Linux Kernel Vulnerabilities — Ubuntu Security Update (USN-8968-1)
USN-8968-1 updates Ubuntu kernels fixing CVE-2021-3640 — a Bluetooth subsystem use-after-free allowing a local attacker to crash the system or possibly execute arbitrary code — and CVE-2022-49058. Update and reboot: sudo apt update && sudo apt upgrade, then restart into the new kernel.
SharedLicense lisansı altında bunun anlamı
A Bluetooth use-after-free is reachable by any nearby attacker pairing or connecting over BT — on servers it is mostly a local surface, on laptops and workstations with Bluetooth radios it is remote-adjacent.
-
USN-8968-1
Publication date
3 November 2026
Overview
Several security issues were fixed in the Linux kernel.
Releases
Packages
- linux – Linux kernel
Details
It was discovered that the Bluetooth subsystem in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2021-3640)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- File systems infrastructure
It was discovered that the Bluetooth subsystem in the Linux kernel
contained a use-after-free vulnerability. A local attacker could use this
to cause a denial of service (system crash) or possibly execute arbitrary
code. (CVE-2021-3640)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- File systems infrastructure
Update instructions
After a standard system update you need to reboot your computer to make
all the necessary changes.
Learn more about how to get the fixes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
The problem can be corrected by updating your system to the following package versions:
| Ubuntu Release | Package Version | ||
|---|---|---|---|
|
14.04
LTS trusty |
linux-image-3.13.0-219-generic –
3.13.0-219.270 Ubuntu Pro |
||
|
linux-image-3.13.0-219-lowlatency –
3.13.0-219.270 Ubuntu Pro |
|||
|
linux-image-generic –
3.13.0.219.229 Ubuntu Pro |
|||
|
linux-image-generic-lts-trusty –
3.13.0.219.229 Ubuntu Pro |
|||
|
linux-image-lowlatency –
3.13.0.219.229 Ubuntu Pro |
|||
|
linux-image-server –
3.13.0.219.229 Ubuntu Pro |
|||
|
linux-image-virtual –
3.13.0.219.229 Ubuntu Pro |
|||
References
Related notices
Have additional questions?
Sıkça Sorulan Sorular
What is CVE-2021-3640?
Do servers need this update?
How do I apply the fix?
Why is an old CVE arriving now?
Sisteminizi güvenlik açıkları açısından kontrol edin
Size uygun tam düzeltme komutlarını görmek için ürününüzü ve işletim sisteminizi seçin.
Sisteminizi Kontrol Edin