Skip to content
NewA calmer, faster ZeroHour
StoryAdvisorymedium

Ubuntu releases five Linux kernel security notices on November 3, 2026

1 source · 5 articlesFirst reported Updated ()1
What's new

November 3, 2026: Reports detail five specific USNs covering overlapping CVEs like CVE-2021-3640 and CVE-2022-1205.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Ubuntu published five kernel security notices fixing Bluetooth use-after-free, AX.25 races, Xen memory exhaustion and other flaws.

On November 3, 2026, Ubuntu issued USN-8964-1, USN-8966-1, USN-8968-1, USN-8959-1 and USN-8961-1 for Linux kernel vulnerabilities. Issues include Bluetooth use-after-free (CVE-2021-3640) allowing local crashes or code execution, AX.25 race conditions (CVE-2022-1205) causing denial of service, Xen network backend memory exhaustion (CVE-2021-28714), SCSI subsystem flaws (CVE-2022-49082), NFS client problems (CVE-2025-39730) and file systems infrastructure issues (CVE-2022-49058). Notices state an attacker could possibly compromise the system through these flaws. Fixed package versions are not specified.

Key facts
  • CVE-2021-3640: Bluetooth use-after-free
  • CVE-2022-1205: AX.25 race conditions
  • CVE-2021-28714: Xen network backend memory exhaustion
  • CVE-2022-49082: SCSI subsystem issue
  • CVE-2025-39730: NFS client vulnerability
  • CVE-2022-49058: File systems infrastructure flaw
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

What each outlet adds

beyond the shared facts
  • Ubuntu Security NoticesSpecific notice IDs USN-8964-1 to USN-8961-1 and subsystem details
CVEs
CVE-2021-28714CVE-2021-3640CVE-2022-49058CVE-2022-1205CVE-2022-49082CVE-2025-39730
Vendors
UbuntuCanonicalLinux
Products
Linux kernel

Coverage

oldest first · one row per article · UTC
  1. · 22h ago Ubuntu Security NoticesFirst report

    Ubuntu fixes Linux kernel SCSI and NFS client flaws

    USN-8964-1 addresses CVE-2022-49082 and CVE-2025-39730; Ubuntu says an attacker could possibly compromise the system.

  2. · 22h ago Ubuntu Security Notices

    Ubuntu kernel update fixes Xen netback DoS and Bluetooth flaw

    A guest can exhaust backend memory, and a local user may crash the system or possibly run code.

  3. · 22h ago Ubuntu Security Notices

    Ubuntu kernel update fixes Bluetooth use-after-free flaw

    CVE-2021-3640 can crash the system or possibly run code locally; CVE-2022-49058 is also fixed.

  4. · 22h ago Ubuntu Security Notices

    Ubuntu fixes Linux kernel flaws across many subsystems

    USN-8959-1 covers USB, memory, filesystems, networking and many CPU architectures, but names no CVE.

  5. · 22h ago Ubuntu Security Notices

    Ubuntu fixes Linux kernel flaws including AX.25 use-after-free

    CVE-2022-1205 is a local race that can crash the system; the notice also covers many other kernel subsystems.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2021-28714
Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs
6.5<1%
CVE-2021-3640
A flaw use-after-free in function sco_sock_sendmsg() of the Linux kernel HCI subsystem was found in the way user calls ioct UFFDIO_REGISTER or other way…
7.0<1%PoC
CVE-2022-1205
A NULL pointer dereference flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol
4.7<1%PoC
CVE-2022-49058
+1 related CVE
CVE-2022-49082
Linux kernel: cifs: potential buffer overflow in handling symlinks Smatch printed a warning…
7.8<1%
CVE-2025-39730
Linux kernel: NFS
7.8<1%