USN-8388-1: Linux kernel vulnerabilities
It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500) It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300) Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1050-nvidia-tegra-igxto a version that resolves this vulnerability.Fixed in 5.15.0-1050.50 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1050-nvidia-tegra-igx-rtto a version that resolves this vulnerability.Fixed in 5.15.0-1050.50 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1061-nvidia-tegrato a version that resolves this vulnerability.Fixed in 5.15.0-1061.61 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1061-nvidia-tegra-rtto a version that resolves this vulnerability.Fixed in 5.15.0-1061.61 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1092-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0-1092.100 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1101-intel-iot-realtimeto a version that resolves this vulnerability.Fixed in Real-time - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1101-kvmto a version that resolves this vulnerability.Fixed in 5.15.0-1101.106 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1103-ibmto a version that resolves this vulnerability.Fixed in 5.15.0-1103.106 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1103-raspito a version that resolves this vulnerability.Fixed in 5.15.0-1103.106 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1104-intel-iotgto a version that resolves this vulnerability.Fixed in 5.15.0-1104.110 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1104-nvidiato a version that resolves this vulnerability.Fixed in 5.15.0-1104.105 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1104-nvidia-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0-1104.105 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1105-gketo a version that resolves this vulnerability.Fixed in 5.15.0-1105.111 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1106-oracleto a version that resolves this vulnerability.Fixed in 5.15.0-1106.112 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1108-realtimeto a version that resolves this vulnerability.Fixed in Real-time - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-awsto a version that resolves this vulnerability.Fixed in 5.15.0-1109.116 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-aws-64kto a version that resolves this vulnerability.Fixed in 5.15.0-1109.116 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-aws-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-gcpto a version that resolves this vulnerability.Fixed in 5.15.0-1109.118 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-gcp-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-genericto a version that resolves this vulnerability.Fixed in 5.15.0-181.191 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0-181.191 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0-181.191 - Upgrade
Upgrade
ubuntu/linux-image-aws-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1109.112 - Upgrade
Upgrade
ubuntu/linux-image-aws-64k-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1109.112 - Upgrade
Upgrade
ubuntu/linux-image-aws-64k-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1109.112 - Upgrade
Upgrade
ubuntu/linux-image-aws-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-aws-fips-5.15to a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-aws-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1109.112 - Upgrade
Upgrade
ubuntu/linux-image-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-fips-5.15to a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-gcp-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1109.105 - Upgrade
Upgrade
ubuntu/linux-image-gcp-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-gcp-fips-5.15to a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-gcp-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1109.105 - Upgrade
Upgrade
ubuntu/linux-image-genericto a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-generic-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-generic-64kto a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpaeto a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-gketo a version that resolves this vulnerability.Fixed in 5.15.0.1105.104 - Upgrade
Upgrade
ubuntu/linux-image-gke-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1105.104 - Upgrade
Upgrade
ubuntu/linux-image-gkeopto a version that resolves this vulnerability.Fixed in 5.15.0.1092.91 - Upgrade
Upgrade
ubuntu/linux-image-gkeop-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1092.91 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 5.15.0.1103.99 - Upgrade
Upgrade
ubuntu/linux-image-ibm-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1103.99 - Upgrade
Upgrade
ubuntu/linux-image-intel-iot-realtimeto a version that resolves this vulnerability.Fixed in Real-time - Upgrade
Upgrade
ubuntu/linux-image-intel-iot-realtime-5.15to a version that resolves this vulnerability.Fixed in Real-time - Upgrade
Upgrade
ubuntu/linux-image-intel-iotgto a version that resolves this vulnerability.Fixed in 5.15.0.1104.103 - Upgrade
Upgrade
ubuntu/linux-image-intel-iotg-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1104.103 - Upgrade
Upgrade
ubuntu/linux-image-kvmto a version that resolves this vulnerability.Fixed in 5.15.0.1101.97 - Upgrade
Upgrade
ubuntu/linux-image-kvm-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1101.97 - Upgrade
Upgrade
ubuntu/linux-image-nvidiato a version that resolves this vulnerability.Fixed in 5.15.0.1104.104 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1104.104 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-lowlatencyto a version that resolves this vulnerability.Fixed in 5.15.0.1104.104 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-lowlatency-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1104.104 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegrato a version that resolves this vulnerability.Fixed in 5.15.0.1061.61 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1061.61 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-igxto a version that resolves this vulnerability.Fixed in 5.15.0.1050.52 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-igx-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1050.52 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-igx-rtto a version that resolves this vulnerability.Fixed in 5.15.0.1050.52 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-igx-rt-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1050.52 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-rtto a version that resolves this vulnerability.Fixed in 5.15.0.1061.61 - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-rt-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1061.61 - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-oracle-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1106.102 - Upgrade
Upgrade
ubuntu/linux-image-oracle-lts-22.04to a version that resolves this vulnerability.Fixed in 5.15.0.1106.102 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 5.15.0.1103.101 - Upgrade
Upgrade
ubuntu/linux-image-raspi-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.1103.101 - Upgrade
Upgrade
ubuntu/linux-image-raspi-nolpaeto a version that resolves this vulnerability.Fixed in 5.15.0.1103.101 - Upgrade
Upgrade
ubuntu/linux-image-realtimeto a version that resolves this vulnerability.Fixed in Real-time - Upgrade
Upgrade
ubuntu/linux-image-realtime-5.15to a version that resolves this vulnerability.Fixed in Real-time - Upgrade
Upgrade
ubuntu/linux-image-virtualto a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-virtual-5.15to a version that resolves this vulnerability.Fixed in 5.15.0.181.164 - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1061-nvidia-tegrato a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1061-nvidia-tegra-rtto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1103-ibmto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-awsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1109-gcpto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-genericto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-generic-64kto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.15.0-181-generic-lpaeto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-awsto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-aws-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-gcp-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-generic-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-generic-64k-hwe-20.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-generic-hwe-20.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-generic-lpae-hwe-20.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-ibm-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegrato a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-rtto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-nvidia-tegra-rt-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04bto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04cto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-oem-20.04dto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-virtual-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-virtual-hwe-20.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8388-1
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What are the main vulnerabilities addressed in USN-8388-1?
USN-8388-1 addresses the Linux kernel vulnerabilities identified as CVE-2026-46333, CVE-2026-46300, and CVE-2026-43503.
What is the severity of USN-8388-1?
The severity of USN-8388-1 is rated at 55, indicating a significant security concern in the Linux kernel.
How do I fix the vulnerabilities in USN-8388-1?
To fix the vulnerabilities in USN-8388-1, you should update your Ubuntu system to the latest kernel version provided by Canonical.
Are there any known exploits for the vulnerabilities in USN-8388-1?
Currently, there are no public reports of active exploits for the vulnerabilities addressed in USN-8388-1.
What systems are affected by USN-8388-1?
USN-8388-1 affects systems running the Canonical Ubuntu Linux kernel that have not been updated to the patched version.