Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2026-63912: Linux kernel on Azure/AWS/GCP may mishandle ESP
CVE-2026-63912 · published 2 months ago
Summary
The networking code in the Linux kernel used by Canonical's Azure, AWS, GCP, and HWE releases could incorrectly handle certain encrypted traffic when the combined packet size is larger than a memory page. This may cause data to be placed in the wrong memory area, potentially leading to crashes or loss of connectivity. Updating the kernel to the latest version provided by Canonical resolves the issue.
What to do
- Update canonical linux-hwe-7.0 to version 7.0.0-28.28~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1016.16~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-28.28.1~24.04.3.
- Update canonical linux to version 7.0.0-28.28.
- Update canonical linux-aws to version 7.0.0-1009.9.
- Update canonical linux-azure to version 7.0.0-1010.10.
- Update canonical linux-azure-fde to version 7.0.0-1009.9.
- Update canonical linux-gcp to version 7.0.0-1008.8.
- Update canonical linux-gke to version 7.0.0-1003.4.
- Update canonical linux-ibm to version 7.0.0-1010.10.
- Update canonical linux-nvidia to version 7.0.0-1016.16.
- Update canonical linux-nvidia-bos to version 7.0.0-2016.16.
- Update canonical linux-oem-7.0 to version 7.0.0-1009.9.
- Update canonical linux-oracle to version 7.0.0-1008.8.
- Update canonical linux-raspi to version 7.0.0-1015.15.
- Update canonical linux-realtime to version 7.0.0-28.28.1.
- Update canonical linux-riscv to version 7.0.0-28.28.1.
- Update linux kernel to version 7.0.12.
- Update debian linux to version 5.10.259-1.
- Update debian linux to version 6.1.176-1.
- Update debian linux to version 6.12.94-1.
- Update debian linux to version 7.0.12-1.
- Update canonical linux-hwe-5.15 to version 5.15.0-194.204~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1110.114~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-194.204~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1110.114~20.04.1.
- Update canonical linux-aws to version 5.15.0-1116.123.
- Update canonical linux-azure to version 5.15.0-1122.131.
- Update canonical linux-azure-6.8 to version 6.8.0-1068.76~22.04.1.
- Update canonical linux-azure-fde to version 5.15.0-1121.130.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1066.73~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1117.127.
- Update canonical linux-gcp-6.8 to version 6.8.0-1069.77~22.04.1.
- Update canonical linux-gke to version 5.15.0-1112.118.
- Update canonical linux-gkeop to version 5.15.0-1099.107.
- Update canonical linux-ibm to version 5.15.0-1110.114.
- Update canonical linux-intel-iotg to version 5.15.0-1111.117.
- Update canonical linux-kvm to version 5.15.0-1108.113.
- Update canonical linux-lowlatency to version 5.15.0-194.204.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-142.142.1~22.04.1.
- Update canonical linux-oracle to version 5.15.0-1113.119.
- Update canonical linux-oracle-6.8 to version 6.8.0-1062.65~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-142.142~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1079.83.
- Update canonical linux-bluefield to version 5.15.0-1100.102.
- Update canonical linux-aws-fips to version 5.15.0-1116.123+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1122.131+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1116.126+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1108.110.
- Update canonical linux-realtime to version 5.15.0-1115.124.
- Update canonical linux-realtime-6.8 to version 6.8.1-1060.61~22.04.1.
- Update canonical linux to version 6.8.0-142.142.
- Update canonical linux-azure to version 6.8.0-1068.76.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1066.73.
- Update canonical linux-gcp to version 6.8.0-1069.77.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-gke to version 6.8.0-1064.72.
- Update canonical linux-gkeop to version 6.8.0-1050.54.
- Update canonical linux-ibm to version 6.8.0-1065.66.
- Update canonical linux-lowlatency to version 6.8.0-142.142.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1035.38.
- Update canonical linux-oracle to version 6.8.0-1062.65.
- Update canonical linux-raspi to version 6.8.0-1065.69.
- Update canonical linux-bluefield to version 6.8.0-1031.36.
- Update canonical linux-azure-fips to version 6.8.0-1068.76+fips1.
- Update canonical linux-fips to version 6.8.0-142.142+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1068.76+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2054.56.
- Update canonical linux-realtime to version 6.8.1-1060.61.
- Update canonical linux-aws-5.15 to version 5.15.0-1116.123~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1121.130~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1111.117~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1068.70~20.04.1.
- Update canonical linux to version 5.15.0-194.204.
- Update canonical linux-aws-6.8 to version 6.8.0-1065.68~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1111.112.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1063.66~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1068.70.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1057.57.
- Update canonical linux-aws to version 6.8.0-1065.68.
- Update canonical linux-nvidia to version 6.8.0-1063.66.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1063.66.1.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-aws-fips to version 6.8.0-1065.68+fips1.
- Update canonical linux-fips to version 5.15.0-194.204+fips1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux-raspi to version 5.15.0-1110.113.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1116.123~20.04.1 Fix: upgrade to 5.15.0-1116.123~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1121.130~20.04.1 Fix: upgrade to 5.15.0-1121.130~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1118.128~20.04.1 Fix: upgrade to 5.15.0-1118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
Showing 50 of 224. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-194.204~20.04.1 Fix: upgrade to 5.15.0-194.204~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1110.114~20.04.1 Fix: upgrade to 5.15.0-1110.114~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1111.117~20.04.1 Fix: upgrade to 5.15.0-1111.117~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-194.204~20.04.1 Fix: upgrade to 5.15.0-194.204~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1068.70~20.04.1 Fix: upgrade to 5.15.0-1068.70~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1110.114~20.04.1 Fix: upgrade to 5.15.0-1110.114~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1065.68~22.04.1 Fix: upgrade to 6.8.0-1065.68~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1068.76~22.04.1 Fix: upgrade to 6.8.0-1068.76~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1066.73~22.04.1 Fix: upgrade to 6.8.0-1066.73~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1069.77~22.04.1 Fix: upgrade to 6.8.0-1069.77~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1111.117 Fix: upgrade to 5.15.0-1111.117
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-194.204 Fix: upgrade to 5.15.0-194.204
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-142.142.1~22.04.1 Fix: upgrade to 6.8.0-142.142.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1111.112 Fix: upgrade to 5.15.0-1111.112
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1063.66~22.04.1 Fix: upgrade to 6.8.0-1063.66~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1068.70 Fix: upgrade to 5.15.0-1068.70
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1057.57 Fix: upgrade to 5.15.0-1057.57
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1062.65~22.04.1 Fix: upgrade to 6.8.0-1062.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-142.142~22.04.1 Fix: upgrade to 6.8.0-142.142~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1060.61~22.04.1 Fix: upgrade to 6.8.1-1060.61~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-28.28~24.04.1 Fix: upgrade to 7.0.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1016.16~24.04.1 Fix: upgrade to 7.0.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1063.66.1 Fix: upgrade to 6.8.0-1063.66.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-28.28.1~24.04.3 Fix: upgrade to 7.0.0-28.28.1~24.04.3
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-28.28 Fix: upgrade to 7.0.0-28.28
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1003.4 Fix: upgrade to 7.0.0-1003.4
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1010.10 Fix: upgrade to 7.0.0-1010.10
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1016.16 Fix: upgrade to 7.0.0-1016.16
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2016.16 Fix: upgrade to 7.0.0-2016.16
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1009.9 Fix: upgrade to 7.0.0-1009.9
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1008.8 Fix: upgrade to 7.0.0-1008.8
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1015.15 Fix: upgrade to 7.0.0-1015.15
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-28.28.1 Fix: upgrade to 7.0.0-28.28.1
|
| Linux | linux | kernel |
>= 6.13.0, < 7.0.12 Fix: upgrade to 7.0.12
|
| Debian:11 | debian | linux |
< 5.10.259-1 Fix: upgrade to 5.10.259-1
|
| Debian:12 | debian | linux |
< 6.1.176-1 Fix: upgrade to 6.1.176-1
|
| Debian:13 | debian | linux |
< 6.12.94-1 Fix: upgrade to 6.12.94-1
|
| Debian:14 | debian | linux |
< 7.0.12-1 Fix: upgrade to 7.0.12-1
|
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1116.123 Fix: upgrade to 5.15.0-1116.123
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1121.130 Fix: upgrade to 5.15.0-1121.130
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1117.127 Fix: upgrade to 5.15.0-1117.127
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1099.107 Fix: upgrade to 5.15.0-1099.107
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1110.114 Fix: upgrade to 5.15.0-1110.114
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1108.113 Fix: upgrade to 5.15.0-1108.113
|
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1079.83 Fix: upgrade to 5.15.0-1079.83
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1100.102 Fix: upgrade to 5.15.0-1100.102
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1116.123+fips1 Fix: upgrade to 5.15.0-1116.123+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1122.131+fips1 Fix: upgrade to 5.15.0-1122.131+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1116.126+fips1 Fix: upgrade to 5.15.0-1116.126+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1108.110 Fix: upgrade to 5.15.0-1108.110
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1115.124 Fix: upgrade to 5.15.0-1115.124
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-142.142 Fix: upgrade to 6.8.0-142.142
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1068.76 Fix: upgrade to 6.8.0-1068.76
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1066.73 Fix: upgrade to 6.8.0-1066.73
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1069.77 Fix: upgrade to 6.8.0-1069.77
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1064.72 Fix: upgrade to 6.8.0-1064.72
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1065.66 Fix: upgrade to 6.8.0-1065.66
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-142.142.1 Fix: upgrade to 6.8.0-142.142.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1062.65 Fix: upgrade to 6.8.0-1062.65
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1065.69 Fix: upgrade to 6.8.0-1065.69
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1031.36 Fix: upgrade to 6.8.0-1031.36
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1068.76+fips1 Fix: upgrade to 6.8.0-1068.76+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-142.142+fips1 Fix: upgrade to 6.8.0-142.142+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1068.76+fips1 Fix: upgrade to 6.8.0-1068.76+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2054.56 Fix: upgrade to 6.8.0-2054.56
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1060.61 Fix: upgrade to 6.8.1-1060.61
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-194.204 Fix: upgrade to 5.15.0-194.204
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1065.68 Fix: upgrade to 6.8.0-1065.68
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1063.66 Fix: upgrade to 6.8.0-1063.66
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1065.68+fips1 Fix: upgrade to 6.8.0-1065.68+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-194.204+fips1 Fix: upgrade to 5.15.0-194.204+fips1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1110.113 Fix: upgrade to 5.15.0-1110.113
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 Fix: upgrade to 5.15.0-198.208.aikido.116
|
Original advisory text
xfrm: esp: restore combined single-frag length gate
In the Linux kernel, the following vulnerability has been resolved:
xfrm: esp: restore combined single-frag length gate
The ESP out-of-place fast path appends the trailer in esp_output_head()
before esp_output_tail() allocates the destination page frag. The
head-side gate currently checks skb->data_len and tailen separately, but
the tail code allocates a single destination frag from the combined
post-trailer skb->data_len.
Reject the page-frag fast path when the combined aligned length exceeds a
page. Otherwise skb_page_frag_refill() may fall back to a single page while
the destination sg still spans the combined skb->data_len.
Restore this combined-length page gate for both IPv4 and IPv6.
xfrm: esp: restore combined single-frag length gate
The ESP out-of-place fast path appends the trailer in esp_output_head()
before esp_output_tail() allocates the destination page frag. The
head-side gate currently checks skb->data_len and tailen separately, but
the tail code allocates a single destination frag from the combined
post-trailer skb->data_len.
Reject the page-frag fast path when the combined aligned length exceeds a
page. Otherwise skb_page_frag_refill() may fall back to a single page while
the destination sg still spans the combined skb->data_len.
Restore this combined-length page gate for both IPv4 and IPv6.
References
- https://security-tracker.debian.org/tracker/CVE-2026-63912 Vendor Advisory
- https://ubuntu.com/security/CVE-2026-63912 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-63912 Third Party Advisory
- https://git.kernel.org/linus/dfa0d7b0ff1eb6b2c416b8fdb9b4f2cefba57a40 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8593-1 Vendor Advisory
- https://git.kernel.org/stable/c/322e48187e0245ab2fff6fec2220b0cae677dbec URL
- https://git.kernel.org/stable/c/36519e3d941fc99d3b52c134dbaf311f987a4708 URL
- https://git.kernel.org/stable/c/566295735530ee513326049b0540f32ec050bf2e URL
- https://git.kernel.org/stable/c/5d7ab86e2b6bc23054616bf6ac562013bf60af8c URL
- https://git.kernel.org/stable/c/65f3b3fc2347b89fe21db1e92c7681368415f095 URL
- https://git.kernel.org/stable/c/b84091ceddc9f133229dceab3ccc930bf27f9cba URL
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8603-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8618-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8663-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8664-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8781-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8817-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8842-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8817-2 Vendor Advisory
- https://git.kernel.org/stable/c/c093468aea8277f77272a4f199b2e15e19cabb59 URL
- https://git.kernel.org/stable/c/dfa0d7b0ff1eb6b2c416b8fdb9b4f2cefba57a40 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63912... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-63912 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8849-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8817-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8818-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8871-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8878-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8879-1 Vendor Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published19 Jul 2026
Updated9 Oct 2026
First seen19 Jul 2026
Sources
CVE-2026-63912 · NVD
CVE-2026-63912 · OSV
DEBIAN-CVE-2026-63912 · OSV
UBUNTU-CVE-2026-63912 · OSV
Track software like this
Free during beta