Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux 4.4.0-283 packages may cause crashes or data loss
published 3 months ago
Summary
Several components in the Linux kernel version 4.4.0-283 (including generic and low‑latency builds and cloud tools) contain coding errors that could lead to crashes, unauthorized memory access, or other unexpected behavior. These flaws could affect system stability or allow an attacker to manipulate the system. Apply the latest updates from your Linux distribution to replace these packages and protect your environment.
What to do
- Update canonical linux-buildinfo-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-buildinfo-4.4.0-283-lowlatency to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-cloud-tools-4.4.0-283 to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-cloud-tools-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-cloud-tools-4.4.0-283-lowlatency to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-cloud-tools-common to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-doc to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-headers-4.4.0-283 to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-headers-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-headers-4.4.0-283-lowlatency to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-image-unsigned-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-image-unsigned-4.4.0-283-lowlatency to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-libc-dev to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-modules-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-modules-4.4.0-283-lowlatency to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-modules-extra-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-source-4.4.0 to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-tools-4.4.0-283 to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-tools-4.4.0-283-generic to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-tools-4.4.0-283-lowlatency to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-tools-common to version 4.4.0-283.317+tuxcare.els1.
- Update canonical linux-tools-host to version 4.4.0-283.317+tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:Ubuntu:16.04 | canonical | linux-buildinfo-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-buildinfo-4.4.0-283-lowlatency |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-cloud-tools-4.4.0-283 |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-cloud-tools-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-cloud-tools-4.4.0-283-lowlatency |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-cloud-tools-common |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-doc |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-headers-4.4.0-283 |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-headers-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-headers-4.4.0-283-lowlatency |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-image-unsigned-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-image-unsigned-4.4.0-283-lowlatency |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-libc-dev |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-modules-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-modules-4.4.0-283-lowlatency |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-modules-extra-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-source-4.4.0 |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-tools-4.4.0-283 |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-tools-4.4.0-283-generic |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-tools-4.4.0-283-lowlatency |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-tools-common |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
| TuxCare:Ubuntu:16.04 | canonical | linux-tools-host |
< 4.4.0-283.317+tuxcare.els1 Fix: upgrade to 4.4.0-283.317+tuxcare.els1
|
Original advisory text
Fix of 31 CVEs
* CVE-2022-50093
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
{CVE-2022-50093}
* CVE-2026-31778
- ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
* CVE-2026-43011
- net/x25: Fix potential double free of skb {CVE-2026-43011}
* CVE-2026-31602
- ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
* CVE-2026-31622
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
{CVE-2026-31622}
* CVE-2026-31583
- media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583}
* CVE-2026-31659
- batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
* CVE-2023-53596
- drivers: base: Free devm resources when unregistering a {CVE-2023-53596}
* CVE-2026-31696
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
{CVE-2026-31696}
* CVE-2022-50497
- binfmt_misc: fix shift-out-of-bounds in check_special_flags
{CVE-2022-50497}
* CVE-2026-23372
- nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372}
* CVE-2026-23193
- scsi: target: iscsi: Fix use-after-free in
iscsit_dec_session_usage_count() {CVE-2026-23193}
* CVE-2023-53619
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
{CVE-2023-53619}
* CVE-2023-53285
- ext4: add bounds checking in get_max_inline_xattr_value_size()
{CVE-2023-53285}
* CVE-2026-43427
- usb: class: cdc-wdm: fix reordering issue in read code path
{CVE-2026-43427}
* CVE-2026-43052
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
* CVE-2026-31405
- media: dvb-net: fix OOB access in ULE extension header tables
{CVE-2026-31405}
* CVE-2026-31629
- nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629}
* CVE-2025-71136
- media: adv7842: Avoid possible out-of-bounds array accesses in
adv7842_cp_log_status() {CVE-2025-71136}
* CVE-2026-31417
- net/x25: Fix overflow when accumulating packets {CVE-2026-31417}
* CVE-2026-43020
- Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
* CVE-2026-43040
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields
to zero to prevent an info-leak {CVE-2026-43040}
* CVE-2022-49770
- ceph: avoid putting the realm twice when decoding snaps fails
{CVE-2022-49770}
* CVE-2026-43283
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283}
* CVE-2026-31748
- comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748}
* CVE-2026-31747
- comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747}
* CVE-2026-31576
- media: hackrf: fix to not free memory after the device is registered in
hackrf_probe() {CVE-2026-31576}
* CVE-2026-31399
- nvdimm/bus: Fix potential use after free in asynchronous initialization
{CVE-2026-31399}
* CVE-2026-23388
- Squashfs: check metadata block offset is within range {CVE-2026-23388}
* CVE-2026-43450
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
{CVE-2026-43450}
* CVE-2026-31720
- usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720}
* CVE-2026-23216
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
{CVE-2026-23216}
* Bump ABI 4.4.0-283
- iommu/vt-d: avoid invalid memory access via node_online(NUMA_NO_NODE)
{CVE-2022-50093}
* CVE-2026-31778
- ALSA: caiaq: fix stack out-of-bounds read in init_card {CVE-2026-31778}
* CVE-2026-43011
- net/x25: Fix potential double free of skb {CVE-2026-43011}
* CVE-2026-31602
- ALSA: ctxfi: Limit PTP to a single page {CVE-2026-31602}
* CVE-2026-31622
- NFC: digital: Bounds check NFC-A cascade depth in SDD response handler
{CVE-2026-31622}
* CVE-2026-31583
- media: em28xx: fix use-after-free in em28xx_v4l2_open() {CVE-2026-31583}
* CVE-2026-31659
- batman-adv: reject oversized global TT response buffers {CVE-2026-31659}
* CVE-2023-53596
- drivers: base: Free devm resources when unregistering a {CVE-2023-53596}
* CVE-2026-31696
- rxrpc: Fix missing validation of ticket length in non-XDR key preparsing
{CVE-2026-31696}
* CVE-2022-50497
- binfmt_misc: fix shift-out-of-bounds in check_special_flags
{CVE-2022-50497}
* CVE-2026-23372
- nfc: rawsock: cancel tx_work before socket teardown {CVE-2026-23372}
* CVE-2026-23193
- scsi: target: iscsi: Fix use-after-free in
iscsit_dec_session_usage_count() {CVE-2026-23193}
* CVE-2023-53619
- netfilter: conntrack: Avoid nf_ct_helper_hash uses after free
{CVE-2023-53619}
* CVE-2023-53285
- ext4: add bounds checking in get_max_inline_xattr_value_size()
{CVE-2023-53285}
* CVE-2026-43427
- usb: class: cdc-wdm: fix reordering issue in read code path
{CVE-2026-43427}
* CVE-2026-43052
- wifi: mac80211: check tdls flag in ieee80211_tdls_oper {CVE-2026-43052}
* CVE-2026-31405
- media: dvb-net: fix OOB access in ULE extension header tables
{CVE-2026-31405}
* CVE-2026-31629
- nfc: llcp: add missing return after LLCP_CLOSED checks {CVE-2026-31629}
* CVE-2025-71136
- media: adv7842: Avoid possible out-of-bounds array accesses in
adv7842_cp_log_status() {CVE-2025-71136}
* CVE-2026-31417
- net/x25: Fix overflow when accumulating packets {CVE-2026-31417}
* CVE-2026-43020
- Bluetooth: MGMT: validate LTK enc_size on load {CVE-2026-43020}
* CVE-2026-43040
- net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields
to zero to prevent an info-leak {CVE-2026-43040}
* CVE-2022-49770
- ceph: avoid putting the realm twice when decoding snaps fails
{CVE-2022-49770}
* CVE-2026-43283
- net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle {CVE-2026-43283}
* CVE-2026-31748
- comedi: me_daq: Fix potential overrun of firmware buffer {CVE-2026-31748}
* CVE-2026-31747
- comedi: me4000: Fix potential overrun of firmware buffer {CVE-2026-31747}
* CVE-2026-31576
- media: hackrf: fix to not free memory after the device is registered in
hackrf_probe() {CVE-2026-31576}
* CVE-2026-31399
- nvdimm/bus: Fix potential use after free in asynchronous initialization
{CVE-2026-31399}
* CVE-2026-23388
- Squashfs: check metadata block offset is within range {CVE-2026-23388}
* CVE-2026-43450
- netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table()
{CVE-2026-43450}
* CVE-2026-31720
- usb: gadget: f_uac1_legacy: validate control request size {CVE-2026-31720}
* CVE-2026-23216
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
{CVE-2026-23216}
* Bump ABI 4.4.0-283
References
- https://errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1782147988.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-49770 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-50093 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-50497 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53285 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53596 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-53619 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-71136 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23193 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23216 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23372 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-23388 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31405 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31417 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31576 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31583 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31602 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31622 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31629 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31659 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31696 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31720 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31747 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31748 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-31778 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43011 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43020 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43040 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43052 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43283 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43427 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-43450 Vendor Advisory
Timeline
Published25 Jul 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1782147988 · OSV
Track software like this
Free during beta