Usn
USN-8529-2: Linux kernel vulnerabilities
Publication date
13 August 2026
Overview
Several security issues were fixed in the Linux kernel.
Releases
Packages
- linux-azure - Linux kernel for Microsoft Azure Cloud systems
- linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
- linux-hwe - Linux hardware enablement (HWE) kernel
- linux-oracle - Linux kernel for Oracle Cloud systems
Details
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- SCSI subsystem;
- Thermal drivers;
- USB over IP driver;
- Network file system (NFS) server daemon;
- SMB network file system;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- DCCP (Datagram Congestion Control Protocol);
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RxRPC session...
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- SCSI subsystem;
- Thermal drivers;
- USB over IP driver;
- Network file system (NFS) server daemon;
- SMB network file system;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- DCCP (Datagram Congestion Control Protocol);
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RxRPC session sockets;
- X.25 network layer
Update instructions
After a standard system update you need to reboot your computer to make all the necessary changes.
Learn more about how to get the fixes.The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
| 16.04 LTS xenial | linux-image-4.15.0-1156-oracle – 4.15.0-1156.167~16.04.1 | ||
| linux-image-4.15.0-1188-gcp – 4.15.0-1188.205~16.04.1 | |||
| linux-image-4.15.0-1205-azure – 4.15.0-1205.220~16.04.1 | |||
| linux-image-4.15.0-253-generic – 4.15.0-253.265~16.04.1 | |||
| linux-image-4.15.0-254-generic – 4.15.0-254.266~16.04.1 | |||
| linux-image-4.15.0-254-lowlatency – 4.15.0-254.266~16.04.1 | |||
| linux-image-azure – 4.15.0.1205.220~16.04.1 | |||
| linux-image-gcp – 4.15.0.1188.205~16.04.1 | |||
| linux-image-generic-hwe-16.04 – 4.15.0.254.266~16.04.1 | |||
| linux-image-gke – 4.15.0.1188.205~16.04.1 | |||
| linux-image-lowlatency-hwe-16.04 – 4.15.0.254.266~16.04.1 | |||
| linux-image-oem – 4.15.0.254.266~16.04.1 | |||
| linux-image-oracle – 4.15.0.1156.167~16.04.1 | |||
| linux-image-virtual-hwe-16.04 – 4.15.0.254.266~16.04.1 |
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
References
- CVE-2026-46243
- CVE-2026-46119
- CVE-2026-46043
- CVE-2026-45988
- CVE-2026-43503
- CVE-2026-43414
- CVE-2026-43407
- CVE-2026-43383
- CVE-2026-43038
- CVE-2026-43037
- CVE-2026-46243
- CVE-2026-46119
- CVE-2026-46043
- CVE-2026-45988
- CVE-2026-43503
- CVE-2026-43414
- CVE-2026-43407
- CVE-2026-43383
- CVE-2026-43038
- CVE-2026-43037
- CVE-2026-43011
- CVE-2026-31685
- CVE-2026-31682
- CVE-2026-31659
- CVE-2026-31637
- CVE-2026-31607
- CVE-2026-31402
- CVE-2026-23455
- CVE-2026-23272
- CVE-2024-56643
- CVE-2021-47202
Related notices
- USN-8635-1
- USN-8634-1
- USN-8619-1
- USN-8617-1
- USN-8616-1
- USN-8615-1
- USN-8615-2
- USN-8609-1
- USN-8607-1
- USN-8606-1
- USN-8635-1
- USN-8634-1
- USN-8619-1
- USN-8617-1
- USN-8616-1
- USN-8615-1
- USN-8615-2
- USN-8609-1
- USN-8607-1
- USN-8606-1
- USN-8605-1
- USN-8604-1
- USN-8603-1
- USN-8569-1
- USN-8548-1
- USN-8547-1
- USN-8547-2
- USN-8546-1
- USN-8545-1
- USN-8530-1
- USN-8529-1
- USN-8528-1
- USN-8527-1
- USN-8508-1
- USN-8507-1
- USN-8501-1
- USN-8499-1
- USN-8498-1
- USN-8497-1
- USN-8493-1
- USN-8493-2
- USN-8492-1
- USN-8492-2
- USN-8492-3
- USN-8492-4
- USN-8492-5
- USN-8491-1
- USN-8490-1
- USN-8490-2
- USN-8489-1
- USN-8488-1
- USN-8488-2
- USN-8462-1
- USN-8461-1
- USN-8440-1
- USN-8426-1
- USN-8426-2
- USN-8393-1
- USN-8388-1
- USN-8388-2
- USN-8374-1
- USN-8373-1
- USN-8371-1
- USN-8370-1
- USN-7540-1
- USN-7539-1
- USN-7524-1
- USN-7523-1
- USN-7468-1
- USN-7463-1
- USN-7459-1
- USN-7459-2
- USN-7458-1
- USN-7453-1
- USN-7452-1
- USN-7451-1
- USN-7450-1
- USN-7449-1
- USN-7449-2
- USN-7421-1
- USN-7413-1
- USN-7407-1
- USN-7401-1
- USN-7393-1
- USN-7392-1
- USN-7392-2
- USN-7392-4
- USN-7392-3
- USN-7391-1
- USN-7390-1
- USN-7389-1
- USN-7388-1
- USN-7387-1
- USN-7387-2
- USN-7387-3
- USN-7382-1
- USN-7381-1
- USN-7380-1
- USN-7379-1
- USN-7379-2
Have additional questions?
How it works
Once you click Generate, Ollama reads this article and crafts 5 comprehension questions. Your answers are graded against the article content — general knowledge won't be enough. Score 70+ to count toward your certificate.
Questions are cached — you'll always get the same 5 for this article.