USN-8819-2: Linux kernel vulnerabilities
Ubuntu kernel notice USN-8819-2 patches NFS, IPv6, and Netfilter flaws, including three CVEs.
Ubuntu USN-8819-2 corrects Linux kernel vulnerabilities in the NFS server daemon, IPv6 networking, and Netfilter. The notice cites CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221. Ubuntu says an attacker could possibly use the issues to compromise a system. The text does not describe active exploitation or provide further technical detail.
- Fixes cover the NFS server, IPv6 networking, and Netfilter.
- Cited CVEs are CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221.
- No in-the-wild exploitation is reported in the notice.
- Vendors
- Canonical
- Products
- Linux kernel
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-38724 | Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that… | 7.8 | <1% | ||
CVE-2026-53221+1 related CVE | Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup() | 9.8 group max | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network file system (NFS) server daemon; - IPv6 networking; - Netfilter; (CVE-2025-38724, CVE-2026-53131, CVE-2026-53221)
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.