USN-7988-3: Linux kernel vulnerabilities

Q: Which systems should be prioritized for this update?

Prioritize Ubuntu systems using the listed 4.15 GCP or Azure kernel image packages. The affected areas include media and NVME drivers, file-system infrastructure, timers, memory management, and packet sockets.

Q: Could these issues lead to a full system compromise?

Yes. The advisory states that an attacker could possibly use the vulnerabilities to compromise the system.

Q: Which CVEs are addressed by this update?

The update addresses CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195, CVE-2024-56606, CVE-2024-56756, and CVE-2025-39993.

Published Feb 5, 2026

Updated

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

26 affected componentsFixes available

All of the following

ubuntu/linux-image-4.15.0-1181-gcp<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1196-azure<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-azure-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-azure-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-gcp-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-gcp-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1181-gcp<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-gcp<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-gke<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-4.15.0-1196-azure<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-azure<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

ubuntu/linux-azure<4.15.0-1196.211~14.04.1

4.15.0-1196.211~14.04.1

ubuntu/linux-gcp<4.15.0-1181.198~16.04.1

4.15.0-1181.198~16.04.1

ubuntu/linux-azure-4.15<4.15.0-1196.211

4.15.0-1196.211

ubuntu/linux-gcp-4.15<4.15.0-1181.198

4.15.0-1181.198

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-4.15.0-1181-gcp to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1196-azure to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-azure-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-azure-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gcp-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gcp-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gcp to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gke to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-azure to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1196.211~14.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1181.198~16.04.1
Upgrade
Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1196.211
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1181.198
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-7988-3

Event History

Feb 5, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·07:23 PM

Data Sourced

via OSV·07:23 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems should be prioritized for this update?

Prioritize Ubuntu systems using the listed 4.15 GCP or Azure kernel image packages. The affected areas include media and NVME drivers, file-system infrastructure, timers, memory management, and packet sockets.

Could these issues lead to a full system compromise?

Yes. The advisory states that an attacker could possibly use the vulnerabilities to compromise the system.

Which CVEs are addressed by this update?

The update addresses CVE-2022-48986, CVE-2024-27078, CVE-2024-49959, CVE-2024-50195, CVE-2024-56606, CVE-2024-56756, and CVE-2025-39993.

USN-7988-3: Linux kernel vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for this update?

Could these issues lead to a full system compromise?

Which CVEs are addressed by this update?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for this update?

Could these issues lead to a full system compromise?

Which CVEs are addressed by this update?