Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2026-45972: Ubuntu 24.04 Linux packages could let attackers gain admin rights
CVE-2026-45972 · published 1 day ago
Summary
Several Ubuntu 24.04 Linux kernel packages, including the standard, HWE edge, AWS, and Azure versions, contain a flaw that could allow a malicious user to obtain administrative control of the system. This could let an attacker run any code with full system privileges. Install the latest updated packages from the Ubuntu repository as soon as possible to close the gap.
What to do
- Update debian linux to version 6.1.170-1.
- Update debian linux to version 6.12.85-1.
- Update debian linux to version 6.18.14-1.
- Update bellsoft linux-lts to version 6.1.167-r0.
- Update bellsoft linux-lts to version 6.12.80-r0.
- Update bellsoft linux-lts to version 6.12.76-r0.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
- Update canonical linux-aws-6.8 to version 6.8.0-1060.63~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1063.71~22.04.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1062.69~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1063.69~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-136.136~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1060.61~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-134.134.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1058.61~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1057.58~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-134.134~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1055.56~22.04.1.
- Update canonical linux to version 6.8.0-134.134.
- Update canonical linux-aws to version 6.8.0-1060.63.
- Update canonical linux-azure to version 6.8.0-1063.71.
- Update canonical linux-azure-fde to version 6.8.0-1062.69.
- Update canonical linux-gcp to version 6.8.0-1063.69.
- Update canonical linux-gke to version 6.8.0-1058.64.
- Update canonical linux-gkeop to version 6.8.0-1045.48.
- Update canonical linux-ibm to version 6.8.0-1060.61.
- Update canonical linux-lowlatency to version 6.8.0-134.134.1.
- Update canonical linux-nvidia to version 6.8.0-1058.61.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1058.61.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1029.30.
- Update canonical linux-oracle to version 6.8.0-1057.58.
- Update canonical linux-raspi to version 6.8.0-1060.64.
- Update canonical linux-aws-fips to version 6.8.0-1060.63+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1062.69+fips1.
- Update canonical linux-fips to version 6.8.0-134.134+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1063.69+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2049.50.
- Update canonical linux-realtime to version 6.8.1-1055.56.
- Update canonical rootio-linux to version 6.8.0-124.124.root.io.73.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.79.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update canonical linux-bluefield to version 6.8.0-1026.30.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1060.63~22.04.1 Fix: upgrade to 6.8.0-1060.63~22.04.1
|
Showing 50 of 138. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1063.71~22.04.1 Fix: upgrade to 6.8.0-1063.71~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1062.69~22.04.1 Fix: upgrade to 6.8.0-1062.69~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1063.69~22.04.1 Fix: upgrade to 6.8.0-1063.69~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-136.136~22.04.1 Fix: upgrade to 6.8.0-136.136~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1060.61~22.04.1 Fix: upgrade to 6.8.0-1060.61~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-134.134.1~22.04.1 Fix: upgrade to 6.8.0-134.134.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1058.61~22.04.1 Fix: upgrade to 6.8.0-1058.61~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1057.58~22.04.1 Fix: upgrade to 6.8.0-1057.58~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-134.134~22.04.1 Fix: upgrade to 6.8.0-134.134~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1055.56~22.04.1 Fix: upgrade to 6.8.1-1055.56~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1060.63 Fix: upgrade to 6.8.0-1060.63
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1063.71 Fix: upgrade to 6.8.0-1063.71
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1062.69 Fix: upgrade to 6.8.0-1062.69
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1063.69 Fix: upgrade to 6.8.0-1063.69
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1058.64 Fix: upgrade to 6.8.0-1058.64
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1045.48 Fix: upgrade to 6.8.0-1045.48
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1060.61 Fix: upgrade to 6.8.0-1060.61
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-134.134.1 Fix: upgrade to 6.8.0-134.134.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1058.61 Fix: upgrade to 6.8.0-1058.61
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1058.61.1 Fix: upgrade to 6.8.0-1058.61.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1029.30 Fix: upgrade to 6.8.0-1029.30
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1057.58 Fix: upgrade to 6.8.0-1057.58
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1060.64 Fix: upgrade to 6.8.0-1060.64
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1026.30 Fix: upgrade to 6.8.0-1026.30
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1060.63+fips1 Fix: upgrade to 6.8.0-1060.63+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1062.69+fips1 Fix: upgrade to 6.8.0-1062.69+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-134.134+fips1 Fix: upgrade to 6.8.0-134.134+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1063.69+fips1 Fix: upgrade to 6.8.0-1063.69+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2049.50 Fix: upgrade to 6.8.0-2049.50
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1055.56 Fix: upgrade to 6.8.1-1055.56
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Debian:12 | debian | linux |
< 6.1.170-1 Fix: upgrade to 6.1.170-1
|
| Debian:13 | debian | linux |
< 6.12.85-1 Fix: upgrade to 6.12.85-1
|
| Debian:14 | debian | linux |
< 6.18.14-1 Fix: upgrade to 6.18.14-1
|
| Alpaquita:23 | bellsoft | linux-lts |
>= 6.1.164-r0, < 6.1.167-r0 Fix: upgrade to 6.1.167-r0
|
| Alpaquita:25 | bellsoft | linux-lts |
>= 6.12.74-r0, < 6.12.80-r0 Fix: upgrade to 6.12.80-r0
|
| Alpaquita:stream | bellsoft | linux-lts |
>= 6.12.74-r0, < 6.12.76-r0 Fix: upgrade to 6.12.76-r0
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-134.134 Fix: upgrade to 6.8.0-134.134
|
| – | linux | linux_kernel |
>= 6.1.163, < 6.1.165 >= 6.6.124, < 6.6.128 >= 6.12.70, < 6.12.75 >= 6.18.10, < 6.18.14 >= 6.19.1, < 6.19.4 6.19 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-134.134.root.io.80 < 6.8.0-124.124.root.io.73 < 6.8.0-134.134.root.io.79 < 6.8.0-136.136.root.io.82 < 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-134.134.root.io.80
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 Fix: upgrade to 6.8.0-146.146.aikido.89
|
Original advisory text
CVE-2026-45972 in linux - Patched by Root
Root has patched CVE-2026-45972 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.
References
- https://ubuntu.com/security/notices/USN-8607-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8609-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8619-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8492-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8492-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8497-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8498-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8492-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8492-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8492-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8606-1 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-45972 Vendor Advisory
- https://git.kernel.org/stable/c/7425453ea16dbc3bbb0f6cac4d60b537e5e4d151 Patch
- https://git.kernel.org/stable/c/639deb962986ef2f5e2a6d5a600c66f922471e81 Patch
- https://git.kernel.org/stable/c/4d339b219004869e96c4ce56b8891f83a38da4c0 Patch
- https://www.cve.org/CVERecord?id=CVE-2026-45972 Third Party Advisory
- https://git.kernel.org/linus/ebbbc4bfad4cb355d17c671223d0814ee3ef4eda Third Party Advisory
- https://ubuntu.com/security/CVE-2026-45972 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-45972 Vendor Advisory
- https://git.kernel.org/stable/c/96e53bb3ee2f354cf6b4ab07bcc56e500f8b3f74 Patch
- https://git.kernel.org/stable/c/e66dcf7bb9c4df5582c82bc3582725abcbfbea73 Patch
- https://git.kernel.org/stable/c/ebbbc4bfad4cb355d17c671223d0814ee3ef4eda Patch
- https://access.redhat.com/security/cve/CVE-2026-45972
- https://bugzilla.redhat.com/show_bug.cgi?id=2481973
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45972.json
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Severity
9.4
Critical
Type
CWE-416Use After Free
CWE-825Expired Pointer Dereference
Timeline
Published9 Oct 2026
Updated10 Oct 2026
First seen28 May 2026
Sources
CVE-2026-45972 · NVD
BELL-CVE-2026-45972 · OSV
UBUNTU-CVE-2026-45972 · OSV
DEBIAN-CVE-2026-45972 · OSV
Track software like this
Free during beta