USN-8819-1: Linux kernel vulnerabilities
Ubuntu patches Linux kernel flaws in NFS server, IPv6, and Netfilter that could let attackers compromise systems.
Ubuntu published USN-8819-1 to fix several Linux kernel vulnerabilities in the NFS server daemon, IPv6 networking, and Netfilter. The notice says an attacker could possibly use the flaws to compromise a system. The listed identifiers are CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221. The advisory does not report active exploitation.
- USN-8819-1 patches NFS server, IPv6, and Netfilter kernel flaws.
- CVEs listed are CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221.
- Ubuntu says an attacker could possibly compromise the system.
- The notice does not report observed exploitation.
- Vendors
- Ubuntu
- Products
- Linux kernelUbuntu
- Organizations
- Canonical
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-38724 | Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that… | 7.8 | <1% | ||
CVE-2026-53221+1 related CVE | Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 group max | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.