Ubuntu fixes Linux kernel (FIPS) flaws in USN-9027-2
Original title: USN-9027-2: Linux kernel (FIPS) vulnerabilities
The update covers x86, networking, Netfilter, OCFS2 and XFRM issues tracked as five CVEs, with no exploitation stated.
Ubuntu published USN-9027-2 for security issues in the Linux kernel (FIPS). The notice says an attacker could possibly use the flaws to compromise the system. It corrects issues in x86, hardware monitoring, OCFS2, IPv4, the Ethernet bridge, Netfilter and XFRM. No exploitation or fixed version strings are stated in the notice text.
Unconfirmed: The notice does not describe individual flaw impact or say whether any issue is exploited.
- Subsystems include x86, hardware monitoring, OCFS2, IPv4, Ethernet bridge, Netfilter and XFRM.
- CVEs listed are CVE-2025-21656, CVE-2026-63940, CVE-2026-74350, CVE-2026-98432 and CVE-2026-99999.
- The snippet does not name affected or fixed kernel versions.
Impact: Possible compromise of the system
| Product | Affected |
|---|---|
| Ubuntu Linux kernel (FIPS) | — |
- 1.Install the USN-9027-2 Linux kernel (FIPS) update.
- Vendors
- Ubuntu
- Products
- Linux kernel (FIPS)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-21656 | Linux kernel: hwmon: (drivetemp) | 5.5 | <1% | ||
| CVE-2026-63940 | Linux kernel: KVM: SEV: Ignore Port I/O requests of length '0' Explicitly ignore Port I/O requests of length '0' (or count… | 9.3 | <1% | ||
| CVE-2026-74350 | Linux kernel: ocfs2: validate fast symlink target during inode read ocfs2_validate_inode_block() already rejects several… | 9.8 | <1% | ||
CVE-2026-98432+1 related CVE | Use-after-free in Linux kernel IPv4 TCP options | 9.8 group max | <1% | PoC ×25 |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Hardware monitoring drivers; - OCFS2 file system; - IPv4 networking; - Ethernet bridge; - Netfilter; - XFRM subsystem; (CVE-2025-21656, CVE-2026-63940, CVE-2026-74350, CVE-2026-98432, CVE-2026-99999)
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.