Skip to content
NewA calmer, faster ZeroHour
StoryAdvisorymedium

Ubuntu kernel notices address NFS, IPv6, and Netfilter flaws

1 source · 2 articlesFirst reported Updated ()1
What's new

First coverage.

Merged summary · grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Ubuntu published several September–October 2026 kernel notices fixing NFS, IPv6, and Netfilter issues, mostly tracked as three CVEs, with no reported exploitation.

Between 25 September and 2 October 2026, Ubuntu published a series of Linux kernel security notices covering general, FIPS, Intel IoTG, and Raspberry Pi kernels. USN-8819-2, USN-8819-3, USN-8819-4, USN-8851-1, USN-8851-2, and USN-8864-1 fix flaws in the NFS server daemon, IPv6 networking, and Netfilter, tracked as CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221. By contrast, USN-8730-6 for the Intel IoTG kernel and USN-8730-7 for a FIPS kernel describe only IPv6 and Netfilter fixes and do not name any CVE. Across the notices, Ubuntu says an attacker could possibly use the issues to compromise a system, and none report exploitation in the wild.

Key facts
  • Notices dated 2026-09-25 through 2026-10-02: USN-8819-2, USN-8730-6, USN-8819-3, USN-8819-4, USN-8730-7, USN-8851-1, USN-8851-2, and USN-8864-1.
  • USN-8819-2, USN-8819-3, USN-8819-4, USN-8851-1, USN-8851-2, and USN-8864-1 cite CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221 in the NFS server daemon, IPv6 networking, and Netfilter.
  • USN-8730-6 (Intel IoTG, 2026-09-25) and USN-8730-7 (FIPS, 2026-09-30) name only IPv6 and Netfilter and list no CVE.
  • Kernel flavors covered are general (USN-8819-2, USN-8819-3, USN-8851-1, USN-8864-1), FIPS (USN-8819-4 and USN-8730-7), Intel IoTG (USN-8730-6), and Raspberry Pi (USN-8851-2).
  • Ubuntu says an attacker could possibly use the issues to compromise a system; none of the notices report exploitation in the wild.
  • USN-8851-1 describes the update as routine and says users should apply the patched kernel packages.
Analyze CVE-2025-38724 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2025-38724CVE-2026-53131CVE-2026-53221
Vendors
UbuntuCanonical
Products
Linux kernelRaspberry PiUbuntu
Organizations
CanonicalUbuntuIntelLinux

Coverage

oldest first · one row per article · UTC
  1. · Sep 25, 2026 Ubuntu Security NoticesFirst report

    USN-8819-2: Linux kernel vulnerabilities

    Ubuntu kernel notice USN-8819-2 patches NFS, IPv6, and Netfilter flaws, including three CVEs.

  2. · Sep 25, 2026 Ubuntu Security Notices

    USN-8730-6: Linux kernel (Intel IoTG) vulnerability

    Ubuntu patched IPv6 and Netfilter flaws in the Intel IoTG Linux kernel via USN-8730-6.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-38724
Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
7.8<1%
CVE-2026-53221
+1 related CVE
CVE-2026-53131
Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
9.8
group max
<1%