USN-8714-3: Linux kernel vulnerabilities
Ubuntu issues USN-8714-3 updating the generic Linux kernel to fix five CVEs affecting the OCFS2 file system and SCTP protocol.
Ubuntu released USN-8714-3, a security update for the generic Linux kernel. The update fixes five CVEs: CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, and CVE-2026-53309, all affecting the OCFS2 file system and SCTP protocol subsystems. An attacker could potentially use these issues to compromise the system.
- USN-8714-3 updates Ubuntu's generic Linux kernel.
- Fixes five CVEs: CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309.
- Affected subsystems are the OCFS2 file system and SCTP protocol.
- Products
- Linux kernel
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2026-53043 | Linux kernel: ocfs2/dlm: validate qr_numregions in dlm_match_regions() Patch series "ocfs2/dlm: fix two bugs in… | 9.1 | <1% | ||
CVE-2026-53246+2 related CVEs | Linux kernel: sctp: validate cached peer INIT chunk length in COOKIE_ECHO processing | 9.8 group max | <1% | ||
| CVE-2026-53309 | Linux kernel: ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison | 9.8 | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - OCFS2 file system; - SCTP protocol; (CVE-2026-53043, CVE-2026-53224, CVE-2026-53225, CVE-2026-53246, CVE-2026-53309)
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.