Back to Security Advisories

Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-8961-1)

USN-8961-1 updates Ubuntu kernels fixing over a thousand backported CVEs, led by AX.25 amateur-radio race conditions (CVE-2022-1205) causing use-after-free crashes. Update and reboot: sudo apt update && sudo apt upgrade, then restart into the new kernel.

High 4.7 CVSS
Ubuntu 20.04 Ubuntu 22.04

What this means under a SharedLicense license

AX.25 race conditions are locally triggerable use-after-frees — on multi-user systems that is a crash lever for any account, and potentially an escalation primitive.

  • CVE-2026-98912
  • CVE-2026-98911
  • CVE-2026-98909
  • CVE-2026-98907
  • CVE-2026-98902
  • CVE-2026-98900
  • CVE-2026-98899
  • CVE-2026-98898
  • CVE-2026-98896
  • CVE-2026-98893
  • CVE-2026-98892
  • CVE-2026-98891
  • CVE-2026-98890
  • CVE-2026-98889
  • CVE-2026-98888
  • CVE-2026-98887
  • CVE-2026-98886
  • CVE-2026-98885
  • CVE-2026-98884
  • CVE-2026-98881
  • CVE-2026-98879
  • CVE-2026-98877
  • CVE-2026-98876
  • CVE-2026-98873
  • CVE-2026-98872
  • CVE-2026-98647
  • CVE-2026-98644
  • CVE-2026-98643
  • CVE-2026-98640
  • CVE-2026-98636
  • CVE-2026-98631
  • CVE-2026-98626
  • CVE-2026-98625
  • CVE-2026-98624
  • CVE-2026-98623
  • CVE-2026-98622
  • CVE-2026-98621
  • CVE-2026-98614
  • CVE-2026-98612
  • CVE-2026-98610
  • CVE-2026-98609
  • CVE-2026-98608
  • CVE-2026-98607
  • CVE-2026-98606
  • CVE-2026-98602
  • CVE-2026-98597
  • CVE-2026-98594
  • CVE-2026-98593
  • CVE-2026-98590
  • CVE-2026-98588
  • CVE-2026-98586
  • CVE-2026-98583
  • CVE-2026-98582
  • CVE-2026-98581
  • CVE-2026-98580
  • CVE-2026-98579
  • CVE-2026-98578
  • CVE-2026-98577
  • CVE-2026-98576
  • CVE-2026-98575
  • CVE-2026-98573
  • CVE-2026-98569
  • CVE-2026-98567
  • CVE-2026-98559
  • CVE-2026-98555
  • CVE-2026-98554
  • CVE-2026-98553
  • CVE-2026-98550
  • CVE-2026-98548
  • CVE-2026-98547
  • CVE-2026-98541
  • CVE-2026-98537
  • CVE-2026-98536
  • CVE-2026-98535
  • CVE-2026-98532
  • CVE-2026-98531
  • CVE-2026-98529
  • CVE-2026-98527
  • CVE-2026-98526
  • CVE-2026-98524
  • CVE-2026-98516
  • CVE-2026-98515
  • CVE-2026-98514
  • CVE-2026-98511
  • CVE-2026-98501
  • CVE-2026-98499
  • CVE-2026-98498
  • CVE-2026-98495
  • CVE-2026-98494
  • CVE-2026-98491
  • CVE-2026-98489
  • CVE-2026-98488
  • CVE-2026-98485
  • CVE-2026-98483
  • CVE-2026-98482
  • CVE-2026-98481
  • CVE-2026-98479
  • CVE-2026-98476
  • CVE-2026-98461
  • CVE-2026-98460
  • CVE-2026-98457
  • CVE-2026-98455
  • CVE-2026-98433
  • CVE-2026-98426
  • CVE-2026-98422
  • CVE-2026-98419
  • CVE-2026-98417
  • CVE-2026-98416
  • CVE-2026-98413
  • CVE-2026-98407
  • CVE-2026-98406
  • CVE-2026-98404
  • CVE-2026-98398
  • CVE-2026-98388
  • CVE-2026-98383
  • CVE-2026-98381
  • CVE-2026-98380
  • CVE-2026-98379
  • CVE-2026-98374
  • CVE-2026-98370
  • CVE-2026-98369
  • CVE-2026-98367
  • CVE-2026-98363
  • CVE-2026-98362
  • CVE-2026-98358
  • CVE-2026-98357
  • CVE-2026-98354

    • Frequently Asked Questions

    What is USN-8961-1?
    It is Ubuntu's kernel security update fixing over a thousand backported CVEs, led by Duoming Zhou's AX.25 amateur-radio race-condition findings (CVE-2022-1205 and related) that cause use-after-free crashes.
    Who is affected?
    Ubuntu systems on the affected kernel flavors — the AX.25 flaws need the amateur-radio module present, but the broader batch covers all flavors' backports.
    How do I apply the fix?
    Run sudo apt update && sudo apt upgrade and reboot into the new kernel; verify with uname -r reporting the updated build.
    Why do the same CVEs appear in several kernel notices?
    Ubuntu maintains one kernel codebase across many flavors (generic, AWS, Azure, Tegra, raspi...) — each flavor ships its own notice carrying the same fixes, which is why the counts repeat.

    References

    Security Advisories

    Related Advisories

    Tornado Regression — Ubuntu Security Update (USN-8952-3)

    2026-11-11

    Linux Kernel (Azure CVM) Vulnerabilities — Ubuntu Security Update (USN-9039-1)

    2026-11-11

    Linux Kernel (Low Latency NVIDIA) Vulnerabilities — Ubuntu Security Update (USN-9040-1)

    2026-11-11

    Check your system for vulnerabilities

    Select your product and operating system to see the exact fix commands that apply to you.

    Check Your System