Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.6
CVE-2026-64269: Canonical Linux kernels can leak memory to remote attackers
CVE-2026-64269 · published 3 months ago
Summary
Several Canonical Linux kernel packages (including the HWE edge, AWS, and Azure versions) had a flaw that let a connected device ask for more data than was allowed. This could let the device read parts of the server’s memory and possibly see sensitive information. The issue has been fixed in updated kernel releases; upgrade to the latest packages to protect your system.
What to do
- Update debian linux to version 7.1.4-1.
- Update debian linux-6.1 to version 6.1.180-1~deb11u1.
- Update debian linux to version 6.1.180-1.
- Update debian linux to version 6.12.96-1.
- Update debian rootio-linux to version 6.1.177-1.aikido.162.
- Update canonical linux to version 5.15.0-187.197.aikido.112.
- Update canonical rootio-linux to version 5.15.0-187.197.aikido.112.
- Update linux kernel to version 7.1.4.
- Update canonical linux-aws-7.0 to version 7.0.0-1012.12~24.04.1.
- Update canonical linux-gcp-7.0 to version 7.0.0-1011.11~24.04.1.
- Update canonical linux-hwe-7.0 to version 7.0.0-31.31~24.04.1.
- Update canonical linux-nvidia-7.0 to version 7.0.0-1018.18~24.04.1.
- Update canonical linux-riscv-7.0 to version 7.0.0-31.31.1~24.04.1.
- Update canonical linux to version 7.0.0-31.31.
- Update canonical linux-aws to version 7.0.0-1012.12.
- Update canonical linux-gcp to version 7.0.0-1011.11.
- Update canonical linux-gke to version 7.0.0-1006.7.
- Update canonical linux-oem-7.0 to version 7.0.0-1013.13.
- Update canonical linux-realtime to version 7.0.0-31.31.1.
- Update canonical linux-riscv to version 7.0.0-31.31.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1035.38.
- Update canonical linux-raspi to version 7.0.0-1019.19.
- Update canonical linux-azure-7.0 to version 7.0.0-1014.14~24.04.1.
- Update canonical linux-azure to version 7.0.0-1014.14.
- Update canonical linux-ibm to version 7.0.0-1013.13.
- Update canonical linux-nvidia to version 7.0.0-1018.18.
- Update canonical linux-nvidia-bos to version 7.0.0-2018.18.
- Update canonical linux-oracle to version 7.0.0-1011.11.
- Update canonical linux-oracle-7.0 to version 7.0.0-1011.11~24.04.1.
- Update debian linux-6.12 to version 6.12.100-1~deb12u1.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update canonical linux-aws-5.15 to version 5.15.0-1117.124~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1123.132~20.04.1.
- Update canonical linux-azure-fde-5.15 to version 5.15.0-1122.131~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1118.128~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-198.208~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1112.118~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-195.205~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1114.120~20.04.1.
- Update canonical linux to version 5.15.0-198.208.
- Update canonical linux-aws to version 5.15.0-1117.124.
- Update canonical linux-azure to version 5.15.0-1123.132.
- Update canonical linux-azure-fde to version 5.15.0-1122.131.
- Update canonical linux-gcp to version 5.15.0-1118.128.
- Update canonical linux-gke to version 5.15.0-1113.119.
- Update canonical linux-gkeop to version 5.15.0-1100.108.
- Update canonical linux-ibm to version 5.15.0-1111.115.
- Update canonical linux-intel-iotg to version 5.15.0-1112.118.
- Update canonical linux-kvm to version 5.15.0-1109.114.
- Update canonical linux-lowlatency to version 5.15.0-195.205.
- Update canonical linux-nvidia to version 5.15.0-1112.113.
- Update canonical linux-oracle to version 5.15.0-1114.120.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1080.84.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1109.111.
- Update canonical linux-realtime to version 5.15.0-1116.125.
- Update canonical linux-aws-fips to version 5.15.0-1117.124+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1123.132+fips1.
- Update canonical linux-fips to version 5.15.0-198.208+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1118.128+fips1.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update canonical linux-riscv-5.15 to version 5.15.0-1111.115~20.04.1.
- Update canonical linux-bluefield to version 5.15.0-1101.103.
- Update canonical linux to version 6.8.0-147.147.
- Update canonical linux-aws to version 6.8.0-1067.70.
- Update canonical linux-azure to version 6.8.0-1071.79.
- Update canonical linux-azure-fde to version 6.8.0-1069.76.
- Update canonical linux-gcp to version 6.8.0-1071.79.
- Update canonical linux-gke to version 6.8.0-1066.74.
- Update canonical linux-gkeop to version 6.8.0-1052.56.
- Update canonical linux-ibm to version 6.8.0-1067.68.
- Update canonical linux-lowlatency to version 6.8.0-147.147.1.
- Update canonical linux-oracle to version 6.8.0-1064.67.
- Update canonical linux-bluefield to version 6.8.0-1033.38.
- Update canonical linux-realtime to version 6.8.1-1062.63.
- Update canonical linux-aws-fips to version 6.8.0-1067.70+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1071.79+fips1.
- Update canonical linux-fips to version 6.8.0-147.147+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1071.79+fips1.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update canonical linux-azure-fde-7.0 to version 7.0.0-1013.13~24.04.1.
- Update canonical linux-azure-fde to version 7.0.0-1013.13.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1117.124~20.04.1 Fix: upgrade to 5.15.0-1117.124~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1123.132~20.04.1 Fix: upgrade to 5.15.0-1123.132~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 |
< 5.15.0-1122.131~20.04.1 Fix: upgrade to 5.15.0-1122.131~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1118.128~20.04.1 Fix: upgrade to 5.15.0-1118.128~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-198.208~20.04.1 Fix: upgrade to 5.15.0-198.208~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1112.118~20.04.1 Fix: upgrade to 5.15.0-1112.118~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-195.205~20.04.1 Fix: upgrade to 5.15.0-195.205~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1114.120~20.04.1 Fix: upgrade to 5.15.0-1114.120~20.04.1
|
Showing 50 of 219. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1111.115~20.04.1 Fix: upgrade to 5.15.0-1111.115~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-198.208 Fix: upgrade to 5.15.0-198.208
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1117.124 Fix: upgrade to 5.15.0-1117.124
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1123.132 Fix: upgrade to 5.15.0-1123.132
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1122.131 Fix: upgrade to 5.15.0-1122.131
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1118.128 Fix: upgrade to 5.15.0-1118.128
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1113.119 Fix: upgrade to 5.15.0-1113.119
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1100.108 Fix: upgrade to 5.15.0-1100.108
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1111.115 Fix: upgrade to 5.15.0-1111.115
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1112.118 Fix: upgrade to 5.15.0-1112.118
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1109.114 Fix: upgrade to 5.15.0-1109.114
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-195.205 Fix: upgrade to 5.15.0-195.205
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1112.113 Fix: upgrade to 5.15.0-1112.113
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1114.120 Fix: upgrade to 5.15.0-1114.120
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1080.84 Fix: upgrade to 5.15.0-1080.84
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1101.103 Fix: upgrade to 5.15.0-1101.103
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1117.124+fips1 Fix: upgrade to 5.15.0-1117.124+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1123.132+fips1 Fix: upgrade to 5.15.0-1123.132+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-198.208+fips1 Fix: upgrade to 5.15.0-198.208+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1118.128+fips1 Fix: upgrade to 5.15.0-1118.128+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1109.111 Fix: upgrade to 5.15.0-1109.111
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1116.125 Fix: upgrade to 5.15.0-1116.125
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-147.147 Fix: upgrade to 6.8.0-147.147
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1067.70 Fix: upgrade to 6.8.0-1067.70
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-7.0 |
< 7.0.0-1012.12~24.04.1 Fix: upgrade to 7.0.0-1012.12~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1069.76 Fix: upgrade to 6.8.0-1069.76
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1071.79 Fix: upgrade to 6.8.0-1071.79
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1066.74 Fix: upgrade to 6.8.0-1066.74
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1052.56 Fix: upgrade to 6.8.0-1052.56
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-7.0 |
< 7.0.0-31.31~24.04.1 Fix: upgrade to 7.0.0-31.31~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1067.68 Fix: upgrade to 6.8.0-1067.68
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-147.147.1 Fix: upgrade to 6.8.0-147.147.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-7.0 |
< 7.0.0-1018.18~24.04.1 Fix: upgrade to 7.0.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1064.67 Fix: upgrade to 6.8.0-1064.67
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-7.0 |
< 7.0.0-31.31.1~24.04.1 Fix: upgrade to 7.0.0-31.31.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1033.38 Fix: upgrade to 6.8.0-1033.38
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1067.70+fips1 Fix: upgrade to 6.8.0-1067.70+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-147.147+fips1 Fix: upgrade to 6.8.0-147.147+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1071.79+fips1 Fix: upgrade to 6.8.0-1071.79+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1062.63 Fix: upgrade to 6.8.1-1062.63
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 | All versions |
| Ubuntu:26.04:LTS | canonical | linux |
< 7.0.0-31.31 Fix: upgrade to 7.0.0-31.31
|
| Ubuntu:26.04:LTS | canonical | linux-aws |
< 7.0.0-1012.12 Fix: upgrade to 7.0.0-1012.12
|
| Ubuntu:26.04:LTS | canonical | linux-azure |
< 7.0.0-1014.14 Fix: upgrade to 7.0.0-1014.14
|
| Ubuntu:26.04:LTS | canonical | linux-azure-fde |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-gcp |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-gke |
< 7.0.0-1006.7 Fix: upgrade to 7.0.0-1006.7
|
| Ubuntu:26.04:LTS | canonical | linux-ibm |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia |
< 7.0.0-1018.18 Fix: upgrade to 7.0.0-1018.18
|
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos |
< 7.0.0-2018.18 Fix: upgrade to 7.0.0-2018.18
|
| Ubuntu:26.04:LTS | canonical | linux-oem-7.0 |
< 7.0.0-1013.13 Fix: upgrade to 7.0.0-1013.13
|
| Ubuntu:26.04:LTS | canonical | linux-oracle |
< 7.0.0-1011.11 Fix: upgrade to 7.0.0-1011.11
|
| Ubuntu:26.04:LTS | canonical | linux-raspi |
< 7.0.0-1019.19 Fix: upgrade to 7.0.0-1019.19
|
| Ubuntu:26.04:LTS | canonical | linux-realtime |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Ubuntu:26.04:LTS | canonical | linux-riscv |
< 7.0.0-31.31.1 Fix: upgrade to 7.0.0-31.31.1
|
| Debian:11 | debian | linux | All versions |
| Debian:14 | debian | linux |
< 7.1.4-1 Fix: upgrade to 7.1.4-1
|
| Debian:11 | debian | linux-6.1 |
< 6.1.180-1~deb11u1 Fix: upgrade to 6.1.180-1~deb11u1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-7.0 |
< 7.0.0-1014.14~24.04.1 Fix: upgrade to 7.0.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-7.0 |
< 7.0.0-1013.13~24.04.1 Fix: upgrade to 7.0.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-7.0 |
< 7.0.0-1011.11~24.04.1 Fix: upgrade to 7.0.0-1011.11~24.04.1
|
| – | linux | linux |
< 68c09762172f6224e9ddf9b0a60bacbb36e443eb 5.8 < a35b7a8728a53ddc80b323970689fa5985816836 |
| Debian:12 | debian | linux |
< 6.1.180-1 Fix: upgrade to 6.1.180-1
|
| Debian:13 | debian | linux |
< 6.12.96-1 Fix: upgrade to 6.12.96-1
|
| – | linux | linux_kernel |
>= 5.8, < 5.15.212 >= 5.16, < 6.1.178 >= 6.2, < 6.6.145 >= 6.7, < 6.12.96 >= 6.13, < 6.18.39 >= 6.19, < 7.1.4 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:12 | debian | rootio-linux |
< 6.1.177-1.aikido.162 Fix: upgrade to 6.1.177-1.aikido.162
|
| Root:Ubuntu:22.04 | canonical | linux |
< 5.15.0-187.197.aikido.112 Fix: upgrade to 5.15.0-187.197.aikido.112
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-187.197.aikido.112 Fix: upgrade to 5.15.0-187.197.aikido.112
|
| Linux | linux | kernel |
>= 6.19.0, < 7.1.4 Fix: upgrade to 7.1.4
|
| Debian:12 | debian | linux-6.12 |
< 6.12.100-1~deb12u1 Fix: upgrade to 6.12.100-1~deb12u1
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2026-64269 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg When the server answers an RTRS READ, rdma_write_sg() builds the source scatter/gather entry for the IB_WR_RDMA_WRITE that returns data to the peer. Its length is taken directly from the wire descriptor: plist->length = le32_to_cpu(id->rd_msg->desc[0].len); rd_msg points into the chunk buffer that the remote peer filled via RDMA-WRITE-WITH-IMM (rtrs_srv_rdma_done() -> process_io_req() -> process_read()), so desc[0].len is attacker-controlled and, before this change, was only rejected when zero. The source address is the fixed chunk start (dma_addr[msg_id]) and the source lkey is the PD-wide local_dma_lkey, which is not tied to the chunk's MR mapping, so the verbs layer does not constrain the transfer length to max_chunk_size. msg_id and off are bounded against queue_depth and max_chunk_size in rtrs_srv_rdma_done(), but desc[0].len is a separate field that was not checked against the chunk size. A peer that advertises desc[0].len larger than max_chunk_size can make the posted RDMA write read past the chunk's mapped region. The resulting behaviour depends on the IOMMU configuration: with no IOMMU or in passthrough mode the read may extend into memory adjacent to the chunk and be returned to the peer, which can disclose host memory; with a translating IOMMU the out-of-range access is expected to fault and abort the connection. In either case the transfer exceeds what the protocol permits and is driven by a remote peer. Reject a descriptor length above max_chunk_size, mirroring the existing off >= max_chunk_size bound in rtrs_srv_rdma_done(). Legitimate clients do not exceed it: the client sets desc[0].len to its MR length, which is capped at the negotiated max_io_size (max_chunk_size - MAX_HDR_SIZE).
References
- https://ubuntu.com/security/CVE-2026-64269 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-64269 Third Party Advisory
- https://git.kernel.org/stable/c/2912f3d40355dabc08fdbaaf2764d02445fe88dc Third Party Advisory
- https://git.kernel.org/stable/c/5a45d0aa1fa50a333ce5763ade744e2d89838667 Third Party Advisory
- https://git.kernel.org/stable/c/68c09762172f6224e9ddf9b0a60bacbb36e443eb Third Party Advisory
- https://git.kernel.org/stable/c/a35b7a8728a53ddc80b323970689fa5985816836 URL
- https://git.kernel.org/stable/c/6cada540150894e81042a0ae0c796a21a9a877da Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-64269 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64269... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-64269 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/6f40246f4312fdbab5a13cc440adebf95eb2aa66 Third Party Advisory
- https://git.kernel.org/stable/c/963af8d97a8c6a117134a8d0db1415e0489200b1 Third Party Advisory
- https://git.kernel.org/stable/c/da3e44add94b05dfde56f898421922f5cf35705f Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8781-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8727-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8876-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8877-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8726-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8760-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8728-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8917-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8918-1 Vendor Advisory
- https://git.kernel.org/linus/963af8d97a8c6a117134a8d0db1415e0489200b1 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8726-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8878-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8875-2 Vendor Advisory
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published25 Jul 2026
Updated4 Nov 2026
First seen25 Jul 2026
Sources
UBUNTU-CVE-2026-64269 · OSV
CVE-2026-64269 · NVD
CVE-2026-64269 · MITRE
DEBIAN-CVE-2026-64269 · OSV
CVE-2026-64269 · OSV
Track software like this
Free during beta