Ubuntu patches AWS Linux kernel flaws, including Xen frontend bug
A malicious Xen backend could read guest memory pages or crash the guest; other kernel subsystems are also fixed.
Stories per day · 30 days
8 RSS
Relatedubuntu12linux-kernel5lxd3usn3certificate2linux2xen2advisory1availability1aws1azure1certificate-validation1code-execution1containers1ddos1denial-of-service1desktop1f2fs1
44 stories, newest first · one card per story
Stories tagged #canonical
Ubuntu fixes Linux kernel flaws in drivers, F2FS and networking
USN-9032-1 lists nine CVEs spanning GPU, bonding, F2FS, tracing, networking core, IUCV and RxRPC.
Canonical lags in patching critical CVE-2026-98432
Canonical has not released the fix for CVE-2026-98432 in main Ubuntu repositories despite rapid patching by Debian and Red Hat.
Ubuntu delays critical Linux kernel TCP vulnerability patch
Ubuntu has not patched CVE-2026-98432 which allows remote root on servers, despite Debian and others shipping the fix.
Critical Vulnerabilities in Incus and LXD Allow Full Cluster Access
Unauthenticated attackers can impersonate trusted certificates to gain full access to Incus and LXD clusters without credentials.
LXD and MicroCloud Flaw Lets Attackers Impersonate Trusted Clients (CVE-2026-112816)
CVSS 10.0 flaw in mutual TLS certificate validation lets attackers impersonate trusted clients without private key; fixed in LXD 6.10.1 and MicroCloud 3.4.1.
1
LXD HTTPS listener flaw lets attackers impersonate trusted clients
CVSS 4.0 score is 10.0; fixed releases are 4.0.15, 5.0.11, 5.21.9, and 6.10.1.
Canonical restarts Ubuntu Core Desktop as a future immutable default
Daily images are expected in the Ubuntu 27.04 cycle, and the desktop can run only snap-packaged software.
PHP team reportedly rejects claimed PHP 8.2–8.5 RCE
Canonical was told the Mastodon-reported issue is unrelated and not a real vulnerability.
USN-8922-2: Linux kernel (Azure) vulnerabilities
Ubuntu patched multiple Azure Linux kernel flaws that could let an attacker compromise the system.
USN-8925-1: YAML-LibYAML vulnerabilities
Ubuntu patched YAML-LibYAML flaws that could delete files or run code on 16.04 and 18.04 LTS.
Massive DDoS Attack Disrupts Ubuntu’s Canonical Websites and Security APIs
A DDoS attack disrupted Canonical’s Ubuntu websites and security APIs for just over four hours.
USN-8915-1: FFmpeg vulnerabilities
Ubuntu's USN-8915-1 fixes FFmpeg flaws, including possible code execution and several denial-of-service bugs.
Canonical Hit by Second DDoS Attack in 2026, Public Websites Disrupted
Canonical's public websites were disrupted for over four hours by its second DDoS attack of 2026.
Canonical Websites Disrupted in Second DDoS Attack This Year
Canonical websites including ubuntu.com experienced a DDoS attack causing approximately four hours of downtime, the second this year.
USN-8911-1: Linux kernel (OEM) vulnerabilities
Ubuntu patched multiple Linux kernel OEM flaws that could let attackers compromise affected systems.
USN-8903-2: Linux kernel vulnerabilities
Ubuntu patched multiple Linux kernel flaws that could let an attacker compromise the system.
USN-8910-1: libxml2 vulnerabilities
Ubuntu patched libxml2 flaws, including a heap overflow that could crash the library or allow code execution.
USN-8904-1: Linux kernel (Azure) vulnerabilities
Ubuntu's USN-8904-1 patches multiple Azure Linux kernel flaws that could let an attacker compromise the system.
USN-8897-1: lxml vulnerabilities
Ubuntu fixes lxml flaws that can bypass URL sanitization for XSS and leak local files via untrusted XML.
USN-8892-1: Ubuntu Pro for WSL vulnerability
Ubuntu Pro for WSL leaked subscription attach tokens in command-line arguments, risking unauthorized repository access.
USN-8816-4: Linux kernel (GKE) vulnerabilities
Ubuntu issued USN-8816-4 fixing multiple Linux kernel flaws in the GKE kernel.
USN-8859-1: ImageMagick vulnerabilities
Ubuntu patches ImageMagick flaws that could let attackers cause denial of service or leak information.
USN-8839-1: Atril vulnerabilities
Ubuntu patched Atril flaws, including a PDF GoToR bug that crafted files could use to run code.