Ubuntu patches Linux kernel (BlueField) flaws in USN-8965-1
Original title: USN-8965-1: Linux kernel (BlueField) vulnerabilities
The notice lists 11 CVE ids across networking, storage, NFS, tracing, and io_uring, with no exploitation status.
Ubuntu published USN-8965-1 for the Linux kernel (BlueField). It says several security issues were discovered and an attacker could possibly use them to compromise the system. The update corrects flaws in Ethernet bonding, network and SCSI drivers, F2FS, the NFS client, tracing, io_uring, networking, IUCV, and RxRPC.
Unconfirmed: Exploitation status and fixed versions are not stated.
- Listed ids include CVE-2024-53187, CVE-2025-39730, and CVE-2026-52910.
- Older ids cited include CVE-2022-49082 and CVE-2022-49201.
- Subsystems named include F2FS, NFS client, and io_uring.
- No fixed versions appear in the feed snippet.
Impact: possible compromise of the system
| Product | Affected |
|---|---|
| Ubuntu Linux kernel (BlueField) | — |
- 1.Install the Linux kernel (BlueField) update from USN-8965-1.
- CVEs
- CVE-2022-49082CVE-2022-49149CVE-2022-49170CVE-2022-49182CVE-2022-49201CVE-2024-53187CVE-2024-53210CVE-2024-56763CVE-2025-39730CVE-2026-43456CVE-2026-52910
- Vendors
- Ubuntu
- Products
- Linux kernel (BlueField)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2022-49170+4 related CVEs | Linux kernel: f2fs: fix to do sanity check on curseg->alloc_type | 7.8 group max | <1% | ||
CVE-2024-53187+1 related CVE | Linux kernel: io_uring: check for overflows in io_pin_pages | 5.5 | <1% | ||
| CVE-2024-56763 | Linux kernel: tracing: Prevent bad count for tracing_cpumask_write | 5.5 | <1% | ||
| CVE-2025-39730 | Linux kernel: NFS | 7.8 | <1% | ||
| CVE-2026-43456 | Linux kernel: bonding: fix type confusion in bond_setup_by_slave() kernel | 7.8 | <1% | ||
| CVE-2026-52910 | Linux kernel: bpf: Free reuseport cBPF prog after RCU grace period. Eulgyu Kim reported the splat below with a repro. [0] | 7.8 | <1% | PoC |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.