USN-8490-2: Linux kernel (Real-time) vulnerabilities

Q: Which systems should be prioritized for this update?

Prioritize Ubuntu systems running the Real-time kernel packages listed in the advisory, especially where affected functionality is exposed or used. The corrected areas include networking, storage, file systems, cryptography, USB over IP, and multiple hardware-driver subsystems.

Q: Does this advisory apply to systems using the standard Ubuntu kernel?

The listed affected software consists of Ubuntu Real-time kernel packages, including linux-image-6.17.0-1017-realtime and related realtime meta-packages. The provided data does not identify standard, non-real-time Ubuntu kernel packages as affected.

Q: How can I determine whether a host is affected?

Check whether the host has one of the listed Ubuntu Real-time kernel packages installed, particularly the 6.17 Real-time kernel package line. Compare installed package versions with the fixed source package version 6.17.0-1017.19 referenced by the advisory.

Q: What is the risk if the update is not applied?

The advisory states that an attacker could possibly use the corrected kernel flaws to compromise the system. The issues span many kernel subsystems, but the provided data does not specify exploit prerequisites or temporary mitigations for individual CVEs.

Published Jul 17, 2026

Updated

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

15 affected componentsFixes available

Linux kernel (Real-time)

All of the following

ubuntu/linux-image-6.17.0-1017-realtime<6.17.0-1017.19

6.17.0-1017.19

Ubuntu Ubuntu=25.10

All of the following

ubuntu/linux-image-realtime<6.17.0-1017.19

6.17.0-1017.19

Ubuntu Ubuntu=25.10

All of the following

ubuntu/linux-image-realtime-6.17<6.17.0-1017.19

6.17.0-1017.19

Ubuntu Ubuntu=25.10

All of the following

ubuntu/linux-image-6.17.0-1017-realtime<Real-time

Real-time

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-realtime-6.17<Real-time

Real-time

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-realtime-hwe-24.04<Real-time

Real-time

Ubuntu Ubuntu=24.04

ubuntu/linux-realtime-6.17<6.17.0-1017.19~24.04.1

6.17.0-1017.19~24.04.1

ubuntu/linux-realtime<6.17.0-1017.19

6.17.0-1017.19

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-6.17.0-1017-realtime to a version that resolves this vulnerability.
Fixed in 6.17.0-1017.19
Upgrade
Upgrade ubuntu/linux-image-realtime to a version that resolves this vulnerability.
Fixed in 6.17.0-1017.19
Upgrade
Upgrade ubuntu/linux-image-realtime-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1017.19
Upgrade
Upgrade ubuntu/linux-image-6.17.0-1017-realtime to a version that resolves this vulnerability.
Fixed in Real-time
Upgrade
Upgrade ubuntu/linux-image-realtime-6.17 to a version that resolves this vulnerability.
Fixed in Real-time
Upgrade
Upgrade ubuntu/linux-image-realtime-hwe-24.04 to a version that resolves this vulnerability.
Fixed in Real-time
Upgrade
Upgrade ubuntu/linux-realtime-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1017.19~24.04.1
Upgrade
Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.
Fixed in 6.17.0-1017.19
Upgrade
Upgrade linux-realtime to a version that resolves this vulnerability.
Patch USN-8490-2

Event History

Jul 17, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·10:10 AM

Data Sourced

via OSV·10:10 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems should be prioritized for this update?

Prioritize Ubuntu systems running the Real-time kernel packages listed in the advisory, especially where affected functionality is exposed or used. The corrected areas include networking, storage, file systems, cryptography, USB over IP, and multiple hardware-driver subsystems.

Does this advisory apply to systems using the standard Ubuntu kernel?

The listed affected software consists of Ubuntu Real-time kernel packages, including linux-image-6.17.0-1017-realtime and related realtime meta-packages. The provided data does not identify standard, non-real-time Ubuntu kernel packages as affected.

How can I determine whether a host is affected?

Check whether the host has one of the listed Ubuntu Real-time kernel packages installed, particularly the 6.17 Real-time kernel package line. Compare installed package versions with the fixed source package version 6.17.0-1017.19 referenced by the advisory.

What is the risk if the update is not applied?

The advisory states that an attacker could possibly use the corrected kernel flaws to compromise the system. The issues span many kernel subsystems, but the provided data does not specify exploit prerequisites or temporary mitigations for individual CVEs.

USN-8490-2: Linux kernel (Real-time) vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for this update?

Does this advisory apply to systems using the standard Ubuntu kernel?

How can I determine whether a host is affected?

What is the risk if the update is not applied?

Company

Resources

Contact