17 to version 6.17.0-1016.16~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1057.61.
- Update canonical linux-riscv-6.17 to version 6.17.0-35.35.1~24.04.1.
- Update canonical linux-aws-fips to version 6.8.0-1057.60+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1059.65+fips1.
- Update canonical linux-fips to version 6.8.0-124.124+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1060.63+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2046.47.
- Update canonical linux-realtime to version 6.8.1-1052.53.
- Update canonical linux-realtime-6.17 to version 6.17.0-1014.16~24.04.1.
- Update canonical linux to version 6.17.0-35.35.
- Update canonical linux-aws to version 6.17.0-1017.17.
- Update canonical linux-azure to version 6.17.0-1017.17.
- Update canonical linux-gcp to version 6.17.0-1018.19.
- Update canonical linux-oracle to version 6.17.0-1016.16.
- Update canonical linux-raspi to version 6.17.0-1018.18.
- Update canonical linux-realtime to version 6.17.0-1014.16.
- Update canonical linux-riscv to version 6.17.0-35.35.1.
- Update canonical linux to version 7.0.0-22.22.
- Update canonical linux-aws to version 7.0.0-1006.6.
- Update canonical linux-azure to version 7.0.0-1007.7.
- Update canonical linux-gcp to version 7.0.0-1005.5.
- Update canonical linux-ibm to version 7.0.0-1007.7.
- Update canonical linux-nvidia to version 7.0.0-1009.9.
- Update canonical linux-oem-7.0 to version 7.0.0-1008.8.
- Update canonical linux-oracle to version 7.0.0-1005.5.
- Update canonical linux-raspi to version 7.0.0-1011.11.
- Update canonical linux-realtime to version 7.0.0-22.22.1.
- Update canonical linux-riscv to version 7.0.0-22.22.1.
- Update echo linux to version 6.12.86-1.
- Update canonical linux-xilinx to version 6.8.0-1032.33.
- Update canonical linux-bluefield to version 6.8.0-1023.27.
- Update canonical linux-azure-fde to version 5.15.0-1114.123.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1058.65.
- Update canonical linux-azure-fde to version 7.0.0-1006.6.
- Update linux linux to version 7c504ffab3efce8f7e4f463b314ae31030bdf18b or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1005.5 Fix: upgrade to 7.0.0-1005.5
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1007.7 Fix: upgrade to 7.0.0-1007.7
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1164.170~18.04.1 Fix: upgrade to 5.4.0-1164.170~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1163.172~18.04.1 Fix: upgrade to 5.4.0-1163.172~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-231.251~18.04.1 Fix: upgrade to 5.4.0-231.251~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1107.112~18.04.1 Fix: upgrade to 5.4.0-1107.112~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1158.168~18.04.1 Fix: upgrade to 5.4.0-1158.168~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1143.156~18.04.1 Fix: upgrade to 5.4.0-1143.156~18.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux |
< 5.4.0-231.251 Fix: upgrade to 5.4.0-231.251
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws |
< 5.4.0-1160.170 Fix: upgrade to 5.4.0-1160.170
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1109.116~20.04.1 Fix: upgrade to 5.15.0-1109.116~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure |
< 5.4.0-1164.170 Fix: upgrade to 5.4.0-1164.170
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1114.123~20.04.1 Fix: upgrade to 5.15.0-1114.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1119.126 Fix: upgrade to 5.4.0-1119.126
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1163.172 Fix: upgrade to 5.4.0-1163.172
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1109.118~20.04.1 Fix: upgrade to 5.15.0-1109.118~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-181.191~20.04.1 Fix: upgrade to 5.15.0-181.191~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1107.112 Fix: upgrade to 5.4.0-1107.112
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1103.106~20.04.1 Fix: upgrade to 5.15.0-1103.106~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
Showing 50 of 242. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1104.110~20.04.1 Fix: upgrade to 5.15.0-1104.110~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot |
< 5.4.0-1064.67 Fix: upgrade to 5.4.0-1064.67
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1147.156 Fix: upgrade to 5.4.0-1147.156
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-181.191~20.04.1 Fix: upgrade to 5.15.0-181.191~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1061.61~20.04.1 Fix: upgrade to 5.15.0-1061.61~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1158.168 Fix: upgrade to 5.4.0-1158.168
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1106.112~20.04.1 Fix: upgrade to 5.15.0-1106.112~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1143.156 Fix: upgrade to 5.4.0-1143.156
|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1103.107~20.04.1 Fix: upgrade to 5.15.0-1103.107~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1078.82 Fix: upgrade to 5.4.0-1078.82
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1160.170+fips1 Fix: upgrade to 5.4.0-1160.170+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1164.170+fips1 Fix: upgrade to 5.4.0-1164.170+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1134.144 Fix: upgrade to 5.4.0-1134.144
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1163.172+fips1 Fix: upgrade to 5.4.0-1163.172+fips1
|
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-181.191 Fix: upgrade to 5.15.0-181.191
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1109.116 Fix: upgrade to 5.15.0-1109.116
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1057.60~22.04.1 Fix: upgrade to 6.8.0-1057.60~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1114.123 Fix: upgrade to 5.15.0-1114.123
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1059.65~22.04.1 Fix: upgrade to 6.8.0-1059.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1114.123 Fix: upgrade to 5.15.0-1114.123
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1058.65~22.04.1 Fix: upgrade to 6.8.0-1058.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1109.118 Fix: upgrade to 5.15.0-1109.118
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1060.63~22.04.1 Fix: upgrade to 6.8.0-1060.63~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1105.111 Fix: upgrade to 5.15.0-1105.111
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1092.100 Fix: upgrade to 5.15.0-1092.100
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-124.124~22.04.1 Fix: upgrade to 6.8.0-124.124~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1103.106 Fix: upgrade to 5.15.0-1103.106
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1057.58~22.04.1 Fix: upgrade to 6.8.0-1057.58~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1104.110 Fix: upgrade to 5.15.0-1104.110
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1101.106 Fix: upgrade to 5.15.0-1101.106
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-181.191 Fix: upgrade to 5.15.0-181.191
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-134.134.1~22.04.1 Fix: upgrade to 6.8.0-134.134.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1104.105 Fix: upgrade to 5.15.0-1104.105
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1055.58~22.04.1 Fix: upgrade to 6.8.0-1055.58~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1061.61 Fix: upgrade to 5.15.0-1061.61
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1050.50 Fix: upgrade to 5.15.0-1050.50
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1106.112 Fix: upgrade to 5.15.0-1106.112
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1054.55~22.04.1 Fix: upgrade to 6.8.0-1054.55~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1103.106 Fix: upgrade to 5.15.0-1103.106
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-124.124~22.04.1 Fix: upgrade to 6.8.0-124.124~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1074.78 Fix: upgrade to 5.15.0-1074.78
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1093.95 Fix: upgrade to 5.15.0-1093.95
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1109.116+fips1 Fix: upgrade to 5.15.0-1109.116+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1114.123+fips1 Fix: upgrade to 5.15.0-1114.123+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-181.191+fips1 Fix: upgrade to 5.15.0-181.191+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1109.118+fips1 Fix: upgrade to 5.15.0-1109.118+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1101.103 Fix: upgrade to 5.15.0-1101.103
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1108.117 Fix: upgrade to 5.15.0-1108.117
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1052.53~22.04.1 Fix: upgrade to 6.8.1-1052.53~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1057.60 Fix: upgrade to 6.8.0-1057.60
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1017.17~24.04.1 Fix: upgrade to 6.17.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1058.64 Fix: upgrade to 6.8.0-1058.64
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 |
< 6.17.0-1017.17~24.04.1 Fix: upgrade to 6.17.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1058.65 Fix: upgrade to 6.8.0-1058.65
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1060.63 Fix: upgrade to 6.8.0-1060.63
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1018.19~24.04.1 Fix: upgrade to 6.17.0-1018.19~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1055.61 Fix: upgrade to 6.8.0-1055.61
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1042.45 Fix: upgrade to 6.8.0-1042.45
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 |
< 6.17.0-35.35~24.04.1 Fix: upgrade to 6.17.0-35.35~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1057.58 Fix: upgrade to 6.8.0-1057.58
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-134.134.1 Fix: upgrade to 6.8.0-134.134.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1055.58 Fix: upgrade to 6.8.0-1055.58
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1055.58.1 Fix: upgrade to 6.8.0-1055.58.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1026.26 Fix: upgrade to 6.8.0-1026.26
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1024.24 Fix: upgrade to 6.17.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1054.55 Fix: upgrade to 6.8.0-1054.55
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1016.16~24.04.1 Fix: upgrade to 6.17.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1057.61 Fix: upgrade to 6.8.0-1057.61
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 |
< 6.17.0-35.35.1~24.04.1 Fix: upgrade to 6.17.0-35.35.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1032.33 Fix: upgrade to 6.8.0-1032.33
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1057.60+fips1 Fix: upgrade to 6.8.0-1057.60+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1059.65+fips1 Fix: upgrade to 6.8.0-1059.65+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-124.124+fips1 Fix: upgrade to 6.8.0-124.124+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1060.63+fips1 Fix: upgrade to 6.8.0-1060.63+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2046.47 Fix: upgrade to 6.8.0-2046.47
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1052.53 Fix: upgrade to 6.8.1-1052.53
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1014.16~24.04.1 Fix: upgrade to 6.17.0-1014.16~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-35.35 Fix: upgrade to 6.17.0-35.35
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1017.17 Fix: upgrade to 6.17.0-1017.17
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1017.17 Fix: upgrade to 6.17.0-1017.17
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1018.19 Fix: upgrade to 6.17.0-1018.19
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1016.16 Fix: upgrade to 6.17.0-1016.16
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1018.18 Fix: upgrade to 6.17.0-1018.18
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1014.16 Fix: upgrade to 6.17.0-1014.16
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-35.35.1 Fix: upgrade to 6.17.0-35.35.1
|
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-22.22 Fix: upgrade to 7.0.0-22.22
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1006.6 Fix: upgrade to 7.0.0-1006.6
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1007.7 Fix: upgrade to 7.0.0-1007.7
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1006.6 Fix: upgrade to 7.0.0-1006.6
|
| – | linux | linux_kernel |
5.3 7.1 > 5.3, < 6.18.29 >= 6.19, < 7.0.6 cpe:2.3:o:linux:linux_kernel:5.3:rc7:*:*:*:*:*:* |
| Debian:11 | debian | linux |
< 5.10.251-4 Fix: upgrade to 5.10.251-4
|
| Debian:12 | debian | linux |
< 6.1.170-3 Fix: upgrade to 6.1.170-3
|
| Debian:13 | debian | linux |
< 6.12.86-1 Fix: upgrade to 6.12.86-1
|
| Debian:14 | debian | linux |
< 7.0.4-1 Fix: upgrade to 7.0.4-1
|
| Debian:11 | debian | linux-6.1 |
< 6.1.170-3~deb11u1 Fix: upgrade to 6.1.170-3~deb11u1
|
| Alpaquita:23 | bellsoft | linux-lts | >= 6.1.170-r0 |
| Alpaquita:25 | bellsoft | linux-lts | >= 6.12.87-r0 |
| Alpaquita:stream | bellsoft | linux-lts | >= 6.12.87-r0 |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1160.170~18.04.1 Fix: upgrade to 5.4.0-1160.170~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-124.124 Fix: upgrade to 6.8.0-124.124
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1005.5 Fix: upgrade to 7.0.0-1005.5
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-22.22.1 Fix: upgrade to 7.0.0-22.22.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-22.22.1 Fix: upgrade to 7.0.0-22.22.1
|
| Linux | linux | kernel |
>= 6.19.0, < 7.0.6 Fix: upgrade to 7.0.6
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-28.28~24.04.1 Fix: upgrade to 7.0.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1021.21 Fix: upgrade to 6.17.0-1021.21
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| – | linux | linux |
< 7c504ffab3efce8f7e4f463b314ae31030bdf18b 5.3 |
| Echo | echo | linux |
< 6.12.86-1 Fix: upgrade to 6.12.86-1
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1023.27 Fix: upgrade to 6.8.0-1023.27
|
Original advisory text
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
In the Linux kernel, the following vulnerability has been resolved:
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
The DATA-packet handler in rxrpc_input_call_event() and the RESPONSE
handler in rxrpc_verify_response() copy the skb to a linear one before
calling into the security ops only when skb_cloned() is true. An skb
that is not cloned but still carries externally-owned paged fragments
(e.g. SKBFL_SHARED_FRAG set by splice() into a UDP socket via
__ip_append_data, or a chained skb_has_frag_list()) falls through to
the in-place decryption path, which binds the frag pages directly into
the AEAD/skcipher SGL via skb_to_sgvec().
Extend the gate to also unshare when skb_has_frag_list() or
skb_has_shared_frag() is true. This catches the splice-loopback vector
and other externally-shared frag sources while preserving the
zero-copy fast path for skbs whose frags are kernel-private (e.g. NIC
page_pool RX, GRO). The OOM/trace handling already in place is reused.
rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present
The DATA-packet handler in rxrpc_input_call_event() and the RESPONSE
handler in rxrpc_verify_response() copy the skb to a linear one before
calling into the security ops only when skb_cloned() is true. An skb
that is not cloned but still carries externally-owned paged fragments
(e.g. SKBFL_SHARED_FRAG set by splice() into a UDP socket via
__ip_append_data, or a chained skb_has_frag_list()) falls through to
the in-place decryption path, which binds the frag pages directly into
the AEAD/skcipher SGL via skb_to_sgvec().
Extend the gate to also unshare when skb_has_frag_list() or
skb_has_shared_frag() is true. This catches the splice-loopback vector
and other externally-shared frag sources while preserving the
zero-copy fast path for skbs whose frags are kernel-private (e.g. NIC
page_pool RX, GRO). The OOM/trace handling already in place is reused.
References
- https://security-tracker.debian.org/tracker/CVE-2026-43500 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-43500 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-43500 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-43500 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/05/08/8 Third Party Advisory
- https://git.kernel.org/stable/c/3711382a77342a9a1c3d2e7330dcfc7ea927f568 URL
- https://github.com/V4bel/dirtyfrag Exploit
- https://advisory.echohq.com/cve/CVE-2026-43500 URL
- https://access.redhat.com/security/cve/CVE-2026-43500 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/43xxx/CVE-2026-43500... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43500 Vendor Advisory
- https://git.kernel.org/stable/c/3eae0f4f9f7206a4801efa5e0235c25bbd5a412c URL
- https://git.kernel.org/stable/c/aa54b1d27fe0c2b78e664a34fd0fdf7cd1960d71 URL
- https://git.kernel.org/stable/c/d45179f8795222ce858770dc619abe51f9d24411 URL
- https://bugzilla.redhat.com/show_bug.cgi?id=2468273 Third Party Advisory
- https://www.openwall.com/lists/oss-security/2026/05/07/8 Third Party Advisory
- https://lore.kernel.org/all/afKV2zGR6rrelPC7@v4bel/ Third Party Advisory
- https://ubuntu.com/blog/dirty-frag-linux-vulnerability-fixes-available Third Party Advisory
- https://ubuntu.com/security/notices/USN-8370-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8371-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8373-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8374-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8388-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8389-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8391-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8392-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8393-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8426-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8461-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8462-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8489-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8497-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8499-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8528-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8569-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8616-1 Vendor Advisory
- https://git.kernel.org/stable/c/7c504ffab3efce8f7e4f463b314ae31030bdf18b URL
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-43500.json URL
- https://ubuntu.com/security/notices/USN-8426-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8440-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8388-2 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-787Out-of-bounds Write
CWE-123Write-what-where Condition
Timeline
Published11 May 2026
Updated26 Oct 2026
First seen8 May 2026
Sources
DEBIAN-CVE-2026-43500 · OSV
BELL-CVE-2026-43500 · OSV
UBUNTU-CVE-2026-43500 · OSV
CVE-2026-43500 · OSV
CVE-2026-43500 · MITRE
CVE-2026-43500 · NVD
ECHO-46ce-822a-3114 · OSV
Track software like this
Free during beta