UBUNTU-CVE-2026-43424

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2026-43424

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2026-43424

Upstream

CVE-2026-43424

Downstream

USN (14)

Related

USN (14)

Published

2026-05-08T15:16:00Z

Modified

2026-10-17T13:00:38Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - low

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling The tpg->tpg_nexus pointer in the USB Target driver is dynamically managed and tied to userspace configuration via ConfigFS. It can be NULL if the USB host sends requests before the nexus is fully established or immediately after it is dropped. Currently, functions like bot_submit_command() and the data transfer paths retrieve tv_nexus = tpg->tpg_nexus and immediately dereference tv_nexus->tvn_se_sess without any validation. If a malicious or misconfigured USB host sends a BOT (Bulk-Only Transport) command during this race window, it triggers a NULL pointer dereference, leading to a kernel panic (local DoS). This exposes an inconsistent API usage within the module, as peer functions like usbg_submit_command() and bot_send_bad_response() correctly implement a NULL check for tv_nexus before proceeding. Fix this by bringing consistency to the nexus handling. Add the missing if (!tv_nexus) checks to the vulnerable BOT command and request processing paths, aborting the command gracefully with an error instead of crashing the system.

References

Affected packages

Ubuntu:16.04:LTS

linux-hwe-edge

Package

Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.0-28.30~16.04.1

4.8.0-30.32~16.04.1

4.8.0-32.34~16.04.1

4.8.0-34.36~16.04.1

4.10.0-14.16~16.04.1

4.10.0-19.21~16.04.1

4.10.0-20.22~16.04.1

4.10.0-21.23~16.04.1

4.10.0-22.24~16.04.1

4.10.0-24.28~16.04.1

4.10.0-26.30~16.04.1

4.11.0-13.19~16.04.1

4.11.0-14.20~16.04.1

4.13.0-16.19~16.04.3

4.13.0-17.20~16.04.1

4.13.0-19.22~16.04.1

4.13.0-21.24~16.04.1

4.13.0-25.29~16.04.2

4.15.0-13.14~16.04.1

4.15.0-15.16~16.04.1

4.15.0-20.21~16.04.1

4.15.0-22.24~16.04.1

4.15.0-23.25~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-source-4.15.0",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "message-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "serial-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:18.04:LTS

linux-aws-5.0

Package

Name: linux-aws-5.0
Purl: pkg:deb/ubuntu/linux-aws-5.0?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-1021.24~18.04.1

5.0.0-1022.25~18.04.1

5.0.0-1023.26~18.04.1

5.0.0-1024.27~18.04.1

5.0.0-1025.28

5.0.0-1027.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-aws-headers-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-image-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-5.3

Package

Name: linux-aws-5.3
Purl: pkg:deb/ubuntu/linux-aws-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1016.17~18.04.1

5.3.0-1017.18~18.04.1

5.3.0-1019.21~18.04.1

5.3.0-1023.25~18.04.1

5.3.0-1028.30~18.04.1

5.3.0-1030.32~18.04.1

5.3.0-1032.34~18.04.2

5.3.0-1033.35

5.3.0-1034.36

5.3.0-1035.37

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-image-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.2

4.15.0-1003.3

4.15.0-1004.4

4.15.0-1008.8

4.15.0-1009.9

4.15.0-1012.12

4.15.0-1013.13

4.15.0-1014.14

4.15.0-1018.18

4.15.0-1019.19

4.15.0-1021.21

4.15.0-1022.23

4.15.0-1023.24

4.15.0-1025.26

4.15.0-1028.29

4.15.0-1030.31

4.15.0-1031.32

4.15.0-1032.33

4.15.0-1035.36

4.15.0-1036.38

4.15.0-1037.39

4.18.0-1011.11~18.04.1

4.18.0-1013.13~18.04.1

4.18.0-1014.14~18.04.1

4.18.0-1018.18~18.04.1

4.18.0-1019.19~18.04.1

4.18.0-1020.20~18.04.1

4.18.0-1023.24~18.04.1

4.18.0-1024.25~18.04.1

4.18.0-1025.27~18.04.1

5.*

5.0.0-1014.14~18.04.1

5.0.0-1016.17~18.04.1

5.0.0-1018.19~18.04.1

5.0.0-1020.21~18.04.1

5.0.0-1022.23~18.04.1

5.0.0-1023.24~18.04.1

5.0.0-1025.27~18.04.1

5.0.0-1027.29~18.04.1

5.0.0-1028.30~18.04.1

5.0.0-1029.31~18.04.1

5.0.0-1031.33

5.0.0-1032.34

5.0.0-1035.37

5.0.0-1036.38

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.3

Package

Name: linux-azure-5.3
Purl: pkg:deb/ubuntu/linux-azure-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8~18.04.1

5.3.0-1008.9~18.04.1

5.3.0-1009.10~18.04.1

5.3.0-1010.11~18.04.1

5.3.0-1012.13~18.04.1

5.3.0-1013.14~18.04.1

5.3.0-1016.17~18.04.1

5.3.0-1018.19~18.04.1

5.3.0-1019.20~18.04.1

5.3.0-1020.21~18.04.1

5.3.0-1022.23~18.04.1

5.3.0-1028.29~18.04.1

5.3.0-1031.32~18.04.1

5.3.0-1032.33~18.04.1

5.3.0-1034.35~18.04.1

5.3.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-edge

Package

Name: linux-azure-edge
Purl: pkg:deb/ubuntu/linux-azure-edge?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.18.0-1006.6~18.04.1

4.18.0-1007.7~18.04.1

4.18.0-1008.8~18.04.1

5.*

5.0.0-1012.12~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-edge-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1001.1

4.15.0-1003.3

4.15.0-1005.5

4.15.0-1006.6

4.15.0-1008.8

4.15.0-1009.9

4.15.0-1010.10

4.15.0-1014.14

4.15.0-1015.15

4.15.0-1017.18

4.15.0-1018.19

4.15.0-1019.20

4.15.0-1021.22

4.15.0-1023.24

4.15.0-1024.25

4.15.0-1025.26

4.15.0-1026.27

4.15.0-1027.28

4.15.0-1028.29

4.15.0-1029.31

4.15.0-1030.32

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1036.38

4.15.0-1037.39

4.15.0-1040.42

4.15.0-1042.45

4.15.0-1044.70

5.*

5.0.0-1020.20~18.04.1

5.0.0-1021.21~18.04.1

5.0.0-1025.26~18.04.1

5.0.0-1026.27~18.04.1

5.0.0-1028.29~18.04.1

5.0.0-1029.30~18.04.1

5.0.0-1031.32

5.0.0-1033.34

5.0.0-1034.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-headers-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-tools-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.3

Package

Name: linux-gcp-5.3
Purl: pkg:deb/ubuntu/linux-gcp-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1008.9~18.04.1

5.3.0-1009.10~18.04.1

5.3.0-1010.11~18.04.1

5.3.0-1012.13~18.04.1

5.3.0-1014.15~18.04.1

5.3.0-1016.17~18.04.1

5.3.0-1017.18~18.04.1

5.3.0-1018.19~18.04.1

5.3.0-1020.22~18.04.1

5.3.0-1026.28~18.04.1

5.3.0-1029.31~18.04.1

5.3.0-1030.32~18.04.1

5.3.0-1032.34~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gke-4.15

Package

Name: linux-gke-4.15
Purl: pkg:deb/ubuntu/linux-gke-4.15?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1030.32

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1036.38

4.15.0-1037.39

4.15.0-1040.42

4.15.0-1041.43

4.15.0-1042.44

4.15.0-1044.46

4.15.0-1045.48

4.15.0-1046.49

4.15.0-1048.51

4.15.0-1049.52

4.15.0-1050.53

4.15.0-1052.55

4.15.0-1055.58

4.15.0-1057.60

4.15.0-1058.61

4.15.0-1059.62

4.15.0-1063.66

4.15.0-1064.67

4.15.0-1066.69

4.15.0-1067.70

4.15.0-1069.72

4.15.0-1070.73

4.15.0-1072.76

4.15.0-1073.78

4.15.0-1074.79

4.15.0-1076.81

4.15.0-1077.82

4.15.0-1078.83

4.15.0-1079.84

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gke-5.4

Package

Name: linux-gke-5.4
Purl: pkg:deb/ubuntu/linux-gke-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1025.25~18.04.1

5.4.0-1027.28~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1032.34~18.04.1

5.4.0-1033.35~18.04.1

5.4.0-1035.37~18.04.1

5.4.0-1036.38~18.04.1

5.4.0-1037.39~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1040.42~18.04.1

5.4.0-1042.44~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1044.46~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1049.52~18.04.1

5.4.0-1051.54~18.04.1

5.4.0-1052.55~18.04.1

5.4.0-1053.56~18.04.1

5.4.0-1054.57~18.04.1

5.4.0-1055.58~18.04.1

5.4.0-1056.59~18.04.1

5.4.0-1057.60~18.04.1

5.4.0-1059.62~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1062.65~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1066.69~18.04.1

5.4.0-1067.70~18.04.1

5.4.0-1068.71~18.04.1

5.4.0-1071.76~18.04.3

5.4.0-1072.77~18.04.1

5.4.0-1074.79~18.04.1

5.4.0-1076.82~18.04.1

5.4.0-1078.84~18.04.1

5.4.0-1080.86~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gkeop-5.4

Package

Name: linux-gkeop-5.4
Purl: pkg:deb/ubuntu/linux-gkeop-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1001.1

5.4.0-1003.3

5.4.0-1004.5

5.4.0-1005.6

5.4.0-1007.8~18.04.1

5.4.0-1008.9~18.04.1

5.4.0-1009.10~18.04.1

5.4.0-1010.11~18.04.1

5.4.0-1011.12~18.04.2

5.4.0-1012.13~18.04.1

5.4.0-1013.14~18.04.1

5.4.0-1014.15~18.04.1

5.4.0-1015.16~18.04.1

5.4.0-1016.17~18.04.1

5.4.0-1018.19~18.04.1

5.4.0-1021.22~18.04.1

5.4.0-1022.23~18.04.1

5.4.0-1023.24~18.04.1

5.4.0-1024.25~18.04.1

5.4.0-1025.26~18.04.1

5.4.0-1026.27~18.04.1

5.4.0-1027.28~18.04.1

5.4.0-1029.30~18.04.2

5.4.0-1031.32~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1033.34~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1036.37~18.04.1

5.4.0-1037.38~18.04.1

5.4.0-1038.39~18.04.1

5.4.0-1039.40~18.04.1

5.4.0-1040.41~18.04.1

5.4.0-1043.44~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1048.51~18.04.1

5.4.0-1049.52~18.04.1

5.4.0-1051.54~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-source-5.4.0",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe

Package

Name: linux-hwe
Purl: pkg:deb/ubuntu/linux-hwe?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.18.0-13.14~18.04.1

4.18.0-14.15~18.04.1

4.18.0-15.16~18.04.1

4.18.0-16.17~18.04.1

4.18.0-17.18~18.04.1

4.18.0-18.19~18.04.1

4.18.0-20.21~18.04.1

4.18.0-21.22~18.04.1

4.18.0-22.23~18.04.1

4.18.0-24.25~18.04.1

4.18.0-25.26~18.04.1

5.*

5.0.0-23.24~18.04.1

5.0.0-25.26~18.04.1

5.0.0-27.28~18.04.1

5.0.0-29.31~18.04.1

5.0.0-31.33~18.04.1

5.0.0-32.34~18.04.2

5.0.0-35.38~18.04.1

5.0.0-36.39~18.04.1

5.0.0-37.40~18.04.1

5.3.0-26.28~18.04.1

5.3.0-28.30~18.04.1

5.3.0-40.32~18.04.1

5.3.0-42.34~18.04.1

5.3.0-45.37~18.04.1

5.3.0-46.38~18.04.1

5.3.0-51.44~18.04.2

5.3.0-53.47~18.04.1

5.3.0-59.53~18.04.1

5.3.0-61.55~18.04.1

5.3.0-62.56~18.04.1

5.3.0-64.58~18.04.1

5.3.0-65.59

5.3.0-66.60

5.3.0-67.61

5.3.0-68.63

5.3.0-69.65

5.3.0-70.66

5.3.0-72.68

5.3.0-73.69

5.3.0-74.70

5.3.0-75.71

5.3.0-76.72

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fat-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "input-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "kernel-image-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-headers-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-udebs-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "md-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "message-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "parport-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "plip-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "sata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "serial-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-edge

Package

Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-15.16~18.04.1

5.0.0-16.17~18.04.1

5.0.0-17.18~18.04.1

5.0.0-19.20~18.04.1

5.0.0-20.21~18.04.1

5.3.0-19.20~18.04.2

5.3.0-22.24~18.04.1

5.3.0-23.25~18.04.1

5.3.0-23.25~18.04.2

5.3.0-24.26~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "message-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "serial-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem

Package

Name: linux-oem
Purl: pkg:deb/ubuntu/linux-oem?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.3

4.15.0-1004.5

4.15.0-1006.9

4.15.0-1008.11

4.15.0-1009.12

4.15.0-1012.15

4.15.0-1013.16

4.15.0-1015.18

4.15.0-1017.20

4.15.0-1018.21

4.15.0-1021.24

4.15.0-1024.29

4.15.0-1026.31

4.15.0-1028.33

4.15.0-1030.35

4.15.0-1033.38

4.15.0-1034.39

4.15.0-1035.40

4.15.0-1036.41

4.15.0-1038.43

4.15.0-1039.44

4.15.0-1043.48

4.15.0-1045.50

4.15.0-1050.57

4.15.0-1056.65

4.15.0-1057.66

4.15.0-1059.68

4.15.0-1063.72

4.15.0-1064.73

4.15.0-1065.75

4.15.0-1066.76

4.15.0-1067.77

4.15.0-1069.79

4.15.0-1073.83

4.15.0-1076.86

4.15.0-1079.89

4.15.0-1080.90

4.15.0-1081.91

4.15.0-1087.97

4.15.0-1090.100

4.15.0-1091.101

4.15.0-1093.103

4.15.0-1094.104

4.15.0-1096.106

4.15.0-1097.107

4.15.0-1099.109

4.15.0-1100.110

4.15.0-1101.112

4.15.0-1102.113

4.15.0-1103.114

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fat-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "input-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "irda-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "kernel-image-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-headers-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-tools-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-udebs-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "md-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "message-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "parport-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "plip-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "sata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "serial-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.0

Package

Name: linux-oracle-5.0
Purl: pkg:deb/ubuntu/linux-oracle-5.0?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-1007.12~18.04.1

5.0.0-1008.13~18.04.1

5.0.0-1009.14~18.04.1

5.0.0-1010.15~18.04.1

5.0.0-1011.16

5.0.0-1013.18

5.0.0-1014.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.3

Package

Name: linux-oracle-5.3
Purl: pkg:deb/ubuntu/linux-oracle-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1011.12~18.04.1

5.3.0-1013.14~18.04.1

5.3.0-1014.15~18.04.1

5.3.0-1016.18~18.04.1

5.3.0-1018.20~18.04.1

5.3.0-1024.26~18.04.1

5.3.0-1027.29~18.04.1

5.3.0-1028.30~18.04.1

5.3.0-1030.32~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:20.04:LTS

linux-aws-5.11

Package

Name: linux-aws-5.11
Purl: pkg:deb/ubuntu/linux-aws-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1009.9~20.04.2

5.11.0-1014.15~20.04.1

5.11.0-1016.17~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.2

5.11.0-1021.22~20.04.2

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-5.13

Package

Name: linux-aws-5.13
Purl: pkg:deb/ubuntu/linux-aws-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9~20.04.2

5.13.0-1011.12~20.04.1

5.13.0-1012.13~20.04.1

5.13.0-1014.15~20.04.1

5.13.0-1017.19~20.04.1

5.13.0-1019.21~20.04.1

5.13.0-1021.23~20.04.2

5.13.0-1022.24~20.04.1

5.13.0-1023.25~20.04.1

5.13.0-1025.27~20.04.1

5.13.0-1028.31~20.04.1

5.13.0-1029.32~20.04.1

5.13.0-1031.35~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-5.8

Package

Name: linux-aws-5.8
Purl: pkg:deb/ubuntu/linux-aws-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1035.37~20.04.1

5.8.0-1038.40~20.04.1

5.8.0-1041.43~20.04.1

5.8.0-1042.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.11

Package

Name: linux-azure-5.11
Purl: pkg:deb/ubuntu/linux-azure-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1007.7~20.04.2

5.11.0-1012.13~20.04.1

5.11.0-1013.14~20.04.1

5.11.0-1015.16~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.13

Package

Name: linux-azure-5.13
Purl: pkg:deb/ubuntu/linux-azure-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1009.10~20.04.2

5.13.0-1012.14~20.04.1

5.13.0-1013.15~20.04.1

5.13.0-1014.16~20.04.1

5.13.0-1017.19~20.04.1

5.13.0-1021.24~20.04.1

5.13.0-1022.26~20.04.1

5.13.0-1023.27~20.04.1

5.13.0-1025.29~20.04.1

5.13.0-1028.33~20.04.1

5.13.0-1029.34~20.04.1

5.13.0-1031.37~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.8

Package

Name: linux-azure-5.8
Purl: pkg:deb/ubuntu/linux-azure-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1033.35~20.04.1

5.8.0-1036.38~20.04.1

5.8.0-1039.42~20.04.1

5.8.0-1040.43~20.04.1

5.8.0-1041.44~20.04.1

5.8.0-1042.45~20.04.1

5.8.0-1043.46~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1063.66+cvm2.2

5.4.0-1063.66+cvm3.2

5.4.0-1064.67+cvm1.1

5.4.0-1065.68+cvm2.1

5.4.0-1067.70+cvm1.1

5.4.0-1068.71+cvm1.1

5.4.0-1069.72+cvm1.1

5.4.0-1070.73+cvm1.1

5.4.0-1072.75+cvm1.1

5.4.0-1073.76+cvm1.1

5.4.0-1074.77+cvm1.1

5.4.0-1076.79+cvm1.1

5.4.0-1078.81+cvm1.1

5.4.0-1080.83+cvm1.1

5.4.0-1083.87+cvm1.1

5.4.0-1085.90+cvm1.1

5.4.0-1085.90+cvm2.1

5.4.0-1086.91+cvm1.1

5.4.0-1089.94+cvm1.2

5.4.0-1090.95+cvm1.1

5.4.0-1091.96+cvm1.1

5.4.0-1092.97+cvm1.1

5.4.0-1095.101+cvm1.1

5.4.0-1098.104+cvm1.1

5.4.0-1100.106+cvm1.1

5.4.0-1103.109+cvm1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1103-azure-fde",
            "binary_version":  "5.4.0-1103.109+cvm1.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.11

Package

Name: linux-gcp-5.11
Purl: pkg:deb/ubuntu/linux-gcp-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1009.10~20.04.1

5.11.0-1014.16~20.04.1

5.11.0-1017.19~20.04.1

5.11.0-1018.20~20.04.2

5.11.0-1020.22~20.04.1

5.11.0-1021.23~20.04.1

5.11.0-1022.24~20.04.1

5.11.0-1023.25~20.04.1

5.11.0-1024.26~20.04.1

5.11.0-1026.29~20.04.1

5.11.0-1028.32~20.04.1

5.11.0-1029.33~20.04.3

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.13

Package

Name: linux-gcp-5.13
Purl: pkg:deb/ubuntu/linux-gcp-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9~20.04.3

5.13.0-1012.15~20.04.1

5.13.0-1013.16~20.04.1

5.13.0-1015.18~20.04.1

5.13.0-1019.23~20.04.1

5.13.0-1021.25~20.04.1

5.13.0-1023.28~20.04.1

5.13.0-1024.29~20.04.1

5.13.0-1025.30~20.04.1

5.13.0-1027.32~20.04.1

5.13.0-1030.36~20.04.1

5.13.0-1031.37~20.04.1

5.13.0-1033.40~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.8

Package

Name: linux-gcp-5.8
Purl: pkg:deb/ubuntu/linux-gcp-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1032.34~20.04.1

5.8.0-1035.37~20.04.1

5.8.0-1038.40~20.04.1

5.8.0-1039.41

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1033.35

5.4.0-1035.37

5.4.0-1036.38

5.4.0-1037.39

5.4.0-1039.41

5.4.0-1041.43

5.4.0-1042.44

5.4.0-1043.45

5.4.0-1044.46

5.4.0-1046.48

5.4.0-1049.52

5.4.0-1051.54

5.4.0-1052.55

5.4.0-1053.56

5.4.0-1054.57

5.4.0-1055.58

5.4.0-1056.59

5.4.0-1057.60

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1065.68

5.4.0-1066.69

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1071.76

5.4.0-1072.77

5.4.0-1074.79

5.4.0-1076.82

5.4.0-1078.84

5.4.0-1080.86

5.4.0-1081.87

5.4.0-1083.89

5.4.0-1084.90

5.4.0-1086.93

5.4.0-1087.94

5.4.0-1090.97

5.4.0-1091.98

5.4.0-1094.101

5.4.0-1095.102

5.4.0-1096.103

5.4.0-1097.104

5.4.0-1098.105

5.4.0-1099.106

5.4.0-1100.107

5.4.0-1101.108

5.4.0-1102.109

5.4.0-1103.110

5.4.0-1104.111

5.4.0-1105.112

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-gke-headers-5.4.0-1105",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-gke-tools-5.4.0-1105",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gke-5.15

Package

Name: linux-gke-5.15
Purl: pkg:deb/ubuntu/linux-gke-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1011.14~20.04.1

5.15.0-1014.17~20.04.1

5.15.0-1015.18~20.04.1

5.15.0-1016.19~20.04.1

5.15.0-1019.23~20.04.1

5.15.0-1020.25~20.04.1

5.15.0-1023.28~20.04.2

5.15.0-1027.32~20.04.1

5.15.0-1028.33~20.04.1

5.15.0-1029.34~20.04.1

5.15.0-1031.36~20.04.1

5.15.0-1032.37~20.04.1

5.15.0-1033.38~20.04.1

5.15.0-1034.39~20.04.1

5.15.0-1036.41~20.04.1

5.15.0-1037.42~20.04.1

5.15.0-1038.43~20.04.1

5.15.0-1039.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-gke-5.15-headers-5.15.0-1039",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-gke-5.15-tools-5.15.0-1039",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1008.9

5.4.0-1009.10

5.4.0-1010.11

5.4.0-1011.12

5.4.0-1012.13

5.4.0-1013.14

5.4.0-1014.15

5.4.0-1015.16

5.4.0-1016.17

5.4.0-1018.19

5.4.0-1021.22

5.4.0-1022.23

5.4.0-1023.24

5.4.0-1024.25

5.4.0-1025.26

5.4.0-1026.27

5.4.0-1027.28

5.4.0-1029.30

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1033.34

5.4.0-1034.35

5.4.0-1036.37

5.4.0-1037.38

5.4.0-1038.39

5.4.0-1039.40

5.4.0-1040.41

5.4.0-1043.44

5.4.0-1046.48

5.4.0-1048.51

5.4.0-1049.52

5.4.0-1051.54

5.4.0-1052.55

5.4.0-1053.56

5.4.0-1054.57

5.4.0-1056.60

5.4.0-1057.61

5.4.0-1060.64

5.4.0-1061.65

5.4.0-1062.66

5.4.0-1064.68

5.4.0-1065.69

5.4.0-1066.70

5.4.0-1067.71

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1070.74

5.4.0-1071.75

5.4.0-1072.76

5.4.0-1073.77

5.4.0-1074.78

5.4.0-1075.79

5.4.0-1076.80

5.4.0-1077.81

5.4.0-1078.82

5.4.0-1079.83

5.4.0-1080.84

5.4.0-1081.85

5.4.0-1083.87

5.4.0-1084.88

5.4.0-1085.89

5.4.0-1086.90

5.4.0-1087.91

5.4.0-1088.92

5.4.0-1089.93

5.4.0-1090.94

5.4.0-1091.95

5.4.0-1092.96

5.4.0-1093.97

5.4.0-1094.98

5.4.0-1095.99

5.4.0-1096.100

5.4.0-1097.101

5.4.0-1098.102

5.4.0-1099.103

5.4.0-1100.104

5.4.0-1101.105

5.4.0-1102.106

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-headers-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-source-5.4.0",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-tools-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gkeop-5.15

Package

Name: linux-gkeop-5.15
Purl: pkg:deb/ubuntu/linux-gkeop-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1003.5~20.04.2

5.15.0-1005.7~20.04.1

5.15.0-1007.10~20.04.1

5.15.0-1008.12~20.04.1

5.15.0-1011.15~20.04.2

5.15.0-1012.16~20.04.1

5.15.0-1013.17~20.04.1

5.15.0-1015.19~20.04.1

5.15.0-1016.21~20.04.1

5.15.0-1017.22~20.04.1

5.15.0-1018.23~20.04.1

5.15.0-1019.24~20.04.1

5.15.0-1020.25~20.04.1

5.15.0-1021.26~20.04.1

5.15.0-1022.27~20.04.1

5.15.0-1023.28~20.04.1

5.15.0-1024.29~20.04.1

5.15.0-1025.30~20.04.1

5.15.0-1026.31~20.04.1

5.15.0-1027.32~20.04.1

5.15.0-1028.33~20.04.1

5.15.0-1030.35~20.04.1

5.15.0-1031.37~20.04.1

5.15.0-1032.38~20.04.1

5.15.0-1033.39~20.04.1

5.15.0-1034.40~20.04.1

5.15.0-1035.41~20.04.1

5.15.0-1036.42~20.04.1

5.15.0-1037.43~20.04.1

5.15.0-1038.44~20.04.1

5.15.0-1039.45~20.04.1

5.15.0-1040.46~20.04.1

5.15.0-1043.50~20.04.1

5.15.0-1044.51~20.04.1

5.15.0-1045.52~20.04.1

5.15.0-1046.53~20.04.1

5.15.0-1047.54~20.04.1

5.15.0-1048.55~20.04.1

5.15.0-1049.56~20.04.1

5.15.0-1050.57~20.04.1

5.15.0-1051.58~20.04.1

5.15.0-1052.59~20.04.1

5.15.0-1053.60~20.04.1

5.15.0-1054.61~20.04.1

5.15.0-1055.62~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-headers-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-tools-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-5.11

Package

Name: linux-hwe-5.11
Purl: pkg:deb/ubuntu/linux-hwe-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-22.23~20.04.1

5.11.0-25.27~20.04.1

5.11.0-27.29~20.04.1

5.11.0-34.36~20.04.1

5.11.0-36.40~20.04.1

5.11.0-37.41~20.04.2

5.11.0-38.42~20.04.1

5.11.0-40.44~20.04.2

5.11.0-41.45~20.04.1

5.11.0-43.47~20.04.2

5.11.0-44.48~20.04.2

5.11.0-46.51~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-source-5.11.0",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-host",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-5.13

Package

Name: linux-hwe-5.13
Purl: pkg:deb/ubuntu/linux-hwe-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-21.21~20.04.1

5.13.0-22.22~20.04.1

5.13.0-23.23~20.04.2

5.13.0-25.26~20.04.1

5.13.0-27.29~20.04.1

5.13.0-28.31~20.04.1

5.13.0-30.33~20.04.1

5.13.0-35.40~20.04.1

5.13.0-37.42~20.04.1

5.13.0-39.44~20.04.1

5.13.0-40.45~20.04.1

5.13.0-41.46~20.04.1

5.13.0-44.49~20.04.1

5.13.0-48.54~20.04.1

5.13.0-51.58~20.04.1

5.13.0-52.59~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-source-5.13.0",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-host",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-5.8

Package

Name: linux-hwe-5.8
Purl: pkg:deb/ubuntu/linux-hwe-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-23.24~20.04.1

5.8.0-25.26~20.04.1

5.8.0-28.30~20.04.1

5.8.0-29.31~20.04.1

5.8.0-31.33~20.04.1

5.8.0-33.36~20.04.1

5.8.0-34.37~20.04.2

5.8.0-36.40~20.04.1

5.8.0-38.43~20.04.1

5.8.0-40.45~20.04.1

5.8.0-41.46~20.04.1

5.8.0-43.49~20.04.1

5.8.0-44.50~20.04.1

5.8.0-45.51~20.04.1

5.8.0-48.54~20.04.1

5.8.0-49.55~20.04.1

5.8.0-50.56~20.04.1

5.8.0-53.60~20.04.1

5.8.0-55.62~20.04.1

5.8.0-59.66~20.04.1

5.8.0-63.71~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-source-5.8.0",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-host",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-intel-5.13

Package

Name: linux-intel-5.13
Purl: pkg:deb/ubuntu/linux-intel-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1007.7

5.13.0-1008.8

5.13.0-1009.9

5.13.0-1010.10

5.13.0-1011.11

5.13.0-1014.15

5.13.0-1017.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-source-5.13.0",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-host",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-5.10

Package

Name: linux-oem-5.10
Purl: pkg:deb/ubuntu/linux-oem-5.10?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.10.0-1008.9

5.10.0-1011.12

5.10.0-1013.14

5.10.0-1014.15

5.10.0-1016.17

5.10.0-1017.18

5.10.0-1019.20

5.10.0-1021.22

5.10.0-1022.23

5.10.0-1023.24

5.10.0-1025.26

5.10.0-1026.27

5.10.0-1029.30

5.10.0-1032.33

5.10.0-1033.34

5.10.0-1034.35

5.10.0-1038.40

5.10.0-1044.46

5.10.0-1045.47

5.10.0-1049.51

5.10.0-1050.52

5.10.0-1051.53

5.10.0-1052.54

5.10.0-1053.55

5.10.0-1055.58

5.10.0-1057.61

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-headers-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-modules-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-host",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-tools-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-5.13

Package

Name: linux-oem-5.13
Purl: pkg:deb/ubuntu/linux-oem-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1009.10

5.13.0-1010.11

5.13.0-1012.16

5.13.0-1014.18

5.13.0-1017.21

5.13.0-1019.23

5.13.0-1020.24

5.13.0-1021.25

5.13.0-1022.26

5.13.0-1026.32

5.13.0-1028.35

5.13.0-1029.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-host",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-5.14

Package

Name: linux-oem-5.14
Purl: pkg:deb/ubuntu/linux-oem-5.14?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.14.0-1004.4

5.14.0-1005.5

5.14.0-1007.7

5.14.0-1008.8

5.14.0-1010.10

5.14.0-1011.11

5.14.0-1013.13

5.14.0-1018.19

5.14.0-1020.22

5.14.0-1022.24

5.14.0-1024.26

5.14.0-1027.30

5.14.0-1029.32

5.14.0-1031.34

5.14.0-1032.35

5.14.0-1033.36

5.14.0-1034.37

5.14.0-1036.40

5.14.0-1038.42

5.14.0-1042.47

5.14.0-1044.49

5.14.0-1045.51

5.14.0-1046.53

5.14.0-1047.54

5.14.0-1048.55

5.14.0-1049.56

5.14.0-1050.57

5.14.0-1051.58

5.14.0-1052.59

5.14.0-1054.61

5.14.0-1055.62

5.14.0-1056.63

5.14.0-1057.64

5.14.0-1058.66

5.14.0-1059.67

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-headers-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-image-unsigned-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-headers-5.14.0-1059",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-5.14.0-1059",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-host",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-tools-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-5.6

Package

Name: linux-oem-5.6
Purl: pkg:deb/ubuntu/linux-oem-5.6?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.6.0-1007.7

5.6.0-1008.8

5.6.0-1010.10

5.6.0-1011.11

5.6.0-1013.13

5.6.0-1017.17

5.6.0-1018.18

5.6.0-1020.20

5.6.0-1021.21

5.6.0-1023.23

5.6.0-1026.26

5.6.0-1027.27

5.6.0-1028.28

5.6.0-1031.32

5.6.0-1032.33

5.6.0-1033.35

5.6.0-1034.36

5.6.0-1035.37

5.6.0-1036.39

5.6.0-1039.43

5.6.0-1042.46

5.6.0-1047.51

5.6.0-1048.52

5.6.0-1050.54

5.6.0-1052.56

5.6.0-1053.57

5.6.0-1054.58

5.6.0-1055.59

5.6.0-1056.60

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-headers-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-modules-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-host",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-tools-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.11

Package

Name: linux-oracle-5.11
Purl: pkg:deb/ubuntu/linux-oracle-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1008.8~20.04.1

5.11.0-1013.14~20.04.1

5.11.0-1016.17~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.13

Package

Name: linux-oracle-5.13
Purl: pkg:deb/ubuntu/linux-oracle-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1011.13~20.04.2

5.13.0-1015.19~20.04.1

5.13.0-1016.20~20.04.1

5.13.0-1018.22~20.04.1

5.13.0-1021.26~20.04.1

5.13.0-1025.30~20.04.1

5.13.0-1027.32~20.04.1

5.13.0-1028.33~20.04.1

5.13.0-1030.35~20.04.1

5.13.0-1033.39~20.04.1

5.13.0-1034.40~20.04.1

5.13.0-1036.43~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.8

Package

Name: linux-oracle-5.8
Purl: pkg:deb/ubuntu/linux-oracle-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1031.32~20.04.2

5.8.0-1033.34~20.04.1

5.8.0-1034.35~20.04.2

5.8.0-1037.38~20.04.1

5.8.0-1038.39~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi2

Package

Name: linux-raspi2
Purl: pkg:deb/ubuntu/linux-raspi2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8

5.3.0-1014.16

5.3.0-1015.17

5.3.0-1017.19

5.4.0-1004.4

5.4.0-1006.6

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-image-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-headers-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-tools-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-24.28

5.4.0-26.30

5.4.0-27.31

5.4.0-28.32

5.4.0-30.34

5.4.0-31.35

5.4.0-33.37

5.4.0-34.38

5.4.0-36.41

5.4.0-37.42

5.4.0-39.44

5.4.0-40.45

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fat-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "input-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "kernel-image-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-headers-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-image-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-headers-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-tools-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-tools-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "md-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "message-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "parport-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "pata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "plip-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "sata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-5.11

Package

Name: linux-riscv-5.11
Purl: pkg:deb/ubuntu/linux-riscv-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1015.16~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1018.19~20.04.2

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1024.25~20.04.1

5.11.0-1026.28~20.04.1

5.11.0-1028.31~20.04.1

5.11.0-1029.32~20.04.1

5.11.0-1030.34

5.11.0-1031.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-image-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-5.8

Package

Name: linux-riscv-5.8
Purl: pkg:deb/ubuntu/linux-riscv-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-14.16~20.04.1

5.8.0-14.16~20.04.3

5.8.0-16.18~20.04.1

5.8.0-17.19~20.04.1

5.8.0-18.20~20.04.1

5.8.0-20.22~20.04.1

5.8.0-22.24~20.04.1

5.8.0-25.27~20.04.1

5.8.0-26.28~20.04.1

5.8.0-29.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:22.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-19.19

5.15.0-17.17

5.15.0-18.18

5.15.0-22.22

5.15.0-23.23

5.15.0-25.25

5.15.0-27.28

5.15.0-30.31

5.15.0-33.34

5.15.0-35.36

5.15.0-37.39

5.15.0-39.42

5.15.0-40.43

5.15.0-41.44

5.15.0-43.46

5.15.0-46.49

5.15.0-47.51

5.15.0-48.54

5.15.0-50.56

5.15.0-52.58

5.15.0-53.59

5.15.0-56.62

5.15.0-57.63

5.15.0-58.64

5.15.0-60.66

5.15.0-67.74

5.15.0-69.76

5.15.0-70.77

5.15.0-71.78

5.15.0-72.79

5.15.0-73.80

5.15.0-75.82

5.15.0-76.83

5.15.0-78.85

5.15.0-79.86

5.15.0-82.91

5.15.0-83.92

5.15.0-84.93

5.15.0-86.96

5.15.0-87.97

5.15.0-88.98

5.15.0-89.99

5.15.0-91.101

5.15.0-92.102

5.15.0-94.104

5.15.0-97.107

5.15.0-100.110

5.15.0-101.111

5.15.0-102.112

5.15.0-105.115

5.15.0-106.116

5.15.0-107.117

5.15.0-112.122

5.15.0-113.123

5.15.0-116.126

5.15.0-117.127

5.15.0-118.128

5.15.0-119.129

5.15.0-121.131

5.15.0-122.132

5.15.0-124.134

5.15.0-125.135

5.15.0-126.136

5.15.0-127.137

5.15.0-128.138

5.15.0-130.140

5.15.0-131.141

5.15.0-133.144

5.15.0-134.145

5.15.0-135.146

5.15.0-136.147

5.15.0-138.148

5.15.0-139.149

5.15.0-140.150

5.15.0-141.151

5.15.0-142.152

5.15.0-143.153

5.15.0-144.157

5.15.0-151.161

5.15.0-152.162

5.15.0-153.163

5.15.0-156.166

5.15.0-157.167

5.15.0-160.170

5.15.0-161.171

5.15.0-163.173

5.15.0-164.174

5.15.0-168.178

5.15.0-170.180

5.15.0-171.181

5.15.0-173.183

5.15.0-174.184

5.15.0-176.186

5.15.0-177.187

5.15.0-179.189

5.15.0-181.191

5.15.0-185.195

5.15.0-186.196

5.15.0-187.197

5.15.0-190.200

5.15.0-191.201

5.15.0-194.204

5.15.0-198.208

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-source-5.15.0",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "5.15.0-198.208"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-allwinner-5.19

Package

Name: linux-allwinner-5.19
Purl: pkg:deb/ubuntu/linux-allwinner-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1007.7~22.04.1

5.19.0-1009.9~22.04.1

5.19.0-1010.10~22.04.1

5.19.0-1011.11~22.04.1

5.19.0-1012.12~22.04.1

5.19.0-1013.13~22.04.1

5.19.0-1014.14~22.04.1

5.19.0-1015.15~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-allwinner-5.19-headers-5.19.0-1015",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-allwinner-5.19-tools-5.19.0-1015",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1005.6

5.15.0-1002.4

5.15.0-1003.5

5.15.0-1004.6

5.15.0-1005.7

5.15.0-1008.10

5.15.0-1009.11

5.15.0-1011.14

5.15.0-1013.17

5.15.0-1014.18

5.15.0-1015.19

5.15.0-1017.21

5.15.0-1019.23

5.15.0-1020.24

5.15.0-1021.25

5.15.0-1022.26

5.15.0-1023.27

5.15.0-1026.30

5.15.0-1027.31

5.15.0-1028.32

5.15.0-1030.34

5.15.0-1031.35

5.15.0-1033.37

5.15.0-1034.38

5.15.0-1035.39

5.15.0-1036.40

5.15.0-1037.41

5.15.0-1038.43

5.15.0-1039.44

5.15.0-1040.45

5.15.0-1042.47

5.15.0-1043.48

5.15.0-1044.49

5.15.0-1045.50

5.15.0-1047.52

5.15.0-1048.53

5.15.0-1049.54

5.15.0-1050.55

5.15.0-1051.56

5.15.0-1052.57

5.15.0-1053.58

5.15.0-1055.60

5.15.0-1056.61

5.15.0-1057.63

5.15.0-1060.66

5.15.0-1061.67

5.15.0-1062.68

5.15.0-1063.69

5.15.0-1064.70

5.15.0-1065.71

5.15.0-1066.72

5.15.0-1067.73

5.15.0-1068.74

5.15.0-1069.75

5.15.0-1070.76

5.15.0-1071.77

5.15.0-1072.78

5.15.0-1073.79

5.15.0-1076.83

5.15.0-1078.85

5.15.0-1079.86

5.15.0-1080.87

5.15.0-1081.88

5.15.0-1082.89

5.15.0-1083.90

5.15.0-1084.91

5.15.0-1085.92

5.15.0-1086.93

5.15.0-1087.94

5.15.0-1088.95

5.15.0-1089.96

5.15.0-1090.97

5.15.0-1091.98

5.15.0-1092.99

5.15.0-1093.100

5.15.0-1095.102

5.15.0-1096.103

5.15.0-1097.104

5.15.0-1098.105

5.15.0-1099.106

5.15.0-1100.107

5.15.0-1101.108

5.15.0-1103.110

5.15.0-1104.111

5.15.0-1105.112

5.15.0-1106.113

5.15.0-1108.115

5.15.0-1109.116

5.15.0-1111.118

5.15.0-1112.119

5.15.0-1113.120

5.15.0-1114.121

5.15.0-1115.122

5.15.0-1116.123

5.15.0-1117.124

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-aws-headers-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-aws-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-5.19

Package

Name: linux-aws-5.19
Purl: pkg:deb/ubuntu/linux-aws-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1019.20~22.04.1

5.19.0-1020.21~22.04.1

5.19.0-1022.23~22.04.1

5.19.0-1023.24~22.04.1

5.19.0-1024.25~22.04.1

5.19.0-1025.26~22.04.1

5.19.0-1026.27~22.04.1

5.19.0-1027.28~22.04.1

5.19.0-1028.29~22.04.1

5.19.0-1029.30~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.19-cloud-tools-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-aws-5.19-headers-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-aws-5.19-tools-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-6.2

Package

Name: linux-aws-6.2
Purl: pkg:deb/ubuntu/linux-aws-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1005.5~22.04.1

6.2.0-1006.6~22.04.1

6.2.0-1007.7~22.04.1

6.2.0-1008.8~22.04.1

6.2.0-1009.9~22.04.3

6.2.0-1010.10~22.04.1

6.2.0-1011.11~22.04.1

6.2.0-1012.12~22.04.1

6.2.0-1013.13~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1015.15~22.04.1

6.2.0-1016.16~22.04.1

6.2.0-1017.17~22.04.1

6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.2-cloud-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.2-headers-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.2-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-6.5

Package

Name: linux-aws-6.5
Purl: pkg:deb/ubuntu/linux-aws-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1008.8~22.04.1

6.5.0-1010.10~22.04.1

6.5.0-1011.11~22.04.1

6.5.0-1012.12~22.04.1

6.5.0-1014.14~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1017.17~22.04.2

6.5.0-1018.18~22.04.1

6.5.0-1020.20~22.04.1

6.5.0-1021.21~22.04.1

6.5.0-1022.22~22.04.1

6.5.0-1023.23~22.04.1

6.5.0-1024.24~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.5-cloud-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.5-headers-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.5-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-6.8

Package

Name: linux-aws-6.8
Purl: pkg:deb/ubuntu/linux-aws-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1061.64~22.04.1

Affected versions

6.*

6.8.0-1009.9~22.04.2

6.8.0-1010.10~22.04.2

6.8.0-1011.12~22.04.1

6.8.0-1013.14~22.04.1

6.8.0-1014.15~22.04.1

6.8.0-1015.16~22.04.1

6.8.0-1016.17~22.04.2

6.8.0-1017.18~22.04.1

6.8.0-1018.19~22.04.1

6.8.0-1019.21~22.04.1

6.8.0-1020.22~22.04.1

6.8.0-1021.23~22.04.1

6.8.0-1023.25~22.04.1

6.8.0-1024.26~22.04.1

6.8.0-1027.29~22.04.1

6.8.0-1028.30~22.04.1

6.8.0-1029.31~22.04.1

6.8.0-1030.32~22.04.1

6.8.0-1031.33~22.04.1

6.8.0-1032.34~22.04.1

6.8.0-1033.35~22.04.1

6.8.0-1035.37~22.04.1

6.8.0-1036.38~22.04.1

6.8.0-1039.41~22.04.1

6.8.0-1040.42~22.04.1

6.8.0-1041.43~22.04.1

6.8.0-1042.44~22.04.1

6.8.0-1043.45~22.04.1

6.8.0-1044.46~22.04.1

6.8.0-1045.47~22.04.1

6.8.0-1046.49~22.04.1

6.8.0-1047.50~22.04.1

6.8.0-1050.53~22.04.1

6.8.0-1051.54~22.04.1

6.8.0-1052.55~22.04.1

6.8.0-1053.56~22.04.1

6.8.0-1055.58~22.04.1

6.8.0-1057.60~22.04.1

6.8.0-1060.63~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.8-cloud-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.8-headers-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.8-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1006.7

5.15.0-1001.2

5.15.0-1002.3

5.15.0-1003.4

5.15.0-1005.6

5.15.0-1007.8

5.15.0-1008.9

5.15.0-1010.12

5.15.0-1012.15

5.15.0-1013.16

5.15.0-1014.17

5.15.0-1017.20

5.15.0-1019.24

5.15.0-1020.25

5.15.0-1021.26

5.15.0-1022.27

5.15.0-1023.29

5.15.0-1024.30

5.15.0-1029.36

5.15.0-1030.37

5.15.0-1031.38

5.15.0-1033.40

5.15.0-1034.41

5.15.0-1035.42

5.15.0-1036.43

5.15.0-1037.44

5.15.0-1038.45

5.15.0-1039.46

5.15.0-1040.47

5.15.0-1041.48

5.15.0-1042.49

5.15.0-1044.51

5.15.0-1045.52

5.15.0-1046.53

5.15.0-1047.54

5.15.0-1049.56

5.15.0-1050.57

5.15.0-1051.59

5.15.0-1052.60

5.15.0-1053.61

5.15.0-1054.62

5.15.0-1056.64

5.15.0-1057.65

5.15.0-1058.66

5.15.0-1059.67

5.15.0-1060.69

5.15.0-1061.70

5.15.0-1063.72

5.15.0-1064.73

5.15.0-1066.75

5.15.0-1067.76

5.15.0-1068.77

5.15.0-1070.79

5.15.0-1071.80

5.15.0-1072.81

5.15.0-1073.82

5.15.0-1074.83

5.15.0-1075.84

5.15.0-1078.87

5.15.0-1079.88

5.15.0-1081.90

5.15.0-1082.91

5.15.0-1084.93

5.15.0-1086.95

5.15.0-1087.96

5.15.0-1088.97

5.15.0-1089.98

5.15.0-1090.99

5.15.0-1091.100

5.15.0-1092.101

5.15.0-1094.103

5.15.0-1095.104

5.15.0-1096.105

5.15.0-1097.106

5.15.0-1098.107

5.15.0-1099.108

5.15.0-1101.110

5.15.0-1102.111

5.15.0-1103.112

5.15.0-1109.118

5.15.0-1110.119

5.15.0-1111.120

5.15.0-1114.123

5.15.0-1116.125

5.15.0-1117.126

5.15.0-1118.127

5.15.0-1119.128

5.15.0-1121.130

5.15.0-1122.131

5.15.0-1123.132

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-azure-headers-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-azure-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.19

Package

Name: linux-azure-5.19
Purl: pkg:deb/ubuntu/linux-azure-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1020.21~22.04.1

5.19.0-1021.22~22.04.1

5.19.0-1022.23~22.04.1

5.19.0-1023.24~22.04.1

5.19.0-1025.28~22.04.1

5.19.0-1026.29~22.04.1

5.19.0-1027.30~22.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.19-cloud-tools-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-azure-5.19-headers-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-azure-5.19-tools-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-6.2

Package

Name: linux-azure-6.2
Purl: pkg:deb/ubuntu/linux-azure-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1005.5~22.04.1

6.2.0-1006.6~22.04.1

6.2.0-1007.7~22.04.1

6.2.0-1008.8~22.04.1

6.2.0-1009.9~22.04.3

6.2.0-1011.11~22.04.1

6.2.0-1012.12~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1015.15~22.04.1

6.2.0-1016.16~22.04.1

6.2.0-1017.17~22.04.1

6.2.0-1018.18~22.04.1

6.2.0-1019.19~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.2-cloud-tools-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.2-headers-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.2-tools-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-6.5

Package

Name: linux-azure-6.5
Purl: pkg:deb/ubuntu/linux-azure-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1007.7~22.04.1

6.5.0-1009.9~22.04.1

6.5.0-1010.10~22.04.1

6.5.0-1011.11~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1017.17~22.04.1

6.5.0-1018.19~22.04.2

6.5.0-1019.20~22.04.1

6.5.0-1021.22~22.04.1

6.5.0-1022.23~22.04.1

6.5.0-1023.24~22.04.1

6.5.0-1024.25~22.04.1

6.5.0-1025.26~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.5-cloud-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.5-headers-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.5-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-6.8

Package

Name: linux-azure-6.8
Purl: pkg:deb/ubuntu/linux-azure-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1063.71~22.04.1

Affected versions

6.*

6.8.0-1008.8~22.04.1

6.8.0-1009.9~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1012.14~22.04.1

6.8.0-1013.15~22.04.1

6.8.0-1014.16~22.04.1

6.8.0-1015.17~22.04.2

6.8.0-1017.20~22.04.1

6.8.0-1018.21~22.04.1

6.8.0-1020.23~22.04.1

6.8.0-1021.25~22.04.1

6.8.0-1025.30~22.04.1

6.8.0-1026.31~22.04.1

6.8.0-1027.32~22.04.1

6.8.0-1028.33~22.04.1

6.8.0-1029.34~22.04.1

6.8.0-1030.35~22.04.1

6.8.0-1031.36~22.04.1

6.8.0-1034.39~22.04.1

6.8.0-1036.42~22.04.1

6.8.0-1040.46~22.04.1

6.8.0-1041.47~22.04.1

6.8.0-1044.50~22.04.1

6.8.0-1051.57~22.04.1

6.8.0-1052.58~22.04.1

6.8.0-1059.65~22.04.1

6.8.0-1062.69~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.8-cloud-tools-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.8-headers-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.8-tools-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1019.24.1

5.15.0-1024.30.1

5.15.0-1029.36.1

5.15.0-1030.37.1

5.15.0-1031.38.1

5.15.0-1033.40.1

5.15.0-1034.41.1

5.15.0-1035.42.1

5.15.0-1036.43.1

5.15.0-1037.44.1

5.15.0-1038.45.1

5.15.0-1039.46.1

5.15.0-1041.48.1

5.15.0-1042.49.1

5.15.0-1044.51.1

5.15.0-1045.52.1

5.15.0-1046.53.1

5.15.0-1047.54.1

5.15.0-1049.56.1

5.15.0-1050.57.1

5.15.0-1051.59.1

5.15.0-1052.60.1

5.15.0-1053.61.1

5.15.0-1054.62.1

5.15.0-1056.64.1

5.15.0-1057.65.1

5.15.0-1058.66.1

5.15.0-1059.67.1

5.15.0-1060.69.1

5.15.0-1061.70.1

5.15.0-1063.72.1

5.15.0-1064.73.1

5.15.0-1065.74.1

5.15.0-1067.76.1

5.15.0-1068.77.1

5.15.0-1070.79.1

5.15.0-1071.80.1

5.15.0-1072.81.1

5.15.0-1073.82.1

5.15.0-1076.85.1

5.15.0-1078.87.1

5.15.0-1081.90.1

5.15.0-1082.91.1

5.15.0-1084.93.1

5.15.0-1086.95.1

5.15.0-1087.96.1

5.15.0-1088.97.1

5.15.0-1089.98.1

5.15.0-1090.99.1

5.15.0-1091.100.1

5.15.0-1092.101.1

5.15.0-1094.103.1

5.15.0-1095.104.1

5.15.0-1096.105.1

5.15.0-1097.106.1

5.15.0-1098.107.1

5.15.0-1102.111.1

5.15.0-1109.118.1

5.15.0-1110.119.1

5.15.0-1111.120.1

5.15.0-1114.123

5.15.0-1116.125

5.15.0-1117.126

5.15.0-1118.127

5.15.0-1119.128

5.15.0-1120.129

5.15.0-1121.130

5.15.0-1122.131

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-azure-fde-headers-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-azure-fde-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde-5.19

Package

Name: linux-azure-fde-5.19
Purl: pkg:deb/ubuntu/linux-azure-fde-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1025.28~22.04.1.1

5.19.0-1026.29~22.04.1.1

5.19.0-1027.30~22.04.2.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1027-azure-fde",
            "binary_version":  "5.19.0-1027.30~22.04.2.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde-6.2

Package

Name: linux-azure-fde-6.2
Purl: pkg:deb/ubuntu/linux-azure-fde-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1008.8~22.04.1.1

6.2.0-1009.9~22.04.3.1

6.2.0-1011.11~22.04.1.1

6.2.0-1012.12~22.04.1.1

6.2.0-1014.14~22.04.1.1

6.2.0-1015.15~22.04.1.1

6.2.0-1016.16~22.04.1.1

6.2.0-1017.17~22.04.1.1

6.2.0-1018.18~22.04.1.1

6.2.0-1019.19~22.04.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1019-azure-fde",
            "binary_version":  "6.2.0-1019.19~22.04.1.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde-6.8

Package

Name: linux-azure-fde-6.8
Purl: pkg:deb/ubuntu/linux-azure-fde-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1062.69~22.04.1

Affected versions

6.*

6.8.0-1041.48~22.04.1

6.8.0-1042.49~22.04.1

6.8.0-1044.51~22.04.1

6.8.0-1046.53~22.04.1

6.8.0-1053.60~22.04.1

6.8.0-1058.65~22.04.1

6.8.0-1061.68~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-6.8-cloud-tools-6.8.0-1062",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.8-headers-6.8.0-1062",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.8-tools-6.8.0-1062",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1005.6

5.15.0-1001.3

5.15.0-1002.5

5.15.0-1003.6

5.15.0-1004.7

5.15.0-1005.8

5.15.0-1006.9

5.15.0-1008.12

5.15.0-1010.15

5.15.0-1013.18

5.15.0-1016.21

5.15.0-1017.23

5.15.0-1018.24

5.15.0-1019.25

5.15.0-1021.28

5.15.0-1022.29

5.15.0-1025.32

5.15.0-1026.33

5.15.0-1027.34

5.15.0-1029.36

5.15.0-1030.37

5.15.0-1031.38

5.15.0-1032.40

5.15.0-1034.42

5.15.0-1035.43

5.15.0-1036.44

5.15.0-1037.45

5.15.0-1038.46

5.15.0-1039.47

5.15.0-1040.48

5.15.0-1041.49

5.15.0-1042.50

5.15.0-1044.52

5.15.0-1045.53

5.15.0-1046.54

5.15.0-1047.55

5.15.0-1048.56

5.15.0-1049.57

5.15.0-1051.59

5.15.0-1052.60

5.15.0-1053.61

5.15.0-1054.62

5.15.0-1055.63

5.15.0-1058.66

5.15.0-1059.67

5.15.0-1060.68

5.15.0-1062.70

5.15.0-1063.71

5.15.0-1064.72

5.15.0-1065.73

5.15.0-1066.74

5.15.0-1067.75

5.15.0-1068.76

5.15.0-1069.77

5.15.0-1070.78

5.15.0-1071.79

5.15.0-1072.80

5.15.0-1073.81

5.15.0-1074.83

5.15.0-1075.84

5.15.0-1077.86

5.15.0-1078.87

5.15.0-1079.88

5.15.0-1080.89

5.15.0-1081.90

5.15.0-1082.91

5.15.0-1083.92

5.15.0-1084.93

5.15.0-1085.94

5.15.0-1086.95

5.15.0-1087.96

5.15.0-1088.97

5.15.0-1090.99

5.15.0-1091.100

5.15.0-1092.101

5.15.0-1093.102

5.15.0-1095.104

5.15.0-1096.105

5.15.0-1097.106

5.15.0-1098.107

5.15.0-1099.108

5.15.0-1100.109

5.15.0-1101.110

5.15.0-1103.112

5.15.0-1104.113

5.15.0-1105.114

5.15.0-1106.115

5.15.0-1108.117

5.15.0-1109.118

5.15.0-1111.121

5.15.0-1112.122

5.15.0-1114.124

5.15.0-1115.125

5.15.0-1117.127

5.15.0-1118.128

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-gcp-headers-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-gcp-tools-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.19

Package

Name: linux-gcp-5.19
Purl: pkg:deb/ubuntu/linux-gcp-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1020.22~22.04.2

5.19.0-1021.23~22.04.1

5.19.0-1022.24~22.04.1

5.19.0-1024.26~22.04.1

5.19.0-1025.27~22.04.1

5.19.0-1026.28~22.04.1

5.19.0-1027.29~22.04.1

5.19.0-1030.32~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.19-headers-5.19.0-1030",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.19-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-6.2

Package

Name: linux-gcp-6.2
Purl: pkg:deb/ubuntu/linux-gcp-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1009.9~22.04.3

6.2.0-1010.10~22.04.1

6.2.0-1011.11~22.04.1

6.2.0-1011.11~22.04.3

6.2.0-1012.12~22.04.1

6.2.0-1013.13~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1016.18~22.04.1

6.2.0-1017.19~22.04.1

6.2.0-1018.20~22.04.1

6.2.0-1019.21~22.04.1

6.2.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.2-headers-6.2.0-1021",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.2-tools-6.2.0-1021",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-6.5

Package

Name: linux-gcp-6.5
Purl: pkg:deb/ubuntu/linux-gcp-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1010.10~22.04.3

6.5.0-1011.11~22.04.1

6.5.0-1013.13~22.04.1

6.5.0-1014.14~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1017.17~22.04.1

6.5.0-1018.18~22.04.1

6.5.0-1020.20~22.04.1

6.5.0-1022.24~22.04.1

6.5.0-1023.25~22.04.1

6.5.0-1024.26~22.04.1

6.5.0-1025.27~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.5-headers-6.5.0-1025",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.5-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-6.8

Package

Name: linux-gcp-6.8
Purl: pkg:deb/ubuntu/linux-gcp-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1064.72~22.04.1

Affected versions

6.*

6.8.0-1010.11~22.04.1

6.8.0-1011.12~22.04.1

6.8.0-1012.13~22.04.1

6.8.0-1013.14~22.04.1

6.8.0-1014.16~22.04.1

6.8.0-1015.17~22.04.1

6.8.0-1016.18~22.04.1

6.8.0-1017.19~22.04.1

6.8.0-1018.20~22.04.1

6.8.0-1019.21~22.04.1

6.8.0-1020.22~22.04.1

6.8.0-1021.23~22.04.1

6.8.0-1024.26~22.04.1

6.8.0-1025.27~22.04.1

6.8.0-1026.28~22.04.1

6.8.0-1027.29~22.04.1

6.8.0-1028.30~22.04.1

6.8.0-1029.31~22.04.1

6.8.0-1030.32~22.04.1

6.8.0-1031.33~22.04.1

6.8.0-1032.34~22.04.1

6.8.0-1033.35~22.04.1

6.8.0-1034.36~22.04.2

6.8.0-1036.38~22.04.1

6.8.0-1037.39~22.04.1

6.8.0-1040.42~22.04.1

6.8.0-1041.43~22.04.1

6.8.0-1042.45~22.04.1

6.8.0-1043.46~22.04.1

6.8.0-1044.47~22.04.1

6.8.0-1045.48~22.04.1

6.8.0-1046.49~22.04.1

6.8.0-1047.50~22.04.2

6.8.0-1048.51~22.04.1

6.8.0-1052.55~22.04.1

6.8.0-1053.56~22.04.1

6.8.0-1054.57~22.04.1

6.8.0-1058.61~22.04.1

6.8.0-1060.63~22.04.1

6.8.0-1063.69~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.8-headers-6.8.0-1064",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.8-tools-6.8.0-1064",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1002.2

5.15.0-1003.3

5.15.0-1004.5

5.15.0-1005.6

5.15.0-1006.7

5.15.0-1008.10

5.15.0-1010.13

5.15.0-1011.14

5.15.0-1014.17

5.15.0-1015.18

5.15.0-1016.19

5.15.0-1017.20

5.15.0-1019.23

5.15.0-1020.25

5.15.0-1023.28

5.15.0-1024.29

5.15.0-1027.32

5.15.0-1028.33

5.15.0-1030.35

5.15.0-1031.36

5.15.0-1032.37

5.15.0-1033.38

5.15.0-1034.39

5.15.0-1035.40

5.15.0-1036.41

5.15.0-1037.42

5.15.0-1038.43

5.15.0-1039.44

5.15.0-1040.45

5.15.0-1041.46

5.15.0-1042.47

5.15.0-1044.49

5.15.0-1045.50

5.15.0-1046.51

5.15.0-1047.52

5.15.0-1048.53

5.15.0-1049.54

5.15.0-1050.55

5.15.0-1051.56

5.15.0-1052.57

5.15.0-1053.58

5.15.0-1054.59

5.15.0-1057.62

5.15.0-1058.63

5.15.0-1059.64

5.15.0-1060.66

5.15.0-1061.67

5.15.0-1062.68

5.15.0-1063.69

5.15.0-1064.70

5.15.0-1065.71

5.15.0-1066.72

5.15.0-1067.73

5.15.0-1068.74

5.15.0-1069.75

5.15.0-1070.76

5.15.0-1071.77

5.15.0-1072.78

5.15.0-1073.79

5.15.0-1075.81

5.15.0-1076.82

5.15.0-1077.83

5.15.0-1078.84

5.15.0-1079.85

5.15.0-1080.86

5.15.0-1081.87

5.15.0-1082.88

5.15.0-1083.89

5.15.0-1084.90

5.15.0-1085.91

5.15.0-1086.92

5.15.0-1087.93

5.15.0-1088.94

5.15.0-1089.95

5.15.0-1090.96

5.15.0-1091.97

5.15.0-1092.98

5.15.0-1093.99

5.15.0-1094.100

5.15.0-1095.101

5.15.0-1096.102

5.15.0-1097.103

5.15.0-1099.105

5.15.0-1100.106

5.15.0-1101.107

5.15.0-1102.108

5.15.0-1104.110

5.15.0-1105.111

5.15.0-1107.113

5.15.0-1108.114

5.15.0-1110.116

5.15.0-1111.117

5.15.0-1112.118

5.15.0-1113.119

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-gke-headers-5.15.0-1113",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-gke-tools-5.15.0-1113",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1001.2

5.15.0-1002.4

5.15.0-1003.5

5.15.0-1004.6

5.15.0-1005.7

5.15.0-1007.10

5.15.0-1008.12

5.15.0-1011.15

5.15.0-1012.16

5.15.0-1013.17

5.15.0-1015.19

5.15.0-1016.21

5.15.0-1017.22

5.15.0-1018.23

5.15.0-1019.24

5.15.0-1020.25

5.15.0-1021.26

5.15.0-1022.27

5.15.0-1023.28

5.15.0-1024.29

5.15.0-1025.30

5.15.0-1026.31

5.15.0-1027.32

5.15.0-1028.33

5.15.0-1030.35

5.15.0-1031.37

5.15.0-1032.38

5.15.0-1033.39

5.15.0-1034.40

5.15.0-1035.41

5.15.0-1036.42

5.15.0-1037.43

5.15.0-1038.44

5.15.0-1039.45

5.15.0-1040.46

5.15.0-1043.50

5.15.0-1044.51

5.15.0-1045.52

5.15.0-1046.53

5.15.0-1047.54

5.15.0-1048.55

5.15.0-1049.56

5.15.0-1050.57

5.15.0-1051.58

5.15.0-1052.59

5.15.0-1053.60

5.15.0-1054.61

5.15.0-1055.62

5.15.0-1056.63

5.15.0-1057.64

5.15.0-1058.66

5.15.0-1059.67

5.15.0-1060.68

5.15.0-1061.69

5.15.0-1062.70

5.15.0-1063.71

5.15.0-1064.72

5.15.0-1065.73

5.15.0-1066.74

5.15.0-1067.75

5.15.0-1068.76

5.15.0-1069.77

5.15.0-1070.78

5.15.0-1071.79

5.15.0-1073.81

5.15.0-1074.82

5.15.0-1075.83

5.15.0-1076.84

5.15.0-1078.86

5.15.0-1079.87

5.15.0-1080.88

5.15.0-1081.89

5.15.0-1082.90

5.15.0-1083.91

5.15.0-1084.92

5.15.0-1086.94

5.15.0-1087.95

5.15.0-1088.96

5.15.0-1089.97

5.15.0-1091.99

5.15.0-1092.100

5.15.0-1094.102

5.15.0-1095.103

5.15.0-1096.104

5.15.0-1097.105

5.15.0-1098.106

5.15.0-1099.107

5.15.0-1100.108

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-5.15.0-1100",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-gkeop-headers-5.15.0-1100",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-gkeop-tools-5.15.0-1100",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-5.19

Package

Name: linux-hwe-5.19
Purl: pkg:deb/ubuntu/linux-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-28.29~22.04.1

5.19.0-32.33~22.04.1

5.19.0-35.36~22.04.1

5.19.0-38.39~22.04.1

5.19.0-40.41~22.04.1

5.19.0-41.42~22.04.1

5.19.0-42.43~22.04.1

5.19.0-43.44~22.04.1

5.19.0-45.46~22.04.1

5.19.0-46.47~22.04.1

5.19.0-50.50

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-cloud-tools-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-cloud-tools-common",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-headers-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-common",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-host",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-source-5.19.0",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-6.2

Package

Name: linux-hwe-6.2
Purl: pkg:deb/ubuntu/linux-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-25.25~22.04.2

6.2.0-26.26~22.04.1

6.2.0-31.31~22.04.1

6.2.0-32.32~22.04.1

6.2.0-33.33~22.04.1

6.2.0-34.34~22.04.1

6.2.0-35.35~22.04.1

6.2.0-36.37~22.04.1

6.2.0-37.38~22.04.1

6.2.0-39.40~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-cloud-tools-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-cloud-tools-common",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-headers-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-common",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-host",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-source-6.2.0",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-6.5

Package

Name: linux-hwe-6.5
Purl: pkg:deb/ubuntu/linux-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-14.14~22.04.1

6.5.0-15.15~22.04.1

6.5.0-17.17~22.04.1

6.5.0-18.18~22.04.1

6.5.0-21.21~22.04.1

6.5.0-25.25~22.04.1

6.5.0-26.26~22.04.1

6.5.0-27.28~22.04.1

6.5.0-28.29~22.04.1

6.5.0-35.35~22.04.1

6.5.0-41.41~22.04.2

6.5.0-44.44~22.04.1

6.5.0-45.45~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-cloud-tools-common",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-common",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-host",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-source-6.5.0",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-6.8

Package

Name: linux-hwe-6.8
Purl: pkg:deb/ubuntu/linux-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-136.136~22.04.1

Affected versions

6.*

6.8.0-38.38~22.04.1

6.8.0-39.39~22.04.1

6.8.0-40.40~22.04.3

6.8.0-45.45~22.04.1

6.8.0-47.47~22.04.1

6.8.0-48.48~22.04.1

6.8.0-49.49~22.04.1

6.8.0-50.51~22.04.1

6.8.0-51.52~22.04.1

6.8.0-52.53~22.04.1

6.8.0-57.59~22.04.1

6.8.0-58.60~22.04.1

6.8.0-59.61~22.04.1

6.8.0-60.63~22.04.1

6.8.0-64.67~22.04.1

6.8.0-65.68~22.04.1

6.8.0-78.78~22.04.1

6.8.0-79.79~22.04.1

6.8.0-83.83~22.04.1

6.8.0-84.84~22.04.1

6.8.0-85.85~22.04.1

6.8.0-86.87~22.04.1

6.8.0-87.88~22.04.1

6.8.0-88.89~22.04.2

6.8.0-90.91~22.04.1

6.8.0-94.96~22.04.1

6.8.0-100.100~22.04.1

6.8.0-101.101~22.04.1

6.8.0-106.106~22.04.1

6.8.0-107.107~22.04.1

6.8.0-110.110~22.04.1

6.8.0-111.111~22.04.1

6.8.0-117.117~22.04.1

6.8.0-124.124~22.04.1

6.8.0-134.134~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-cloud-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-headers-6.8.0-136",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-ibm

Package

Name: linux-ibm
Purl: pkg:deb/ubuntu/linux-ibm?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1002.2

5.15.0-1003.3

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1007.8

5.15.0-1009.11

5.15.0-1010.12

5.15.0-1012.14

5.15.0-1013.15

5.15.0-1015.17

5.15.0-1017.20

5.15.0-1018.21

5.15.0-1021.24

5.15.0-1022.25

5.15.0-1023.26

5.15.0-1025.28

5.15.0-1026.29

5.15.0-1027.30

5.15.0-1028.31

5.15.0-1029.32

5.15.0-1030.33

5.15.0-1031.34

5.15.0-1032.35

5.15.0-1033.36

5.15.0-1034.37

5.15.0-1035.38

5.15.0-1036.39

5.15.0-1037.40

5.15.0-1038.41

5.15.0-1040.43

5.15.0-1041.44

5.15.0-1042.45

5.15.0-1043.46

5.15.0-1044.47

5.15.0-1045.48

5.15.0-1046.49

5.15.0-1047.50

5.15.0-1048.51

5.15.0-1049.52

5.15.0-1050.53

5.15.0-1053.56

5.15.0-1054.57

5.15.0-1055.58

5.15.0-1056.59

5.15.0-1057.60

5.15.0-1058.61

5.15.0-1059.62

5.15.0-1060.63

5.15.0-1061.64

5.15.0-1062.65

5.15.0-1063.66

5.15.0-1064.67

5.15.0-1065.68

5.15.0-1066.69

5.15.0-1067.70

5.15.0-1068.71

5.15.0-1069.72

5.15.0-1070.73

5.15.0-1071.74

5.15.0-1072.75

5.15.0-1073.76

5.15.0-1074.77

5.15.0-1075.78

5.15.0-1076.79

5.15.0-1077.80

5.15.0-1078.81

5.15.0-1079.82

5.15.0-1080.83

5.15.0-1081.84

5.15.0-1084.87

5.15.0-1085.88

5.15.0-1086.89

5.15.0-1087.90

5.15.0-1089.92

5.15.0-1090.93

5.15.0-1091.94

5.15.0-1092.95

5.15.0-1093.96

5.15.0-1094.97

5.15.0-1095.98

5.15.0-1097.100

5.15.0-1098.101

5.15.0-1099.102

5.15.0-1100.103

5.15.0-1102.105

5.15.0-1103.106

5.15.0-1105.109

5.15.0-1106.110

5.15.0-1107.111

5.15.0-1108.112

5.15.0-1109.113

5.15.0-1110.114

5.15.0-1111.115

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-cloud-tools-common",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-headers-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-source-5.15.0",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-tools-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-tools-common",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-ibm-6.8

Package

Name: linux-ibm-6.8
Purl: pkg:deb/ubuntu/linux-ibm-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1061.62~22.04.1

Affected versions

6.*

6.8.0-1008.8~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1011.11~22.04.1

6.8.0-1012.12~22.04.1

6.8.0-1013.13~22.04.1

6.8.0-1014.14~22.04.1

6.8.0-1015.15~22.04.1

6.8.0-1016.16~22.04.1

6.8.0-1017.17~22.04.1

6.8.0-1018.18~22.04.1

6.8.0-1019.19~22.04.1

6.8.0-1023.23~22.04.1

6.8.0-1024.24~22.04.1

6.8.0-1025.25~22.04.1

6.8.0-1026.26~22.04.1

6.8.0-1027.27~22.04.1

6.8.0-1028.28~22.04.1

6.8.0-1029.29~22.04.1

6.8.0-1030.30~22.04.1

6.8.0-1033.33~22.04.1

6.8.0-1036.36~22.04.1

6.8.0-1037.37~22.04.1

6.8.0-1038.38~22.04.1

6.8.0-1039.39~22.04.1

6.8.0-1040.40~22.04.1

6.8.0-1041.41~22.04.1

6.8.0-1042.42~22.04.1

6.8.0-1043.43~22.04.1

6.8.0-1044.44~22.04.1

6.8.0-1045.45~22.04.1

6.8.0-1049.49~22.04.1

6.8.0-1050.50~22.04.1

6.8.0-1051.51~22.04.1

6.8.0-1052.52~22.04.1

6.8.0-1055.56~22.04.1

6.8.0-1057.58~22.04.1

6.8.0-1060.61~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-ibm-6.8-headers-6.8.0-1061",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-ibm-6.8-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-intel-iot-realtime

Package

Name: linux-intel-iot-realtime
Purl: pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1073.75

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-host",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-intel-iotg

Package

Name: linux-intel-iotg
Purl: pkg:deb/ubuntu/linux-intel-iotg?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1004.6

5.15.0-1008.11

5.15.0-1010.14

5.15.0-1013.17

5.15.0-1015.20

5.15.0-1016.21

5.15.0-1017.22

5.15.0-1018.23

5.15.0-1021.26

5.15.0-1023.28

5.15.0-1025.30

5.15.0-1026.31

5.15.0-1027.32

5.15.0-1028.33

5.15.0-1030.35

5.15.0-1031.36

5.15.0-1033.38

5.15.0-1034.39

5.15.0-1035.40

5.15.0-1036.41

5.15.0-1037.42

5.15.0-1038.43

5.15.0-1039.45

5.15.0-1040.46

5.15.0-1043.49

5.15.0-1045.51

5.15.0-1046.52

5.15.0-1047.53

5.15.0-1048.54

5.15.0-1049.55

5.15.0-1050.56

5.15.0-1051.57

5.15.0-1052.58

5.15.0-1055.61

5.15.0-1057.63

5.15.0-1058.64

5.15.0-1059.65

5.15.0-1060.66

5.15.0-1061.67

5.15.0-1062.68

5.15.0-1063.69

5.15.0-1064.70

5.15.0-1065.71

5.15.0-1066.72

5.15.0-1067.73

5.15.0-1071.77

5.15.0-1072.78

5.15.0-1073.79

5.15.0-1074.80

5.15.0-1075.81

5.15.0-1076.82

5.15.0-1077.83

5.15.0-1078.84

5.15.0-1079.85

5.15.0-1080.86

5.15.0-1081.87

5.15.0-1082.88

5.15.0-1083.89

5.15.0-1084.90

5.15.0-1085.91

5.15.0-1086.92

5.15.0-1087.93

5.15.0-1088.94

5.15.0-1090.96

5.15.0-1091.97

5.15.0-1092.98

5.15.0-1093.99

5.15.0-1094.100

5.15.0-1095.101

5.15.0-1096.102

5.15.0-1098.104

5.15.0-1099.105

5.15.0-1100.106

5.15.0-1101.107

5.15.0-1103.109

5.15.0-1104.110

5.15.0-1106.112

5.15.0-1107.113

5.15.0-1108.114

5.15.0-1109.115

5.15.0-1110.116

5.15.0-1111.117

5.15.0-1112.118

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-cloud-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-cloud-tools-common",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-headers-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-common",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-host",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-kvm

Package

Name: linux-kvm
Purl: pkg:deb/ubuntu/linux-kvm?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1004.4

5.13.0-1006.6+22.04.1

5.13.0-1007.7+22.04.1

5.13.0-1010.11+22.04.1

5.15.0-1002.2

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1007.7

5.15.0-1008.8

5.15.0-1010.11

5.15.0-1012.14

5.15.0-1013.16

5.15.0-1016.19

5.15.0-1017.21

5.15.0-1018.22

5.15.0-1019.23

5.15.0-1020.24

5.15.0-1021.26

5.15.0-1024.29

5.15.0-1025.30

5.15.0-1026.31

5.15.0-1028.33

5.15.0-1029.34

5.15.0-1030.35

5.15.0-1031.36

5.15.0-1032.37

5.15.0-1033.38

5.15.0-1034.39

5.15.0-1035.40

5.15.0-1037.42

5.15.0-1038.43

5.15.0-1039.44

5.15.0-1040.45

5.15.0-1041.46

5.15.0-1042.47

5.15.0-1044.49

5.15.0-1045.50

5.15.0-1046.51

5.15.0-1047.52

5.15.0-1048.53

5.15.0-1049.54

5.15.0-1050.55

5.15.0-1051.56

5.15.0-1052.57

5.15.0-1053.58

5.15.0-1054.59

5.15.0-1057.62

5.15.0-1058.63

5.15.0-1059.64

5.15.0-1060.65

5.15.0-1061.66

5.15.0-1062.67

5.15.0-1063.68

5.15.0-1064.69

5.15.0-1065.70

5.15.0-1066.71

5.15.0-1067.72

5.15.0-1068.73

5.15.0-1069.74

5.15.0-1070.75

5.15.0-1071.76

5.15.0-1072.77

5.15.0-1073.78

5.15.0-1076.81

5.15.0-1077.82

5.15.0-1078.83

5.15.0-1079.84

5.15.0-1080.85

5.15.0-1081.86

5.15.0-1082.87

5.15.0-1083.88

5.15.0-1084.89

5.15.0-1085.90

5.15.0-1086.91

5.15.0-1087.92

5.15.0-1088.93

5.15.0-1089.94

5.15.0-1090.95

5.15.0-1091.96

5.15.0-1092.97

5.15.0-1093.98

5.15.0-1095.100

5.15.0-1096.101

5.15.0-1097.102

5.15.0-1098.103

5.15.0-1100.105

5.15.0-1101.106

5.15.0-1103.108

5.15.0-1104.109

5.15.0-1105.110

5.15.0-1106.111

5.15.0-1107.112

5.15.0-1108.113

5.15.0-1109.114

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-kvm-headers-5.15.0-1109",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-kvm-tools-5.15.0-1109",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency

Package

Name: linux-lowlatency
Purl: pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-22.22

5.15.0-23.23

5.15.0-24.24

5.15.0-27.28

5.15.0-30.31

5.15.0-33.34

5.15.0-35.36

5.15.0-37.39

5.15.0-39.42

5.15.0-40.43

5.15.0-41.44

5.15.0-43.46

5.15.0-46.49

5.15.0-47.53

5.15.0-48.54

5.15.0-50.56

5.15.0-52.58

5.15.0-53.59

5.15.0-56.62

5.15.0-57.63

5.15.0-58.64

5.15.0-60.66

5.15.0-67.74

5.15.0-69.76

5.15.0-70.77

5.15.0-71.78

5.15.0-72.79

5.15.0-73.80

5.15.0-75.82

5.15.0-76.83

5.15.0-78.85

5.15.0-79.88

5.15.0-82.91

5.15.0-83.92

5.15.0-84.93

5.15.0-86.95

5.15.0-87.96

5.15.0-88.98

5.15.0-89.99

5.15.0-91.101

5.15.0-92.102

5.15.0-94.104

5.15.0-97.107

5.15.0-100.110

5.15.0-101.111

5.15.0-102.112

5.15.0-105.115

5.15.0-106.116

5.15.0-107.117

5.15.0-110.120

5.15.0-113.123

5.15.0-116.126

5.15.0-117.127

5.15.0-118.128

5.15.0-119.129

5.15.0-121.131

5.15.0-122.132

5.15.0-124.134

5.15.0-125.135

5.15.0-126.136

5.15.0-127.137

5.15.0-128.138

5.15.0-129.139

5.15.0-131.141

5.15.0-133.143

5.15.0-134.145

5.15.0-135.146

5.15.0-136.147

5.15.0-138.148

5.15.0-139.149

5.15.0-140.150

5.15.0-141.151

5.15.0-142.152

5.15.0-143.153

5.15.0-144.157

5.15.0-145.158

5.15.0-152.162

5.15.0-153.163

5.15.0-156.166

5.15.0-157.167

5.15.0-160.170

5.15.0-161.171

5.15.0-163.173

5.15.0-164.174

5.15.0-168.178

5.15.0-170.180

5.15.0-171.181

5.15.0-173.183

5.15.0-174.184

5.15.0-175.185

5.15.0-177.187

5.15.0-178.188

5.15.0-179.189

5.15.0-181.191

5.15.0-183.193

5.15.0-184.194

5.15.0-190.200

5.15.0-191.201

5.15.0-194.204

5.15.0-195.205

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-lowlatency-headers-5.15.0-195",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-lowlatency-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency-hwe-5.19

Package

Name: linux-lowlatency-hwe-5.19
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1017.18~22.04.1

5.19.0-1018.19~22.04.1

5.19.0-1021.22~22.04.1

5.19.0-1022.23~22.04.1

5.19.0-1023.24~22.04.1

5.19.0-1024.25~22.04.1

5.19.0-1025.26~22.04.1

5.19.0-1027.28~22.04.1

5.19.0-1028.29~22.04.1

5.19.0-1030.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-cloud-tools-common",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-common",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-host",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency-hwe-6.2

Package

Name: linux-lowlatency-hwe-6.2
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1008.8~22.04.1

6.2.0-1009.9~22.04.1

6.2.0-1011.11~22.04.1

6.2.0-1012.12~22.04.1

6.2.0-1013.13~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1015.15~22.04.1

6.2.0-1016.16~22.04.1

6.2.0-1017.17~22.04.1

6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-cloud-tools-common",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-common",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-host",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency-hwe-6.5

Package

Name: linux-lowlatency-hwe-6.5
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-14.14.1~22.04.1

6.5.0-15.15.1.1~22.04.1

6.5.0-17.17.1.1.1~22.04.1

6.5.0-21.21.1~22.04.1

6.5.0-25.25.1~22.04.1

6.5.0-26.26.1~22.04.1

6.5.0-27.28.1~22.04.1

6.5.0-28.29.1~22.04.1

6.5.0-35.35.1~22.04.1

6.5.0-41.41.1~22.04.1

6.5.0-42.42.1~22.04.1

6.5.0-44.44.1~22.04.1

6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-cloud-tools-common",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-common",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-host",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency-hwe-6.8

Package

Name: linux-lowlatency-hwe-6.8
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-136.136.2~22.04.1

Affected versions

6.*

6.8.0-38.38.1~22.04.2

6.8.0-40.40.1~22.04.1

6.8.0-44.44.1~22.04.1

6.8.0-45.45.1~22.04.1

6.8.0-47.47.1~22.04.1

6.8.0-48.48.3~22.04.1

6.8.0-49.49.1~22.04.1

6.8.0-50.51.1~22.04.1

6.8.0-51.52.1~22.04.1

6.8.0-52.53.1~22.04.1

6.8.0-54.56.1~22.04.1

6.8.0-55.57.1~22.04.1

6.8.0-56.58.1~22.04.1

6.8.0-57.59.1~22.04.1

6.8.0-58.60.1~22.04.1

6.8.0-59.61.1~22.04.1

6.8.0-60.63.1~22.04.1

6.8.0-62.65.1~22.04.1

6.8.0-63.66.1~22.04.1

6.8.0-64.67.1~22.04.1

6.8.0-65.68.1~22.04.1

6.8.0-78.78.1~22.04.1

6.8.0-79.79.1~22.04.1

6.8.0-83.83.1~22.04.1

6.8.0-84.84.1~22.04.1

6.8.0-85.85.1~22.04.1

6.8.0-86.87.1~22.04.1

6.8.0-87.88.1~22.04.1

6.8.0-88.89.1~22.04.1

6.8.0-90.91.1~22.04.1

6.8.0-94.96.1~22.04.1

6.8.0-100.100.1~22.04.1

6.8.0-101.101.1~22.04.1

6.8.0-106.106.1~22.04.1

6.8.0-107.107.1~22.04.1

6.8.0-110.110.1~22.04.1

6.8.0-111.111.1~22.04.1

6.8.0-117.117.1~22.04.1

6.8.0-134.134.1~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-headers-6.8.0-136",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia

Package

Name: linux-nvidia
Purl: pkg:deb/ubuntu/linux-nvidia?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1005.5

5.15.0-1007.7

5.15.0-1010.10

5.15.0-1015.15

5.15.0-1017.17

5.15.0-1018.18

5.15.0-1023.23

5.15.0-1025.25

5.15.0-1026.26

5.15.0-1027.27

5.15.0-1028.28

5.15.0-1029.29

5.15.0-1030.30

5.15.0-1031.31

5.15.0-1032.32

5.15.0-1033.33

5.15.0-1037.37

5.15.0-1039.39

5.15.0-1040.40

5.15.0-1041.41

5.15.0-1042.42

5.15.0-1043.43

5.15.0-1044.44

5.15.0-1045.45

5.15.0-1046.46

5.15.0-1047.47

5.15.0-1048.48

5.15.0-1053.54

5.15.0-1054.55

5.15.0-1055.56

5.15.0-1058.59

5.15.0-1059.60

5.15.0-1060.61

5.15.0-1061.62

5.15.0-1062.63

5.15.0-1063.64

5.15.0-1064.65

5.15.0-1065.66

5.15.0-1066.67

5.15.0-1067.68

5.15.0-1068.69

5.15.0-1069.70

5.15.0-1070.71

5.15.0-1071.72

5.15.0-1072.73

5.15.0-1073.74

5.15.0-1074.75

5.15.0-1075.76

5.15.0-1076.77

5.15.0-1077.78

5.15.0-1078.79

5.15.0-1079.80

5.15.0-1080.81

5.15.0-1081.82

5.15.0-1082.83

5.15.0-1083.84

5.15.0-1085.86

5.15.0-1086.87

5.15.0-1087.88

5.15.0-1088.89

5.15.0-1090.91

5.15.0-1091.92

5.15.0-1092.93

5.15.0-1093.94

5.15.0-1094.95

5.15.0-1095.96

5.15.0-1096.97

5.15.0-1098.99

5.15.0-1099.100

5.15.0-1100.101

5.15.0-1101.102

5.15.0-1103.104

5.15.0-1104.105

5.15.0-1106.107

5.15.0-1107.108

5.15.0-1108.109

5.15.0-1109.110

5.15.0-1110.111

5.15.0-1111.112

5.15.0-1112.113

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-cloud-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-cloud-tools-common",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-headers-5.15.0-1112",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-tools-common",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-tools-host",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-6.2

Package

Name: linux-nvidia-6.2
Purl: pkg:deb/ubuntu/linux-nvidia-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1003.3~22.04.1

6.2.0-1009.9

6.2.0-1010.10

6.2.0-1011.11

6.2.0-1012.12

6.2.0-1013.13

6.2.0-1015.15

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-headers-6.2.0-1015",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-tools-6.2.0-1015",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-tools-host",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-6.5

Package

Name: linux-nvidia-6.5
Purl: pkg:deb/ubuntu/linux-nvidia-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1004.4

6.5.0-1007.7

6.5.0-1013.13

6.5.0-1014.14

6.5.0-1015.15

6.5.0-1018.18

6.5.0-1019.19

6.5.0-1021.22

6.5.0-1022.23

6.5.0-1023.24

6.5.0-1024.25

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-headers-6.5.0-1024",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-tools-host",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-6.8

Package

Name: linux-nvidia-6.8
Purl: pkg:deb/ubuntu/linux-nvidia-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1059.62~22.04.1

Affected versions

6.*

6.8.0-1008.8~22.04.1

6.8.0-1009.9~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1011.11~22.04.1

6.8.0-1012.12~22.04.1

6.8.0-1013.14~22.04.1

6.8.0-1014.15~22.04.1

6.8.0-1015.16~22.04.1

6.8.0-1017.19~22.04.1

6.8.0-1018.20~22.04.1

6.8.0-1019.21~22.04.1

6.8.0-1020.22~22.04.1

6.8.0-1021.23~22.04.1

6.8.0-1022.25~22.04.2

6.8.0-1023.26~22.04.1

6.8.0-1024.27~22.04.1

6.8.0-1025.28~22.04.1

6.8.0-1026.29~22.04.1

6.8.0-1027.30~22.04.1

6.8.0-1028.31~22.04.1

6.8.0-1029.32~22.04.1

6.8.0-1030.33~22.04.1

6.8.0-1031.34~22.04.1

6.8.0-1032.35~22.04.1

6.8.0-1035.38~22.04.1

6.8.0-1036.39~22.04.1

6.8.0-1038.41~22.04.1

6.8.0-1039.42~22.04.1

6.8.0-1040.43~22.04.1

6.8.0-1041.44~22.04.2

6.8.0-1042.45~22.04.1

6.8.0-1043.46~22.04.1

6.8.0-1044.47~22.04.1

6.8.0-1045.48~22.04.1

6.8.0-1046.49~22.04.1

6.8.0-1047.50~22.04.1

6.8.0-1049.52~22.04.1

6.8.0-1050.53~22.04.1

6.8.0-1051.54~22.04.1

6.8.0-1052.55~22.04.1

6.8.0-1054.57~22.04.1

6.8.0-1055.58~22.04.1

6.8.0-1058.61~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-nvidia-6.8-headers-6.8.0-1059",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-nvidia-6.8-tools-6.8.0-1059",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-tegra

Package

Name: linux-nvidia-tegra
Purl: pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1009.9

5.15.0-1010.10

5.15.0-1012.12

5.15.0-1013.13

5.15.0-1014.14

5.15.0-1015.15

5.15.0-1016.16

5.15.0-1017.17

5.15.0-1018.18

5.15.0-1019.19

5.15.0-1020.20

5.15.0-1021.21

5.15.0-1022.22

5.15.0-1025.25

5.15.0-1026.26

5.15.0-1027.27

5.15.0-1028.28

5.15.0-1030.30

5.15.0-1032.32

5.15.0-1033.33

5.15.0-1034.34

5.15.0-1035.35

5.15.0-1036.36

5.15.0-1037.37

5.15.0-1038.38

5.15.0-1039.39

5.15.0-1040.40

5.15.0-1041.41

5.15.0-1042.42

5.15.0-1043.43

5.15.0-1044.44

5.15.0-1045.45

5.15.0-1046.46

5.15.0-1047.47

5.15.0-1048.48

5.15.0-1049.49

5.15.0-1050.50

5.15.0-1051.51

5.15.0-1052.52

5.15.0-1053.53

5.15.0-1055.55

5.15.0-1056.56

5.15.0-1057.57

5.15.0-1058.58

5.15.0-1060.60

5.15.0-1061.61

5.15.0-1063.63

5.15.0-1064.66

5.15.0-1065.67

5.15.0-1066.68

5.15.0-1067.69

5.15.0-1068.70

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-nvidia-tegra-headers-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-nvidia-tegra-tools-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-tegra-igx

Package

Name: linux-nvidia-tegra-igx
Purl: pkg:deb/ubuntu/linux-nvidia-tegra-igx?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1001.1

5.15.0-1002.2

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1006.6

5.15.0-1007.7

5.15.0-1008.8

5.15.0-1009.9

5.15.0-1012.12

5.15.0-1013.13

5.15.0-1015.15

5.15.0-1016.16

5.15.0-1018.18

5.15.0-1019.19

5.15.0-1020.20

5.15.0-1021.21

5.15.0-1022.22

5.15.0-1023.23

5.15.0-1024.24

5.15.0-1026.26

5.15.0-1027.27

5.15.0-1028.28

5.15.0-1029.29

5.15.0-1030.30

5.15.0-1031.31

5.15.0-1032.32

5.15.0-1033.33

5.15.0-1034.34

5.15.0-1035.35

5.15.0-1036.36

5.15.0-1037.37

5.15.0-1038.38

5.15.0-1039.39

5.15.0-1040.40

5.15.0-1041.41

5.15.0-1042.42

5.15.0-1044.44

5.15.0-1045.45

5.15.0-1046.46

5.15.0-1047.47

5.15.0-1049.49

5.15.0-1050.50

5.15.0-1052.52

5.15.0-1053.53

5.15.0-1054.54

5.15.0-1055.55

5.15.0-1056.56

5.15.0-1057.57

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-nvidia-tegra-igx-headers-5.15.0-1057",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-nvidia-tegra-igx-tools-5.15.0-1057",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-5.17

Package

Name: linux-oem-5.17
Purl: pkg:deb/ubuntu/linux-oem-5.17?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.17.0-1003.3

5.17.0-1004.4

5.17.0-1006.6

5.17.0-1011.12

5.17.0-1012.13

5.17.0-1013.14

5.17.0-1014.15

5.17.0-1015.16

5.17.0-1016.17

5.17.0-1017.18

5.17.0-1018.19

5.17.0-1019.20

5.17.0-1020.21

5.17.0-1021.22

5.17.0-1024.25

5.17.0-1025.26

5.17.0-1026.27

5.17.0-1027.28

5.17.0-1028.29

5.17.0-1029.30

5.17.0-1030.31

5.17.0-1031.32

5.17.0-1032.33

5.17.0-1033.34

5.17.0-1034.35

5.17.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-headers-5.17.0-1035",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-5.17.0-1035",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-host",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.0

Package

Name: linux-oem-6.0
Purl: pkg:deb/ubuntu/linux-oem-6.0?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.0-1006.6

6.0.0-1007.7

6.0.0-1008.8

6.0.0-1009.9

6.0.0-1010.10

6.0.0-1011.11

6.0.0-1012.12

6.0.0-1013.13

6.0.0-1014.14

6.0.0-1015.15

6.0.0-1016.16

6.0.0-1017.17

6.0.0-1018.18

6.0.0-1019.19

6.0.0-1020.20

6.0.0-1021.21

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-headers-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-image-unsigned-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-headers-6.0.0-1021",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-tools-6.0.0-1021",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-tools-host",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-tools-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.1

Package

Name: linux-oem-6.1
Purl: pkg:deb/ubuntu/linux-oem-6.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.1.0-1004.4

6.1.0-1006.6

6.1.0-1007.7

6.1.0-1008.8

6.1.0-1009.9

6.1.0-1010.10

6.1.0-1012.12

6.1.0-1013.13

6.1.0-1014.14

6.1.0-1015.15

6.1.0-1016.16

6.1.0-1017.17

6.1.0-1019.19

6.1.0-1020.20

6.1.0-1021.21

6.1.0-1022.22

6.1.0-1023.23

6.1.0-1024.24

6.1.0-1025.25

6.1.0-1026.26

6.1.0-1027.27

6.1.0-1028.28

6.1.0-1029.29

6.1.0-1033.33

6.1.0-1034.34

6.1.0-1035.35

6.1.0-1036.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-headers-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-image-unsigned-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-headers-6.1.0-1036",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-tools-6.1.0-1036",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-tools-host",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-tools-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.5

Package

Name: linux-oem-6.5
Purl: pkg:deb/ubuntu/linux-oem-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1003.3

6.5.0-1004.4

6.5.0-1006.6

6.5.0-1007.7

6.5.0-1008.8

6.5.0-1009.10

6.5.0-1011.12

6.5.0-1013.14

6.5.0-1014.15

6.5.0-1015.16

6.5.0-1016.17

6.5.0-1018.19

6.5.0-1019.20

6.5.0-1020.21

6.5.0-1022.23

6.5.0-1023.24

6.5.0-1024.25

6.5.0-1025.26

6.5.0-1027.28

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-usbio-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-headers-6.5.0-1027",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-tools-6.5.0-1027",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-tools-host",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.10

5.15.0-1001.3

5.15.0-1002.4

5.15.0-1003.5

5.15.0-1006.8

5.15.0-1007.9

5.15.0-1009.12

5.15.0-1011.15

5.15.0-1013.17

5.15.0-1016.20

5.15.0-1017.22

5.15.0-1018.23

5.15.0-1019.24

5.15.0-1021.27

5.15.0-1022.28

5.15.0-1025.31

5.15.0-1026.32

5.15.0-1027.33

5.15.0-1029.35

5.15.0-1030.36

5.15.0-1032.38

5.15.0-1033.39

5.15.0-1034.40

5.15.0-1035.41

5.15.0-1036.42

5.15.0-1037.43

5.15.0-1038.44

5.15.0-1039.45

5.15.0-1040.46

5.15.0-1041.47

5.15.0-1042.48

5.15.0-1044.50

5.15.0-1045.51

5.15.0-1046.52

5.15.0-1047.53

5.15.0-1048.54

5.15.0-1049.55

5.15.0-1050.56

5.15.0-1051.57

5.15.0-1052.58

5.15.0-1053.59

5.15.0-1054.60

5.15.0-1055.61

5.15.0-1058.64

5.15.0-1059.65

5.15.0-1060.66

5.15.0-1061.67

5.15.0-1062.68

5.15.0-1063.69

5.15.0-1064.70

5.15.0-1065.71

5.15.0-1066.72

5.15.0-1067.73

5.15.0-1068.74

5.15.0-1069.75

5.15.0-1070.76

5.15.0-1071.77

5.15.0-1072.78

5.15.0-1073.79

5.15.0-1074.80

5.15.0-1075.81

5.15.0-1076.82

5.15.0-1077.83

5.15.0-1078.84

5.15.0-1079.85

5.15.0-1080.86

5.15.0-1081.87

5.15.0-1082.88

5.15.0-1083.89

5.15.0-1084.90

5.15.0-1085.91

5.15.0-1086.92

5.15.0-1088.94

5.15.0-1089.95

5.15.0-1090.96

5.15.0-1091.97

5.15.0-1092.98

5.15.0-1093.99

5.15.0-1094.100

5.15.0-1095.101

5.15.0-1096.102

5.15.0-1097.103

5.15.0-1098.104

5.15.0-1100.106

5.15.0-1101.107

5.15.0-1102.108

5.15.0-1103.109

5.15.0-1105.111

5.15.0-1106.112

5.15.0-1108.114

5.15.0-1109.115

5.15.0-1110.116

5.15.0-1111.117

5.15.0-1112.118

5.15.0-1113.119

5.15.0-1114.120

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-oracle-headers-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-oracle-tools-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-6.5

Package

Name: linux-oracle-6.5
Purl: pkg:deb/ubuntu/linux-oracle-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1013.13~22.04.4

6.5.0-1014.14~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1018.18~22.04.1

6.5.0-1019.19~22.04.1

6.5.0-1020.20~22.04.1

6.5.0-1021.21~22.04.1

6.5.0-1023.23~22.04.1

6.5.0-1024.24~22.04.1

6.5.0-1025.25~22.04.1

6.5.0-1026.26~22.04.1

6.5.0-1027.27~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.5-headers-6.5.0-1027",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.5-tools-6.5.0-1027",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-6.8

Package

Name: linux-oracle-6.8
Purl: pkg:deb/ubuntu/linux-oracle-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1058.61~22.04.1

Affected versions

6.*

6.8.0-1006.6~22.04.3

6.8.0-1008.8~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1011.11~22.04.1

6.8.0-1012.12~22.04.1

6.8.0-1013.13~22.04.1

6.8.0-1014.14~22.04.1

6.8.0-1015.15~22.04.1

6.8.0-1016.17~22.04.1

6.8.0-1017.18~22.04.1

6.8.0-1018.19~22.04.1

6.8.0-1019.20~22.04.1

6.8.0-1020.21~22.04.1

6.8.0-1021.22~22.04.1

6.8.0-1022.23~22.04.1

6.8.0-1023.24~22.04.1

6.8.0-1024.25~22.04.1

6.8.0-1025.26~22.04.1

6.8.0-1026.27~22.04.1

6.8.0-1027.28~22.04.1

6.8.0-1028.29~22.04.1

6.8.0-1029.30~22.04.1

6.8.0-1030.31~22.04.1

6.8.0-1032.33~22.04.1

6.8.0-1033.34~22.04.1

6.8.0-1035.36~22.04.1

6.8.0-1037.38~22.04.1

6.8.0-1038.39~22.04.1

6.8.0-1039.40~22.04.1

6.8.0-1040.41~22.04.1

6.8.0-1041.42~22.04.1

6.8.0-1042.43~22.04.1

6.8.0-1043.44~22.04.1

6.8.0-1044.45~22.04.1

6.8.0-1047.48~22.04.1

6.8.0-1049.50~22.04.1

6.8.0-1050.51~22.04.1

6.8.0-1052.53~22.04.1

6.8.0-1054.55~22.04.1

6.8.0-1057.58~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.8-headers-6.8.0-1058",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.8-tools-6.8.0-1058",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9

5.15.0-1002.2

5.15.0-1003.3

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1006.6

5.15.0-1008.8

5.15.0-1011.13

5.15.0-1012.14

5.15.0-1013.15

5.15.0-1014.16

5.15.0-1015.17

5.15.0-1016.18

5.15.0-1017.19

5.15.0-1018.20

5.15.0-1021.23

5.15.0-1022.24

5.15.0-1023.25

5.15.0-1024.26

5.15.0-1025.27

5.15.0-1026.28

5.15.0-1027.29

5.15.0-1028.30

5.15.0-1029.31

5.15.0-1030.32

5.15.0-1032.35

5.15.0-1033.36

5.15.0-1034.37

5.15.0-1035.38

5.15.0-1036.39

5.15.0-1037.40

5.15.0-1038.41

5.15.0-1040.43

5.15.0-1041.44

5.15.0-1042.45

5.15.0-1043.46

5.15.0-1044.47

5.15.0-1045.48

5.15.0-1046.49

5.15.0-1047.50

5.15.0-1048.51

5.15.0-1049.52

5.15.0-1050.53

5.15.0-1053.56

5.15.0-1054.57

5.15.0-1055.58

5.15.0-1058.61

5.15.0-1059.62

5.15.0-1060.63

5.15.0-1061.64

5.15.0-1062.65

5.15.0-1063.66

5.15.0-1064.67

5.15.0-1065.68

5.15.0-1066.69

5.15.0-1067.70

5.15.0-1070.73

5.15.0-1071.74

5.15.0-1072.75

5.15.0-1073.76

5.15.0-1074.77

5.15.0-1075.78

5.15.0-1076.79

5.15.0-1077.80

5.15.0-1078.81

5.15.0-1079.82

5.15.0-1080.83

5.15.0-1083.86

5.15.0-1084.87

5.15.0-1085.88

5.15.0-1086.89

5.15.0-1087.90

5.15.0-1089.92

5.15.0-1090.93

5.15.0-1091.94

5.15.0-1092.95

5.15.0-1093.96

5.15.0-1097.100

5.15.0-1098.101

5.15.0-1099.102

5.15.0-1100.103

5.15.0-1102.105

5.15.0-1103.106

5.15.0-1105.108

5.15.0-1106.109

5.15.0-1108.111

5.15.0-1110.113

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-image-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-raspi-headers-5.15.0-1110",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-raspi-tools-5.15.0-1110",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1032.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1004.4

5.13.0-1006.6+22.04.1

5.13.0-1007.7+22.04.1

5.13.0-1010.11+22.04.1

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1006.6

5.15.0-1007.7

5.15.0-1008.8

5.15.0-1011.12

5.15.0-1012.13

5.15.0-1014.16

5.15.0-1015.17

5.15.0-1016.18

5.15.0-1017.19

5.15.0-1018.21

5.15.0-1019.22

5.15.0-1020.23

5.15.0-1022.26

5.15.0-1023.27

5.15.0-1026.30

5.15.0-1027.31

5.15.0-1028.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-image-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-headers-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-tools-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-5.19

Package

Name: linux-riscv-5.19
Purl: pkg:deb/ubuntu/linux-riscv-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1012.13~22.04.1

5.19.0-1015.16~22.04.1

5.19.0-1016.17~22.04.1

5.19.0-1017.18~22.04.1

5.19.0-1018.19~22.04.1

5.19.0-1019.21~22.04.1

5.19.0-1020.22~22.04.1

5.19.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.19-headers-5.19.0-1021",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.19-tools-5.19.0-1021",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-6.5

Package

Name: linux-riscv-6.5
Purl: pkg:deb/ubuntu/linux-riscv-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-17.17.1.1~22.04.1

6.5.0-21.21.1~22.04.1

6.5.0-25.25.1~22.04.1

6.5.0-26.26.1~22.04.1

6.5.0-27.28.1~22.04.1

6.5.0-28.29.1~22.04.1

6.5.0-35.35.1~22.04.1

6.5.0-40.40.1~22.04.1

6.5.0-42.42.1~22.04.1

6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-6.8

Package

Name: linux-riscv-6.8
Purl: pkg:deb/ubuntu/linux-riscv-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-136.136~22.04.3

Affected versions

6.*

6.8.0-38.38.1~22.04.1

6.8.0-39.39.1~22.04.1

6.8.0-40.40.1~22.04.1

6.8.0-41.41.1~22.04.1

6.8.0-44.44.1~22.04.1

6.8.0-47.47.1~22.04.1

6.8.0-48.48.1~22.04.2

6.8.0-49.49.1~22.04.1

6.8.0-50.51.1~22.04.1

6.8.0-51.52.1~22.04.1

6.8.0-52.53.1~22.04.1

6.8.0-53.55.1~22.04.1

6.8.0-55.57.1~22.04.1

6.8.0-56.58.1~22.04.1

6.8.0-57.59.1~22.04.1

6.8.0-58.60.1~22.04.1

6.8.0-59.61.1~22.04.1

6.8.0-62.65~22.04.1

6.8.0-63.66~22.04.1

6.8.0-64.67~22.04.1

6.8.0-71.71~22.04.1

6.8.0-78.78~22.04.1

6.8.0-79.79~22.04.1

6.8.0-83.83~22.04.1

6.8.0-84.84~22.04.1

6.8.0-86.87~22.04.1

6.8.0-87.88~22.04.1

6.8.0-88.89~22.04.1

6.8.0-90.91~22.04.1

6.8.0-94.96~22.04.1

6.8.0-100.100~22.04.1

6.8.0-101.101~22.04.1

6.8.0-106.106~22.04.1

6.8.0-107.107~22.04.1

6.8.0-110.110~22.04.1

6.8.0-111.111~22.04.1

6.8.0-117.117~22.04.1

6.8.0-124.124~22.04.1

6.8.0-134.134~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.3"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.3"
        },
        {
            "binary_name":  "linux-image-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.3"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.3"
        },
        {
            "binary_name":  "linux-riscv-6.8-headers-6.8.0-136",
            "binary_version":  "6.8.0-136.136~22.04.3"
        },
        {
            "binary_name":  "linux-riscv-6.8-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136~22.04.3"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136~22.04.3"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-starfive-5.19

Package

Name: linux-starfive-5.19
Purl: pkg:deb/ubuntu/linux-starfive-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1014.16~22.04.1

5.19.0-1015.17~22.04.1

5.19.0-1016.18~22.04.1

5.19.0-1017.19~22.04.1

5.19.0-1018.20~22.04.1

5.19.0-1019.21~22.04.1

5.19.0-1020.22~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-5.19-headers-5.19.0-1020",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-5.19-tools-5.19.0-1020",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-starfive-6.2

Package

Name: linux-starfive-6.2
Purl: pkg:deb/ubuntu/linux-starfive-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1006.7~22.04.1

6.2.0-1007.8~22.04.1

6.2.0-1009.10~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.2-headers-6.2.0-1009",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.2-tools-6.2.0-1009",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-starfive-6.5

Package

Name: linux-starfive-6.5
Purl: pkg:deb/ubuntu/linux-starfive-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1007.8~22.04.1

6.5.0-1008.9~22.04.1

6.5.0-1009.10~22.04.1

6.5.0-1010.11~22.04.1

6.5.0-1011.12~22.04.1

6.5.0-1012.13~22.04.1

6.5.0-1014.15~22.04.1

6.5.0-1015.16~22.04.1

6.5.0-1016.17~22.04.1

6.5.0-1017.18~22.04.1

6.5.0-1018.19~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.5-headers-6.5.0-1018",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.5-tools-6.5.0-1018",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-xilinx-zynqmp

Package

Name: linux-xilinx-zynqmp
Purl: pkg:deb/ubuntu/linux-xilinx-zynqmp?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1022.26

5.15.0-1023.27

5.15.0-1025.29

5.15.0-1027.31

5.15.0-1030.34

5.15.0-1031.35

5.15.0-1035.39

5.15.0-1036.40

5.15.0-1037.41

5.15.0-1038.42

5.15.0-1039.43

5.15.0-1041.45

5.15.0-1044.48

5.15.0-1046.50

5.15.0-1050.54

5.15.0-1051.55

5.15.0-1052.56

5.15.0-1053.57

5.15.0-1054.58

5.15.0-1055.59

5.15.0-1056.60

5.15.0-1057.61

5.15.0-1059.63

5.15.0-1060.64

5.15.0-1061.65

5.15.0-1062.66

5.15.0-1063.67

5.15.0-1064.68

5.15.0-1065.69

5.15.0-1067.71

5.15.0-1068.72

5.15.0-1069.73

5.15.0-1070.74

5.15.0-1074.78

5.15.0-1075.79

5.15.0-1076.80

5.15.0-1077.81

5.15.0-1078.82

5.15.0-1079.83

5.15.0-1080.84

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-image-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-xilinx-zynqmp-headers-5.15.0-1080",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-xilinx-zynqmp-tools-5.15.0-1080",
            "binary_version":  "5.15.0-1080.84"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:24.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-136.136

Affected versions

6.*

6.5.0-9.9

6.6.0-14.14

6.8.0-11.11

6.8.0-20.20

6.8.0-22.22

6.8.0-28.28

6.8.0-31.31

6.8.0-35.35

6.8.0-36.36

6.8.0-38.38

6.8.0-39.39

6.8.0-40.40

6.8.0-41.41

6.8.0-44.44

6.8.0-45.45

6.8.0-47.47

6.8.0-48.48

6.8.0-49.49

6.8.0-50.51

6.8.0-51.52

6.8.0-52.53

6.8.0-53.55

6.8.0-54.56

6.8.0-55.57

6.8.0-56.58

6.8.0-57.59

6.8.0-58.60

6.8.0-59.61

6.8.0-60.63

6.8.0-62.65

6.8.0-63.66

6.8.0-64.67

6.8.0-71.71

6.8.0-78.78

6.8.0-79.79

6.8.0-83.83

6.8.0-84.84

6.8.0-85.85

6.8.0-86.87

6.8.0-87.88

6.8.0-88.89

6.8.0-90.91

6.8.0-94.96

6.8.0-100.100

6.8.0-101.101

6.8.0-106.106

6.8.0-107.107

6.8.0-110.110

6.8.0-111.111

6.8.0-117.117

6.8.0-124.124

6.8.0-134.134

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-image-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-lib-rust-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-source-6.8.0",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-generic",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-generic-64k",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "6.8.0-136.136"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "6.8.0-136.136"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1061.64

Affected versions

6.*

6.5.0-1008.8

6.6.0-1001.1

6.8.0-1001.1

6.8.0-1006.6

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1016.17

6.8.0-1017.18

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1023.25

6.8.0-1024.26

6.8.0-1025.27

6.8.0-1026.28

6.8.0-1027.29

6.8.0-1028.30

6.8.0-1029.31

6.8.0-1030.32

6.8.0-1031.33

6.8.0-1032.34

6.8.0-1033.35

6.8.0-1035.37

6.8.0-1036.38

6.8.0-1038.40

6.8.0-1039.41

6.8.0-1040.42

6.8.0-1041.43

6.8.0-1042.44

6.8.0-1043.45

6.8.0-1044.46

6.8.0-1045.47

6.8.0-1046.49

6.8.0-1047.50

6.8.0-1050.53

6.8.0-1051.54

6.8.0-1052.55

6.8.0-1053.56

6.8.0-1055.58

6.8.0-1057.60

6.8.0-1060.63

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-aws-headers-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-aws-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-aws",
            "binary_version":  "6.8.0-1061.64"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-aws-64k",
            "binary_version":  "6.8.0-1061.64"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-6.14

Package

Name: linux-aws-6.14
Purl: pkg:deb/ubuntu/linux-aws-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1007.7~24.04.1

6.14.0-1009.9~24.04.1

6.14.0-1010.10~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

6.14.0-1015.15~24.04.1

6.14.0-1016.16~24.04.1

6.14.0-1017.17~24.04.1

6.14.0-1018.18~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.14-cloud-tools-6.14.0-1018",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.14-headers-6.14.0-1018",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.14-tools-6.14.0-1018",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1018-aws",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1018-aws-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-6.17

Package

Name: linux-aws-6.17
Purl: pkg:deb/ubuntu/linux-aws-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1005.5~24.04.2

6.17.0-1007.7~24.04.1

6.17.0-1009.9~24.04.2

6.17.0-1010.10~24.04.1

6.17.0-1012.12~24.04.1

6.17.0-1013.13~24.04.1

6.17.0-1015.15~24.04.1

6.17.0-1017.17~24.04.1

6.17.0-1019.19~24.04.1

6.17.0-1020.20~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.17-cloud-tools-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.17-headers-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.17-tools-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-aws",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-aws-64k",
            "binary_version":  "6.17.0-1020.20~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1063.71

Affected versions

6.*

6.5.0-1007.7

6.6.0-1001.1

6.8.0-1001.1

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1012.14

6.8.0-1013.15

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1017.20

6.8.0-1018.21

6.8.0-1020.23

6.8.0-1021.25

6.8.0-1025.30

6.8.0-1026.31

6.8.0-1027.32

6.8.0-1028.33

6.8.0-1029.34

6.8.0-1030.35

6.8.0-1031.36

6.8.0-1034.39

6.8.0-1038.44

6.8.0-1040.46

6.8.0-1041.47

6.8.0-1042.48

6.8.0-1044.50

6.8.0-1046.52

6.8.0-1051.57

6.8.0-1052.58

6.8.0-1054.60

6.8.0-1056.62

6.8.0-1058.64

6.8.0-1059.65

6.8.0-1062.69

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-azure-headers-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-azure-tools-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1063-azure",
            "binary_version":  "6.8.0-1063.71"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-6.11

Package

Name: linux-azure-6.11
Purl: pkg:deb/ubuntu/linux-azure-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1008.8~24.04.1

6.11.0-1012.12~24.04.1

6.11.0-1013.13~24.04.1

6.11.0-1014.14~24.04.1

6.11.0-1015.15~24.04.1

6.11.0-1017.17~24.04.1

6.11.0-1018.18~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.11-cloud-tools-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.11-headers-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.11-tools-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-6.14

Package

Name: linux-azure-6.14
Purl: pkg:deb/ubuntu/linux-azure-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1010.10~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

6.14.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.14-cloud-tools-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.14-headers-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.14-tools-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1017-azure",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-6.17

Package

Name: linux-azure-6.17
Purl: pkg:deb/ubuntu/linux-azure-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1008.8~24.04.1

6.17.0-1010.10~24.04.1

6.17.0-1011.11~24.04.2

6.17.0-1013.13~24.04.1

6.17.0-1015.15~24.04.1

6.17.0-1017.17~24.04.1

6.17.0-1018.18~24.04.1

6.17.0-1020.20~24.04.1

6.17.0-1021.21~24.04.1

6.17.0-1022.22

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.17-cloud-tools-6.17.0-1022",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-azure-6.17-headers-6.17.0-1022",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-azure-6.17-tools-6.17.0-1022",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1022-azure",
            "binary_version":  "6.17.0-1022.22"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1062.69

Affected versions

6.*

6.8.0-1041.48

6.8.0-1044.51

6.8.0-1046.53

6.8.0-1053.60

6.8.0-1058.65

6.8.0-1061.68

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-6.8.0-1062",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-azure-fde-headers-6.8.0-1062",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-azure-fde-tools-6.8.0-1062",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1062-azure-fde",
            "binary_version":  "6.8.0-1062.69"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde-6.14

Package

Name: linux-azure-fde-6.14
Purl: pkg:deb/ubuntu/linux-azure-fde-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

6.14.0-1015.15~24.04.1

6.14.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-6.14-cloud-tools-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.14-headers-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.14-tools-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1017-azure-fde",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-nvidia

Package

Name: linux-azure-nvidia
Purl: pkg:deb/ubuntu/linux-azure-nvidia?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1016.17

6.8.0-1018.19

6.8.0-1019.20

6.8.0-1022.23

6.8.0-1025.27

6.8.0-1027.30

6.8.0-1029.32

6.8.0-1039.42

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-nvidia-cloud-tools-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-azure-nvidia-headers-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-azure-nvidia-tools-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-nvidia-6.14

Package

Name: linux-azure-nvidia-6.14
Purl: pkg:deb/ubuntu/linux-azure-nvidia-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1003.3

6.14.0-1006.6

6.14.0-1007.7

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-nvidia-6.14-cloud-tools-6.14.0-1007",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-azure-nvidia-6.14-headers-6.14.0-1007",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-azure-nvidia-6.14-tools-6.14.0-1007",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1064.72

Affected versions

6.*

6.5.0-1007.7

6.6.0-1001.1

6.8.0-1002.2

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.9

6.8.0-1009.10

6.8.0-1010.11

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1024.26

6.8.0-1025.27

6.8.0-1026.28

6.8.0-1027.29

6.8.0-1028.30

6.8.0-1029.31

6.8.0-1030.32

6.8.0-1031.33

6.8.0-1032.34

6.8.0-1033.35

6.8.0-1034.36

6.8.0-1036.38

6.8.0-1037.39

6.8.0-1039.41

6.8.0-1040.42

6.8.0-1041.43

6.8.0-1042.45

6.8.0-1043.46

6.8.0-1044.47

6.8.0-1045.48

6.8.0-1046.49

6.8.0-1047.50

6.8.0-1048.51

6.8.0-1052.55

6.8.0-1053.56

6.8.0-1054.57

6.8.0-1055.58

6.8.0-1058.61

6.8.0-1060.63

6.8.0-1063.69

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-gcp-headers-6.8.0-1064",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-gcp-tools-6.8.0-1064",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1064-gcp",
            "binary_version":  "6.8.0-1064.72"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1064-gcp-64k",
            "binary_version":  "6.8.0-1064.72"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-6.11

Package

Name: linux-gcp-6.11
Purl: pkg:deb/ubuntu/linux-gcp-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1006.6~24.04.2

6.11.0-1011.11~24.04.1

6.11.0-1013.13~24.04.1

6.11.0-1014.14~24.04.1

6.11.0-1015.15~24.04.1

6.11.0-1016.16~24.04.1

6.11.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-headers-6.11.0-1017",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-lib-rust-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-tools-6.11.0-1017",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-6.14

Package

Name: linux-gcp-6.14
Purl: pkg:deb/ubuntu/linux-gcp-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1007.7~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1014.15~24.04.1

6.14.0-1015.16~24.04.1

6.14.0-1016.17~24.04.1

6.14.0-1017.18~24.04.1

6.14.0-1018.19~24.04.1

6.14.0-1019.20~24.04.1

6.14.0-1020.21~24.04.1

6.14.0-1021.22~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1021-gcp-64k",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.14-headers-6.14.0-1021",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.14-tools-6.14.0-1021",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1021-gcp-64k",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1021-gcp-64k",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-lib-rust-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1021-gcp-64k",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1021-gcp-64k",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1021-gcp",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1021-gcp-64k",
            "binary_version":  "6.14.0-1021.22~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-6.17

Package

Name: linux-gcp-6.17
Purl: pkg:deb/ubuntu/linux-gcp-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1004.4~24.04.3

6.17.0-1008.8~24.04.1

6.17.0-1009.9~24.04.3

6.17.0-1010.10~24.04.1

6.17.0-1012.12~24.04.1

6.17.0-1013.13~24.04.1

6.17.0-1016.17~24.04.1

6.17.0-1018.19~24.04.1

6.17.0-1020.22~24.04.1

6.17.0-1021.24~24.04.1

6.17.0-1022.25

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1022-gcp-64k",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-gcp-6.17-headers-6.17.0-1022",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-gcp-6.17-tools-6.17.0-1022",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1022-gcp-64k",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1022-gcp-64k",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-lib-rust-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1022-gcp-64k",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1022-gcp-64k",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1022-gcp",
            "binary_version":  "6.17.0-1022.25"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1022-gcp-64k",
            "binary_version":  "6.17.0-1022.25"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1059.67

Affected versions

6.*

6.8.0-1003.5

6.8.0-1004.7

6.8.0-1005.8

6.8.0-1006.9

6.8.0-1007.10

6.8.0-1008.11

6.8.0-1009.12

6.8.0-1010.13

6.8.0-1011.14

6.8.0-1012.15

6.8.0-1013.17

6.8.0-1014.18

6.8.0-1015.19

6.8.0-1016.20

6.8.0-1017.21

6.8.0-1019.23

6.8.0-1020.24

6.8.0-1021.25

6.8.0-1022.26

6.8.0-1023.27

6.8.0-1024.28

6.8.0-1025.29

6.8.0-1026.30

6.8.0-1027.31

6.8.0-1028.32

6.8.0-1029.33

6.8.0-1032.36

6.8.0-1033.37

6.8.0-1035.39

6.8.0-1036.40

6.8.0-1037.41

6.8.0-1038.43

6.8.0-1039.44

6.8.0-1040.45

6.8.0-1041.46

6.8.0-1042.47

6.8.0-1043.48

6.8.0-1044.49

6.8.0-1048.53

6.8.0-1049.54

6.8.0-1050.56

6.8.0-1051.57

6.8.0-1054.60

6.8.0-1055.61

6.8.0-1058.64

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-gke-64k",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-gke-headers-6.8.0-1059",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-gke-tools-6.8.0-1059",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-gke-64k",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-gke-64k",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-gke-64k",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1059-gke-64k",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-gke",
            "binary_version":  "6.8.0-1059.67"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-gke-64k",
            "binary_version":  "6.8.0-1059.67"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.50

Affected versions

6.*

6.8.0-1001.3

6.8.0-1002.4

6.8.0-1003.5

6.8.0-1004.6

6.8.0-1006.8

6.8.0-1007.9

6.8.0-1008.10

6.8.0-1009.11

6.8.0-1010.12

6.8.0-1011.13

6.8.0-1012.14

6.8.0-1013.15

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1022.24

6.8.0-1023.25

6.8.0-1024.26

6.8.0-1025.28

6.8.0-1026.29

6.8.0-1027.30

6.8.0-1028.31

6.8.0-1029.32

6.8.0-1030.33

6.8.0-1031.34

6.8.0-1035.38

6.8.0-1036.39

6.8.0-1037.40

6.8.0-1038.41

6.8.0-1041.44

6.8.0-1042.45

6.8.0-1045.48

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-gkeop-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-gkeop-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-gkeop",
            "binary_version":  "6.8.0-1046.50"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-6.11

Package

Name: linux-hwe-6.11
Purl: pkg:deb/ubuntu/linux-hwe-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-17.17~24.04.2

6.11.0-19.19~24.04.1

6.11.0-21.21~24.04.1

6.11.0-24.24~24.04.1

6.11.0-25.25~24.04.1

6.11.0-26.26~24.04.1

6.11.0-28.28~24.04.1

6.11.0-29.29~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-cloud-tools-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-headers-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-lib-rust-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-tools-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-vision-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-6.14

Package

Name: linux-hwe-6.14
Purl: pkg:deb/ubuntu/linux-hwe-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-24.24~24.04.3

6.14.0-27.27~24.04.1

6.14.0-28.28~24.04.1

6.14.0-29.29~24.04.1

6.14.0-32.32~24.04.1

6.14.0-33.33~24.04.1

6.14.0-34.34~24.04.1

6.14.0-35.35~24.04.1

6.14.0-36.36~24.04.1

6.14.0-37.37~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-37-generic-64k",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-37-generic-64k",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.14-cloud-tools-6.14.0-37",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.14-headers-6.14.0-37",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.14-tools-6.14.0-37",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-37-generic-64k",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-lib-rust-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-37-generic-64k",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-modules-vision-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-37-generic-64k",
            "binary_version":  "6.14.0-37.37~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-6.17

Package

Name: linux-hwe-6.17
Purl: pkg:deb/ubuntu/linux-hwe-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-14.14~24.04.1

6.17.0-19.19~24.04.2

6.17.0-20.20~24.04.1

6.17.0-22.22~24.04.1

6.17.0-23.23~24.04.1

6.17.0-29.29~24.04.1

6.17.0-35.35~24.04.1

6.17.0-40.40~24.04.1

6.17.0-41.41~24.04.1

6.17.0-42.42

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-42-generic-64k",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-headers-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-headers-6.17.0-42-generic-64k",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-hwe-6.17-cloud-tools-6.17.0-42",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-hwe-6.17-headers-6.17.0-42",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-hwe-6.17-tools-6.17.0-42",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-image-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-42-generic-64k",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-lib-rust-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-6.17.0-42-generic-64k",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-usbio-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-modules-vision-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-tools-6.17.0-42-generic",
            "binary_version":  "6.17.0-42.42"
        },
        {
            "binary_name":  "linux-tools-6.17.0-42-generic-64k",
            "binary_version":  "6.17.0-42.42"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-ibm

Package

Name: linux-ibm
Purl: pkg:deb/ubuntu/linux-ibm?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1061.62

Affected versions

6.*

6.5.0-1009.9

6.8.0-1001.1

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1014.14

6.8.0-1015.15

6.8.0-1016.16

6.8.0-1017.17

6.8.0-1018.18

6.8.0-1019.19

6.8.0-1022.22

6.8.0-1023.23

6.8.0-1024.24

6.8.0-1025.25

6.8.0-1026.26

6.8.0-1027.27

6.8.0-1028.28

6.8.0-1029.29

6.8.0-1030.30

6.8.0-1033.33

6.8.0-1036.36

6.8.0-1037.37

6.8.0-1038.38

6.8.0-1039.39

6.8.0-1040.40

6.8.0-1041.41

6.8.0-1042.42

6.8.0-1043.43

6.8.0-1044.44

6.8.0-1045.45

6.8.0-1049.49

6.8.0-1050.50

6.8.0-1051.51

6.8.0-1052.52

6.8.0-1055.56

6.8.0-1057.58

6.8.0-1060.61

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-ibm-headers-6.8.0-1061",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-ibm-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-ibm",
            "binary_version":  "6.8.0-1061.62"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency

Package

Name: linux-lowlatency
Purl: pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-136.136.2

Affected versions

6.*

6.5.0-9.9.1

6.6.0-14.14.1

6.8.0-7.7.1

6.8.0-25.25.3

6.8.0-28.28.1

6.8.0-31.31.1

6.8.0-35.35.1

6.8.0-36.36.1

6.8.0-38.38.1

6.8.0-39.39.1

6.8.0-40.40.1

6.8.0-41.41.1

6.8.0-44.44.1

6.8.0-45.45.1

6.8.0-47.47.1

6.8.0-48.48.3

6.8.0-49.49.1

6.8.0-50.51.1

6.8.0-51.52.1

6.8.0-52.53.1

6.8.0-53.55.2

6.8.0-54.56.1

6.8.0-55.57.1

6.8.0-56.58.1

6.8.0-57.59.1

6.8.0-58.60.1

6.8.0-59.61.1

6.8.0-60.63.1

6.8.0-62.65.1

6.8.0-63.66.1

6.8.0-64.67.1

6.8.0-65.68.1

6.8.0-78.78.1

6.8.0-79.79.1

6.8.0-83.83.1

6.8.0-84.84.1

6.8.0-85.85.1

6.8.0-86.87.1

6.8.0-87.88.1

6.8.0-88.89.1

6.8.0-90.91.1

6.8.0-94.96.1

6.8.0-100.100.1

6.8.0-101.101.1

6.8.0-106.106.1

6.8.0-107.107.1

6.8.0-110.110.1

6.8.0-111.111.1

6.8.0-117.117.1

6.8.0-134.134.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-lowlatency-headers-6.8.0-136",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-lowlatency-lib-rust-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-lowlatency-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-lowlatency",
            "binary_version":  "6.8.0-136.136.2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-lowlatency-64k",
            "binary_version":  "6.8.0-136.136.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency-hwe-6.11

Package

Name: linux-lowlatency-hwe-6.11
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1009.10~24.04.1

6.11.0-1011.12~24.04.1

6.11.0-1012.13~24.04.1

6.11.0-1013.14~24.04.1

6.11.0-1014.15~24.04.1

6.11.0-1015.16~24.04.2

6.11.0-1016.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-headers-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia

Package

Name: linux-nvidia
Purl: pkg:deb/ubuntu/linux-nvidia?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1059.62

Affected versions

6.*

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1022.25

6.8.0-1023.26

6.8.0-1024.27

6.8.0-1025.28

6.8.0-1026.29

6.8.0-1027.30

6.8.0-1028.31

6.8.0-1029.32

6.8.0-1030.33

6.8.0-1031.34

6.8.0-1032.35

6.8.0-1035.38

6.8.0-1036.39

6.8.0-1038.41

6.8.0-1039.42

6.8.0-1040.43

6.8.0-1041.44

6.8.0-1042.45

6.8.0-1043.46

6.8.0-1044.47

6.8.0-1045.48

6.8.0-1046.49

6.8.0-1047.50

6.8.0-1049.52

6.8.0-1050.53

6.8.0-1051.54

6.8.0-1052.55

6.8.0-1054.57

6.8.0-1055.58

6.8.0-1058.61

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-nvidia-headers-6.8.0-1059",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-nvidia-tools-6.8.0-1059",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-nvidia",
            "binary_version":  "6.8.0-1059.62"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-nvidia-64k",
            "binary_version":  "6.8.0-1059.62"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-6.11

Package

Name: linux-nvidia-6.11
Purl: pkg:deb/ubuntu/linux-nvidia-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1002.2

6.11.0-1003.3

6.11.0-1007.7

6.11.0-1010.10

6.11.0-1011.11

6.11.0-1012.12

6.11.0-1013.13

6.11.0-1016.16

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-headers-6.11.0-1016",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-lib-rust-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-6.17

Package

Name: linux-nvidia-6.17
Purl: pkg:deb/ubuntu/linux-nvidia-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1004.4

6.17.0-1008.8

6.17.0-1014.14

6.17.0-1018.18

6.17.0-1021.21

6.17.0-1026.26

6.17.0-1029.29

6.17.0-1031.31

6.17.0-1032.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1032-nvidia",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1032-nvidia-64k",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1032-nvidia",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1032-nvidia-64k",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1032-nvidia",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1032-nvidia-64k",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1032-nvidia",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1032-nvidia-64k",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.17.0-1032-nvidia",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.17.0-1032-nvidia-64k",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-nvidia-6.17-headers-6.17.0-1032",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-nvidia-6.17-tools-6.17.0-1032",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1032-nvidia",
            "binary_version":  "6.17.0-1032.32"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1032-nvidia-64k",
            "binary_version":  "6.17.0-1032.32"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-lowlatency

Package

Name: linux-nvidia-lowlatency
Purl: pkg:deb/ubuntu/linux-nvidia-lowlatency?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1059.62.1

Affected versions

6.*

6.8.0-1009.9.1

6.8.0-1011.11.1

6.8.0-1012.12.1

6.8.0-1013.14.1

6.8.0-1014.15.1

6.8.0-1015.16.1

6.8.0-1017.19.1

6.8.0-1018.20.1

6.8.0-1019.21.1

6.8.0-1020.22.1

6.8.0-1021.23.1

6.8.0-1022.25.2

6.8.0-1023.26.1

6.8.0-1024.27.1

6.8.0-1025.28.1

6.8.0-1026.29.1

6.8.0-1027.30.1

6.8.0-1028.31.1

6.8.0-1029.32.1

6.8.0-1030.33.1

6.8.0-1031.34.1

6.8.0-1032.35.1

6.8.0-1035.38.1

6.8.0-1036.39.1

6.8.0-1038.41.1

6.8.0-1039.42.1

6.8.0-1040.43.1

6.8.0-1041.44.1

6.8.0-1042.45.1

6.8.0-1043.46.1

6.8.0-1044.47.1

6.8.0-1045.48.1

6.8.0-1046.49.1

6.8.0-1047.50.1

6.8.0-1049.52.1

6.8.0-1050.53.1

6.8.0-1051.54.1

6.8.0-1052.55.1

6.8.0-1054.57.1

6.8.0-1055.58.1

6.8.0-1058.61.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1059-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1059-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1059-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1059-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1059-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-nvidia-lowlatency-headers-6.8.0-1059",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-nvidia-lowlatency-tools-6.8.0-1059",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-nvidia-lowlatency",
            "binary_version":  "6.8.0-1059.62.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1059-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1059.62.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-tegra

Package

Name: linux-nvidia-tegra
Purl: pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1030.31

Affected versions

6.*

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1016.16

6.8.0-1019.19

6.8.0-1020.20

6.8.0-1021.21

6.8.0-1022.22

6.8.0-1023.23

6.8.0-1024.24

6.8.0-1025.25

6.8.0-1026.26

6.8.0-1029.30

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1030-nvidia-tegra",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1030-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1030-nvidia-tegra",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1030-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1030-nvidia-tegra",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1030-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1030-nvidia-tegra",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1030-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1030-nvidia-tegra",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1030-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-nvidia-tegra-headers-6.8.0-1030",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-nvidia-tegra-tools-6.8.0-1030",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1030-nvidia-tegra",
            "binary_version":  "6.8.0-1030.31"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1030-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1030.31"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.11

Package

Name: linux-oem-6.11
Purl: pkg:deb/ubuntu/linux-oem-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1007.7

6.11.0-1008.8

6.11.0-1009.9

6.11.0-1010.10

6.11.0-1011.11

6.11.0-1012.12

6.11.0-1013.13

6.11.0-1015.15

6.11.0-1016.16

6.11.0-1017.17

6.11.0-1018.18

6.11.0-1020.20

6.11.0-1021.21

6.11.0-1022.22

6.11.0-1023.23

6.11.0-1024.24

6.11.0-1025.25

6.11.0-1027.27

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-usbio-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-vision-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-oem-6.11-headers-6.11.0-1027",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-oem-6.11-tools-6.11.0-1027",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.14

Package

Name: linux-oem-6.14
Purl: pkg:deb/ubuntu/linux-oem-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1004.4

6.14.0-1005.5

6.14.0-1006.6

6.14.0-1007.7

6.14.0-1008.8

6.14.0-1010.10

6.14.0-1011.11

6.14.0-1012.12

6.14.0-1013.13

6.14.0-1014.14

6.14.0-1015.15

6.14.0-1016.16

6.14.0-1017.17

6.14.0-1018.18

6.14.0-1019.19

6.14.0-1020.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-usbio-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-vision-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-oem-6.14-headers-6.14.0-1020",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-oem-6.14-tools-6.14.0-1020",
            "binary_version":  "6.14.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1020-oem",
            "binary_version":  "6.14.0-1020.20"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.17

Package

Name: linux-oem-6.17
Purl: pkg:deb/ubuntu/linux-oem-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1005.5

6.17.0-1006.6

6.17.0-1007.7

6.17.0-1008.8

6.17.0-1009.9

6.17.0-1010.10

6.17.0-1011.11

6.17.0-1012.12

6.17.0-1017.17

6.17.0-1020.20

6.17.0-1023.23

6.17.0-1024.24

6.17.0-1025.25

6.17.0-1028.28

6.17.0-1030.30

6.17.0-1032.32

6.17.0-1033.33

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-evdi-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-usbio-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-modules-vision-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-oem-6.17-headers-6.17.0-1033",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-oem-6.17-tools-6.17.0-1033",
            "binary_version":  "6.17.0-1033.33"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1033-oem",
            "binary_version":  "6.17.0-1033.33"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oem-6.8

Package

Name: linux-oem-6.8
Purl: pkg:deb/ubuntu/linux-oem-6.8?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1014.14

6.8.0-1016.16

6.8.0-1017.17

6.8.0-1018.18

6.8.0-1019.19

6.8.0-1020.20

6.8.0-1024.24

6.8.0-1025.25

6.8.0-1026.26

6.8.0-1027.27

6.8.0-1028.28

6.8.0-1029.29

6.8.0-1030.30

6.8.0-1031.31

6.8.0-1032.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-oem-6.8-headers-6.8.0-1032",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-oem-6.8-tools-6.8.0-1032",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1058.61

Affected versions

6.*

6.5.0-1010.10

6.6.0-1001.1

6.8.0-1001.1

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1008.8

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1014.14

6.8.0-1015.16

6.8.0-1016.17

6.8.0-1017.18

6.8.0-1018.19

6.8.0-1019.20

6.8.0-1020.21

6.8.0-1021.22

6.8.0-1022.23

6.8.0-1023.24

6.8.0-1024.25

6.8.0-1025.26

6.8.0-1026.27

6.8.0-1027.28

6.8.0-1028.29

6.8.0-1029.30

6.8.0-1030.31

6.8.0-1032.33

6.8.0-1033.34

6.8.0-1035.36

6.8.0-1037.38

6.8.0-1038.39

6.8.0-1039.40

6.8.0-1040.41

6.8.0-1041.42

6.8.0-1042.43

6.8.0-1043.44

6.8.0-1044.45

6.8.0-1047.48

6.8.0-1049.50

6.8.0-1050.51

6.8.0-1052.53

6.8.0-1054.55

6.8.0-1057.58

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-oracle-headers-6.8.0-1058",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-oracle-tools-6.8.0-1058",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1058-oracle",
            "binary_version":  "6.8.0-1058.61"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1058-oracle-64k",
            "binary_version":  "6.8.0-1058.61"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-6.14

Package

Name: linux-oracle-6.14
Purl: pkg:deb/ubuntu/linux-oracle-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1007.7~24.04.1

6.14.0-1009.9~24.04.1

6.14.0-1010.10~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

6.14.0-1015.15~24.04.1

6.14.0-1016.16~24.04.1

6.14.0-1017.17~24.04.1

6.14.0-1018.18~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1018-oracle",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1018-oracle-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1018-oracle",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1018-oracle-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1018-oracle",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1018-oracle-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1018-oracle",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1018-oracle-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1018-oracle",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1018-oracle-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.14-headers-6.14.0-1018",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.14-tools-6.14.0-1018",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1018-oracle",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1018-oracle-64k",
            "binary_version":  "6.14.0-1018.18~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-6.17

Package

Name: linux-oracle-6.17
Purl: pkg:deb/ubuntu/linux-oracle-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1004.4~24.04.2

6.17.0-1007.7~24.04.1

6.17.0-1009.9~24.04.1

6.17.0-1010.10~24.04.1

6.17.0-1011.11~24.04.1

6.17.0-1014.14~24.04.1

6.17.0-1016.16~24.04.1

6.17.0-1018.18~24.04.1

6.17.0-1019.19~24.04.3

6.17.0-1020.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-oracle",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-oracle-64k",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-oracle",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-oracle-64k",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-oracle",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-oracle-64k",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-oracle",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-oracle-64k",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1020-oracle",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1020-oracle-64k",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-oracle-6.17-headers-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-oracle-6.17-tools-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-oracle",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-oracle-64k",
            "binary_version":  "6.17.0-1020.20"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1061.65

Affected versions

6.*

6.5.0-1005.7

6.7.0-1001.1

6.8.0-1001.1

6.8.0-1002.2

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.10

6.8.0-1010.11

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.23

6.8.0-1020.24

6.8.0-1024.28

6.8.0-1028.32

6.8.0-1029.33

6.8.0-1030.34

6.8.0-1031.35

6.8.0-1032.36

6.8.0-1035.39

6.8.0-1036.40

6.8.0-1038.42

6.8.0-1039.43

6.8.0-1040.44

6.8.0-1041.45

6.8.0-1042.46

6.8.0-1043.47

6.8.0-1044.48

6.8.0-1045.49

6.8.0-1047.51

6.8.0-1048.52

6.8.0-1050.54

6.8.0-1051.55

6.8.0-1052.56

6.8.0-1053.57

6.8.0-1056.60

6.8.0-1057.61

6.8.0-1060.64

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-raspi",
            "binary_version":  "6.8.0-1061.65"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-raspi",
            "binary_version":  "6.8.0-1061.65"
        },
        {
            "binary_name":  "linux-image-6.8.0-1061-raspi",
            "binary_version":  "6.8.0-1061.65"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-raspi",
            "binary_version":  "6.8.0-1061.65"
        },
        {
            "binary_name":  "linux-raspi-headers-6.8.0-1061",
            "binary_version":  "6.8.0-1061.65"
        },
        {
            "binary_name":  "linux-raspi-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.65"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-raspi",
            "binary_version":  "6.8.0-1061.65"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi-realtime

Package

Name: linux-raspi-realtime
Purl: pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-2019.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.1-1015.16

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-headers-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-tools-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-9.9.1

6.8.0-20.20.1

6.8.0-28.28.1

6.8.0-31.31.1

6.8.0-35.35.1

6.8.0-36.36.1

6.8.0-38.38.1

6.8.0-39.39.1

6.8.0-40.40.1

6.8.0-41.41.1

6.8.0-44.44.1

6.8.0-47.47.1

6.8.0-48.48.1

6.8.0-49.49.1

6.8.0-50.51.1

6.8.0-51.52.1

6.8.0-52.53.1

6.8.0-53.55.1

6.8.0-55.57.1

6.8.0-56.58.1

6.8.0-57.59.1

6.8.0-58.60.1

6.8.0-59.61.1

6.8.0-60.63.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-riscv-headers-6.8.0-60",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-riscv-tools-6.8.0-60",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-6.14

Package

Name: linux-riscv-6.14
Purl: pkg:deb/ubuntu/linux-riscv-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-22.22.1~24.04.1

6.14.0-23.23.1~24.04.1

6.14.0-24.24.1~24.04.1

6.14.0-27.27.1~24.04.1

6.14.0-28.28.1~24.04.1

6.14.0-29.29.1~24.04.1

6.14.0-32.32.1~24.04.1

6.14.0-33.33.1~24.04.1

6.14.0-34.34.1~24.04.1

6.14.0-35.35.1~24.04.1

6.14.0-36.36.1~24.04.1

6.14.0-37.37.1~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.14-headers-6.14.0-37",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.14-tools-6.14.0-37",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-37-generic",
            "binary_version":  "6.14.0-37.37.1~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-6.17

Package

Name: linux-riscv-6.17
Purl: pkg:deb/ubuntu/linux-riscv-6.17?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-14.14.1~24.04.1

6.17.0-19.19.1~24.04.1

6.17.0-20.20.1~24.04.1

6.17.0-22.22.1~24.04.1

6.17.0-23.23.1~24.04.1

6.17.0-29.29.1~24.04.1

6.17.0-35.35.1~24.04.1

6.17.0-38.38.1~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-38-generic",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.17.0-38-generic",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.17.0-38-generic",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.17.0-38-generic",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.17-headers-6.17.0-38",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.17-tools-6.17.0-38",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.17.0-38-generic",
            "binary_version":  "6.17.0-38.38.1~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-xilinx

Package

Name: linux-xilinx
Purl: pkg:deb/ubuntu/linux-xilinx?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1033.34

Affected versions

6.*

6.8.0-1008.9

6.8.0-1009.10

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1017.18

6.8.0-1018.19

6.8.0-1019.20

6.8.0-1020.21

6.8.0-1021.22

6.8.0-1022.23

6.8.0-1023.24

6.8.0-1024.25

6.8.0-1028.29

6.8.0-1029.30

6.8.0-1032.33

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1033-xilinx",
            "binary_version":  "6.8.0-1033.34"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1033-xilinx",
            "binary_version":  "6.8.0-1033.34"
        },
        {
            "binary_name":  "linux-image-6.8.0-1033-xilinx",
            "binary_version":  "6.8.0-1033.34"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1033-xilinx",
            "binary_version":  "6.8.0-1033.34"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1033-xilinx",
            "binary_version":  "6.8.0-1033.34"
        },
        {
            "binary_name":  "linux-xilinx-headers-6.8.0-1033",
            "binary_version":  "6.8.0-1033.34"
        },
        {
            "binary_name":  "linux-xilinx-tools-6.8.0-1033",
            "binary_version":  "6.8.0-1033.34"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:25.10

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-15.15

6.15.0-3.3

6.15.0-4.4

6.16.0-13.13

6.16.0-16.16

6.17.0-3.3

6.17.0-4.4

6.17.0-5.5

6.17.0-6.6

6.17.0-7.7

6.17.0-8.8

6.17.0-12.12

6.17.0-14.14

6.17.0-19.19

6.17.0-20.20

6.17.0-22.22

6.17.0-23.23

6.17.0-29.29

6.17.0-35.35

6.17.0-40.40

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "bpftool",
            "binary_version":  "7.7.0+6.17.0-40.40"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-40-generic-64k",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-40",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-headers-6.17.0-40",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-headers-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-headers-6.17.0-40-generic-64k",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-image-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-40-generic-64k",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-lib-rust-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-6.17.0-40-generic-64k",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-usbio-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-modules-vision-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-perf",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-source-6.17.0",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-tools-6.17.0-40",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-tools-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-tools-6.17.0-40-generic-64k",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "6.17.0-40.40"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "6.17.0-40.40"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1005.5

6.14.0-1007.7+25.10.2

6.16.0-1001.1

6.17.0-1001.1

6.17.0-1002.2

6.17.0-1003.3

6.17.0-1004.4

6.17.0-1005.5

6.17.0-1006.6

6.17.0-1007.7

6.17.0-1009.9

6.17.0-1010.10

6.17.0-1012.12

6.17.0-1013.13

6.17.0-1015.15

6.17.0-1017.17

6.17.0-1019.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-6.17.0-1019",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-aws-headers-6.17.0-1019",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-aws-tools-6.17.0-1019",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1019-aws",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1019-aws-64k",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1019-aws",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1019-aws-64k",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1019-aws",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1019-aws-64k",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1019-aws",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1019-aws-64k",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1019-aws",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1019-aws-64k",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1019-aws",
            "binary_version":  "6.17.0-1019.19"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1019-aws-64k",
            "binary_version":  "6.17.0-1019.19"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1004.4

6.14.0-1007.7+25.10.1

6.16.0-1001.1

6.17.0-1002.2

6.17.0-1003.3

6.17.0-1004.4

6.17.0-1006.6

6.17.0-1007.7

6.17.0-1008.8

6.17.0-1010.10

6.17.0-1011.11

6.17.0-1013.13

6.17.0-1015.15

6.17.0-1017.17

6.17.0-1018.18

6.17.0-1020.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-azure-headers-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-azure-tools-6.17.0-1020",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-azure",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1020-azure",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-azure",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-azure",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-azure",
            "binary_version":  "6.17.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-azure",
            "binary_version":  "6.17.0-1020.20"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1003.3

6.17.0-1004.4

6.17.0-1005.5

6.17.0-1007.7

6.17.0-1008.8

6.17.0-1010.10

6.17.0-1012.12

6.17.0-1014.14

6.17.0-1015.15

6.17.0-1017.17

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-azure-fde-headers-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-azure-fde-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1006.6

6.14.0-1009.9+25.10.1

6.16.0-1001.1

6.17.0-1001.1

6.17.0-1002.2

6.17.0-1003.3

6.17.0-1004.4

6.17.0-1005.5

6.17.0-1006.6

6.17.0-1007.7

6.17.0-1009.9

6.17.0-1010.10

6.17.0-1012.12

6.17.0-1013.13

6.17.0-1016.17

6.17.0-1018.19

6.17.0-1020.22

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-gcp",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1020-gcp-64k",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-gcp-headers-6.17.0-1020",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-gcp-tools-6.17.0-1020",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-gcp",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1020-gcp-64k",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-gcp",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1020-gcp-64k",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-gcp",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1020-gcp-64k",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-gcp",
            "binary_version":  "6.17.0-1020.22"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1020-gcp-64k",
            "binary_version":  "6.17.0-1020.22"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1005.5

6.14.0-1007.7+25.10.1

6.16.0-1001.1

6.17.0-1001.1

6.17.0-1002.2

6.17.0-1003.3

6.17.0-1005.5

6.17.0-1006.6

6.17.0-1007.7

6.17.0-1009.9

6.17.0-1010.10

6.17.0-1011.11

6.17.0-1012.12

6.17.0-1014.14

6.17.0-1016.16

6.17.0-1018.18

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1018-oracle",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1018-oracle-64k",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1018-oracle",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1018-oracle-64k",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1018-oracle",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1018-oracle-64k",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1018-oracle",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1018-oracle-64k",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-oracle-headers-6.17.0-1018",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-oracle-tools-6.17.0-1018",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1018-oracle",
            "binary_version":  "6.17.0-1018.18"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1018-oracle-64k",
            "binary_version":  "6.17.0-1018.18"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1005.5

6.17.0-1003.3

6.17.0-1004.4

6.17.0-1005.5

6.17.0-1006.6

6.17.0-1007.7

6.17.0-1008.8

6.17.0-1010.10

6.17.0-1011.11

6.17.0-1013.13

6.17.0-1014.14

6.17.0-1017.17

6.17.0-1018.18

6.17.0-1021.21

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1021-raspi",
            "binary_version":  "6.17.0-1021.21"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1021-raspi",
            "binary_version":  "6.17.0-1021.21"
        },
        {
            "binary_name":  "linux-image-6.17.0-1021-raspi",
            "binary_version":  "6.17.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1021-raspi",
            "binary_version":  "6.17.0-1021.21"
        },
        {
            "binary_name":  "linux-raspi-headers-6.17.0-1021",
            "binary_version":  "6.17.0-1021.21"
        },
        {
            "binary_name":  "linux-raspi-tools-6.17.0-1021",
            "binary_version":  "6.17.0-1021.21"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1021-raspi",
            "binary_version":  "6.17.0-1021.21"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1002.2

6.17.0-1001.2

6.17.0-1002.3

6.17.0-1003.4

6.17.0-1004.5

6.17.0-1005.6

6.17.0-1006.7

6.17.0-1008.9

6.17.0-1009.10

6.17.0-1010.11

6.17.0-1011.12

6.17.0-1013.15

6.17.0-1014.16

6.17.0-1017.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-realtime-headers-6.17.0-1017",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-realtime-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.19"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1017-realtime",
            "binary_version":  "6.17.0-1017.19"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-13.13.2

6.17.0-4.4.1

6.17.0-5.5.1

6.17.0-6.6.1

6.17.0-7.7.1

6.17.0-8.8.1

6.17.0-12.12.1

6.17.0-14.14.1

6.17.0-19.19.1

6.17.0-20.20.1

6.17.0-22.22.1

6.17.0-23.23.1

6.17.0-29.29.1

6.17.0-35.35.1

6.17.0-40.40.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40.1"
        },
        {
            "binary_name":  "linux-headers-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40.1"
        },
        {
            "binary_name":  "linux-image-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40.1"
        },
        {
            "binary_name":  "linux-modules-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40.1"
        },
        {
            "binary_name":  "linux-riscv-headers-6.17.0-40",
            "binary_version":  "6.17.0-40.40.1"
        },
        {
            "binary_name":  "linux-riscv-tools-6.17.0-40",
            "binary_version":  "6.17.0-40.40.1"
        },
        {
            "binary_name":  "linux-tools-6.17.0-40-generic",
            "binary_version":  "6.17.0-40.40.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Nvidia-BlueField:22.04:LTS

linux-bluefield

Package

Name: linux-bluefield
Purl: pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1011.13

5.15.0-1014.16

5.15.0-1015.17

5.15.0-1017.19

5.15.0-1019.21

5.15.0-1021.23

5.15.0-1022.24

5.15.0-1023.25

5.15.0-1024.26

5.15.0-1027.29

5.15.0-1028.30

5.15.0-1031.33

5.15.0-1032.34

5.15.0-1033.35

5.15.0-1035.37

5.15.0-1036.38

5.15.0-1037.39

5.15.0-1038.40

5.15.0-1040.42

5.15.0-1042.44

5.15.0-1043.45

5.15.0-1044.46

5.15.0-1045.47

5.15.0-1047.49

5.15.0-1048.50

5.15.0-1050.52

5.15.0-1051.53

5.15.0-1052.54

5.15.0-1053.55

5.15.0-1054.56

5.15.0-1056.58

5.15.0-1057.59

5.15.0-1058.60

5.15.0-1059.61

5.15.0-1060.62

5.15.0-1061.63

5.15.0-1062.64

5.15.0-1063.65

5.15.0-1064.66

5.15.0-1065.67

5.15.0-1066.68

5.15.0-1067.69

5.15.0-1069.71

5.15.0-1070.72

5.15.0-1072.74

5.15.0-1074.76

5.15.0-1075.77

5.15.0-1076.78

5.15.0-1077.79

5.15.0-1079.81

5.15.0-1080.82

5.15.0-1081.83

5.15.0-1082.84

5.15.0-1083.85

5.15.0-1084.86

5.15.0-1085.87

5.15.0-1086.88

5.15.0-1087.89

5.15.0-1089.91

5.15.0-1090.92

5.15.0-1092.94

5.15.0-1093.95

5.15.0-1095.97

5.15.0-1096.98

5.15.0-1097.99

5.15.0-1098.100

5.15.0-1099.101

5.15.0-1100.102

5.15.0-1101.103

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-cloud-tools-common",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-bluefield-headers-5.15.0-1101",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-bluefield-tools-5.15.0-1101",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-bluefield-tools-host",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Nvidia-BlueField:24.04:LTS

linux-bluefield

Package

Name: linux-bluefield
Purl: pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1028.33

Affected versions

6.*

6.8.0-1011.15

6.8.0-1012.16

6.8.0-1013.17

6.8.0-1014.18

6.8.0-1016.20

6.8.0-1017.21

6.8.0-1022.26

6.8.0-1023.27

6.8.0-1026.30

Ecosystem specific

{
    "availability":  "Available for NVIDIA BlueField platforms",
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-headers-6.8.0-1028",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-bluefield-tools-6.8.0-1028",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1028-bluefield",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1028-bluefield-64k",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1028-bluefield",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1028-bluefield-64k",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1028-bluefield",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1028-bluefield-64k",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1028-bluefield",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1028-bluefield-64k",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1028-bluefield",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1028-bluefield-64k",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1028-bluefield",
            "binary_version":  "6.8.0-1028.33"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1028-bluefield-64k",
            "binary_version":  "6.8.0-1028.33"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:14.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.11.0-12.19

3.12.0-1.3

3.12.0-2.5

3.12.0-2.7

3.12.0-3.8

3.12.0-3.9

3.12.0-4.10

3.12.0-4.12

3.12.0-5.13

3.12.0-7.15

3.13.0-1.16

3.13.0-2.17

3.13.0-3.18

3.13.0-4.19

3.13.0-5.20

3.13.0-6.23

3.13.0-7.25

3.13.0-7.26

3.13.0-8.27

3.13.0-8.28

3.13.0-10.30

3.13.0-11.31

3.13.0-12.32

3.13.0-13.33

3.13.0-14.34

3.13.0-15.35

3.13.0-16.36

3.13.0-17.37

3.13.0-18.38

3.13.0-19.39

3.13.0-19.40

3.13.0-20.42

3.13.0-21.43

3.13.0-22.44

3.13.0-23.45

3.13.0-24.46

3.13.0-24.47

3.13.0-27.50

3.13.0-29.53

3.13.0-30.54

3.13.0-30.55

3.13.0-32.57

3.13.0-33.58

3.13.0-34.60

3.13.0-35.62

3.13.0-36.63

3.13.0-37.64

3.13.0-39.66

3.13.0-40.69

3.13.0-41.70

3.13.0-43.72

3.13.0-44.73

3.13.0-45.74

3.13.0-46.75

3.13.0-46.76

3.13.0-46.77

3.13.0-46.79

3.13.0-48.80

3.13.0-49.81

3.13.0-49.83

3.13.0-51.84

3.13.0-52.85

3.13.0-52.86

3.13.0-53.88

3.13.0-53.89

3.13.0-54.91

3.13.0-55.92

3.13.0-55.94

3.13.0-57.95

3.13.0-58.97

3.13.0-59.98

3.13.0-61.100

3.13.0-62.102

3.13.0-63.103

3.13.0-65.105

3.13.0-65.106

3.13.0-66.108

3.13.0-67.110

3.13.0-68.111

3.13.0-70.113

3.13.0-71.114

3.13.0-73.116

3.13.0-74.118

3.13.0-76.120

3.13.0-77.121

3.13.0-79.123

3.13.0-83.127

3.13.0-85.129

3.13.0-86.130

3.13.0-86.131

3.13.0-87.133

3.13.0-88.135

3.13.0-91.138

3.13.0-92.139

3.13.0-93.140

3.13.0-95.142

3.13.0-96.143

3.13.0-98.145

3.13.0-100.147

3.13.0-101.148

3.13.0-103.150

3.13.0-105.152

3.13.0-106.153

3.13.0-107.154

3.13.0-108.155

3.13.0-109.156

3.13.0-110.157

3.13.0-111.158

3.13.0-112.159

3.13.0-113.160

3.13.0-115.162

3.13.0-116.163

3.13.0-117.164

3.13.0-119.166

3.13.0-121.170

3.13.0-123.172

3.13.0-125.174

3.13.0-126.175

3.13.0-128.177

3.13.0-129.178

3.13.0-132.181

3.13.0-133.182

3.13.0-135.184

3.13.0-137.186

3.13.0-139.188

3.13.0-141.190

3.13.0-142.191

3.13.0-143.192

3.13.0-144.193

3.13.0-145.194

3.13.0-147.196

3.13.0-149.199

3.13.0-151.201

3.13.0-153.203

3.13.0-155.205

3.13.0-156.206

3.13.0-157.207

3.13.0-158.208

3.13.0-160.210

3.13.0-161.211

3.13.0-162.212

3.13.0-163.213

3.13.0-164.214

3.13.0-165.215

3.13.0-166.216

3.13.0-167.217

3.13.0-168.218

3.13.0-169.219

3.13.0-170.220

3.13.0-171.222

3.13.0-172.223

3.13.0-173.224

3.13.0-174.225

3.13.0-175.226

3.13.0-176.227

3.13.0-180.231

3.13.0-181.232

3.13.0-182.233

3.13.0-183.234

3.13.0-184.235

3.13.0-185.236

3.13.0-186.237

3.13.0-187.238

3.13.0-188.239

3.13.0-189.240

3.13.0-190.241

3.13.0-191.242

3.13.0-192.243

3.13.0-193.244

3.13.0-194.245

3.13.0-195.246

3.13.0-196.247

3.13.0-197.248

3.13.0-198.249

3.13.0-199.250

3.13.0-200.251

3.13.0-201.252

3.13.0-202.253

3.13.0-203.254

3.13.0-204.255

3.13.0-205.256

3.13.0-206.257

3.13.0-207.258

3.13.0-208.259

3.13.0-209.260

3.13.0-210.261

3.13.0-211.262

3.13.0-212.263

3.13.0-214.265

3.13.0-215.266

3.13.0-217.268

3.13.0-218.269

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "crypto-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "fat-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "fb-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "firewire-core-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "floppy-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "fs-core-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "fs-secondary-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "input-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "ipmi-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "irda-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "kernel-image-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-buildinfo-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-buildinfo-3.13.0-218-lowlatency",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-cloud-tools-3.13.0-218",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-cloud-tools-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-cloud-tools-3.13.0-218-lowlatency",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-headers-3.13.0-218",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-headers-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-headers-3.13.0-218-lowlatency",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-image-unsigned-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-image-unsigned-3.13.0-218-lowlatency",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-modules-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-modules-3.13.0-218-lowlatency",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-modules-extra-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-source-3.13.0",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-tools-3.13.0-218",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-tools-3.13.0-218-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-tools-3.13.0-218-lowlatency",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "md-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "message-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "mouse-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "multipath-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "nfs-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "nic-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "nic-pcmcia-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "nic-shared-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "nic-usb-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "parport-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "pata-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "pcmcia-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "pcmcia-storage-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "plip-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "ppp-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "sata-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "scsi-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "serial-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "speakup-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "squashfs-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "storage-core-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "usb-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "virtio-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        },
        {
            "binary_name":  "vlan-modules-3.13.0-218-generic-di",
            "binary_version":  "3.13.0-218.269"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.0-1002.2

4.4.0-1003.3

4.4.0-1005.5

4.4.0-1006.6

4.4.0-1009.9

4.4.0-1010.10

4.4.0-1011.11

4.4.0-1012.12

4.4.0-1014.14

4.4.0-1016.16

4.4.0-1017.17

4.4.0-1019.19

4.4.0-1022.22

4.4.0-1023.23

4.4.0-1024.25

4.4.0-1025.26

4.4.0-1027.30

4.4.0-1028.31

4.4.0-1029.32

4.4.0-1031.34

4.4.0-1032.35

4.4.0-1034.37

4.4.0-1036.39

4.4.0-1037.40

4.4.0-1038.41

4.4.0-1039.42

4.4.0-1040.43

4.4.0-1042.45

4.4.0-1044.47

4.4.0-1045.48

4.4.0-1046.50

4.4.0-1048.52

4.4.0-1050.54

4.4.0-1052.56

4.4.0-1054.58

4.4.0-1055.59

4.4.0-1056.60

4.4.0-1058.62

4.4.0-1059.63

4.4.0-1060.64

4.4.0-1061.65

4.4.0-1062.66

4.4.0-1064.68

4.4.0-1065.69

4.4.0-1066.70

4.4.0-1067.71

4.4.0-1073.77

4.4.0-1074.78

4.4.0-1075.79

4.4.0-1076.80

4.4.0-1077.81

4.4.0-1078.82

4.4.0-1081.85

4.4.0-1082.86

4.4.0-1083.87

4.4.0-1085.89

4.4.0-1086.90

4.4.0-1087.91

4.4.0-1088.92

4.4.0-1090.94

4.4.0-1091.95

4.4.0-1092.96

4.4.0-1093.97

4.4.0-1094.99

4.4.0-1095.100

4.4.0-1096.101

4.4.0-1097.102

4.4.0-1098.103

4.4.0-1099.104

4.4.0-1101.106

4.4.0-1102.107

4.4.0-1103.108

4.4.0-1104.109

4.4.0-1107.113

4.4.0-1109.115

4.4.0-1110.116

4.4.0-1111.117

4.4.0-1112.118

4.4.0-1113.119

4.4.0-1114.120

4.4.0-1115.121

4.4.0-1116.122

4.4.0-1117.123

4.4.0-1118.124

4.4.0-1119.125

4.4.0-1120.126

4.4.0-1121.127

4.4.0-1122.128

4.4.0-1123.129

4.4.0-1124.130

4.4.0-1125.131

4.4.0-1127.133

4.4.0-1128.134

4.4.0-1129.135

4.4.0-1130.136

4.4.0-1131.137

4.4.0-1133.139

4.4.0-1134.140

4.4.0-1135.141

4.4.0-1136.142

4.4.0-1137.143

4.4.0-1138.144

4.4.0-1139.145

4.4.0-1140.146

4.4.0-1141.147

4.4.0-1142.148

4.4.0-1143.149

4.4.0-1144.150

4.4.0-1145.151

4.4.0-1146.152

4.4.0-1147.153

4.4.0-1148.154

4.4.0-1149.155

4.4.0-1150.156

4.4.0-1151.157

4.4.0-1152.158

4.4.0-1153.159

4.4.0-1154.160

4.4.0-1155.161

4.4.0-1156.162

4.4.0-1157.163

4.4.0-1158.164

4.4.0-1159.165

4.4.0-1160.166

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-4.4.0-1160",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-aws-headers-4.4.0-1160",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-aws-tools-4.4.0-1160",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-1160-aws",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-1160-aws",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-headers-4.4.0-1160-aws",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-image-4.4.0-1160-aws",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-modules-4.4.0-1160-aws",
            "binary_version":  "4.4.0-1160.166"
        },
        {
            "binary_name":  "linux-tools-4.4.0-1160-aws",
            "binary_version":  "4.4.0-1160.166"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1023.24~14.04.1

4.15.0-1030.31~14.04.1

4.15.0-1031.32~14.04.1

4.15.0-1032.33~14.04.2

4.15.0-1035.36~14.04.2

4.15.0-1036.38~14.04.2

4.15.0-1037.39~14.04.2

4.15.0-1039.41~14.04.2

4.15.0-1040.44~14.04.1

4.15.0-1041.45~14.04.1

4.15.0-1042.46~14.04.1

4.15.0-1045.49~14.04.1

4.15.0-1046.50~14.04.1

4.15.0-1047.51~14.04.1

4.15.0-1049.54~14.04.1

4.15.0-1050.55~14.04.1

4.15.0-1051.56~14.04.1

4.15.0-1052.57~14.04.1

4.15.0-1055.60~14.04.1

4.15.0-1056.61~14.04.1

4.15.0-1057.62~14.04.1

4.15.0-1059.64~14.04.1

4.15.0-1060.65~14.04.1

4.15.0-1061.66~14.04.1

4.15.0-1063.68~14.04.1

4.15.0-1064.69~14.04.1

4.15.0-1066.71~14.04.1

4.15.0-1067.72~14.04.1

4.15.0-1069.74~14.04.1

4.15.0-1071.76~14.04.1

4.15.0-1074.79~14.04.1

4.15.0-1077.82~14.04.1

4.15.0-1082.92~14.04.1

4.15.0-1083.93~14.04.1

4.15.0-1089.99~14.04.1

4.15.0-1091.101~14.04.1

4.15.0-1092.102~14.04.1

4.15.0-1093.103~14.04.1

4.15.0-1095.105~14.04.1

4.15.0-1096.106~14.04.1

4.15.0-1098.109~14.04.1

4.15.0-1100.111~14.04.1

4.15.0-1102.113~14.04.1

4.15.0-1103.114~14.04.1

4.15.0-1106.118~14.04.1

4.15.0-1108.120~14.04.1

4.15.0-1109.121~14.04.1

4.15.0-1110.122~14.04.1

4.15.0-1111.123~14.04.1

4.15.0-1112.124~14.04.1

4.15.0-1113.126~14.04.1

4.15.0-1114.127~14.04.1

4.15.0-1115.128~14.04.1

4.15.0-1118.131~14.04.1

4.15.0-1121.134~14.04.1

4.15.0-1122.135~14.04.1

4.15.0-1123.136~14.04.1

4.15.0-1124.137~14.04.1

4.15.0-1125.138~14.04.1

4.15.0-1126.139~14.04.1

4.15.0-1127.140~14.04.1

4.15.0-1129.142~14.04.1

4.15.0-1130.143~14.04.1

4.15.0-1131.144~14.04.1

4.15.0-1133.146~14.04.1

4.15.0-1134.147~14.04.1

4.15.0-1136.149~14.04.1

4.15.0-1137.150~14.04.1

4.15.0-1138.151~14.04.1

4.15.0-1139.152~14.04.1

4.15.0-1142.156~14.04.1

4.15.0-1145.160~14.04.1

4.15.0-1146.161~14.04.1

4.15.0-1149.164~14.04.1

4.15.0-1150.165~14.04.1

4.15.0-1151.166~14.04.1

4.15.0-1153.168~14.04.1

4.15.0-1157.172~14.04.2

4.15.0-1158.173~14.04.1

4.15.0-1159.174~14.04.1

4.15.0-1162.177~14.04.1

4.15.0-1163.178~14.04.1

4.15.0-1164.179~14.04.1

4.15.0-1165.180~14.04.1

4.15.0-1166.181~14.04.1

4.15.0-1167.182~14.04.1

4.15.0-1168.183~14.04.1

4.15.0-1169.184~14.04.1

4.15.0-1170.185~14.04.1

4.15.0-1171.186~14.04.1

4.15.0-1172.187~14.04.1

4.15.0-1173.188~14.04.1

4.15.0-1174.189~14.04.1

4.15.0-1175.190~14.04.1

4.15.0-1176.191~14.04.1

4.15.0-1177.192~14.04.1

4.15.0-1178.193~14.04.1

4.15.0-1179.194~14.04.1

4.15.0-1180.195~14.04.1

4.15.0-1181.196~14.04.1

4.15.0-1182.197~14.04.1

4.15.0-1183.198~14.04.1

4.15.0-1184.199~14.04.1

4.15.0-1185.200~14.04.1

4.15.0-1186.201~14.04.1

4.15.0-1187.202~14.04.1

4.15.0-1188.203~14.04.1

4.15.0-1189.204~14.04.1

4.15.0-1190.205~14.04.1

4.15.0-1191.206~14.04.1

4.15.0-1192.207~14.04.1

4.15.0-1193.208~14.04.1

4.15.0-1194.209~14.04.1

4.15.0-1195.210~14.04.1

4.15.0-1196.211~14.04.1

4.15.0-1197.212~14.04.1

4.15.0-1199.214~14.04.1

4.15.0-1200.215~14.04.1

4.15.0-1201.216~14.04.1

4.15.0-1202.217~14.04.1

4.15.0-1205.220~14.04.1

4.15.0-1206.221~14.04.1

4.15.0-1207.222~14.04.1

4.15.0-1208.223~14.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-azure-headers-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-azure-tools-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~14.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lts-xenial

Package

Name: linux-lts-xenial
Purl: pkg:deb/ubuntu/linux-lts-xenial?arch=source&distro=esm-infra-legacy%2Ftrusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.0-13.29~14.04.1

4.4.0-14.30~14.04.2

4.4.0-15.31~14.04.1

4.4.0-18.34~14.04.1

4.4.0-21.37~14.04.1

4.4.0-22.39~14.04.1

4.4.0-22.40~14.04.1

4.4.0-24.43~14.04.1

4.4.0-28.47~14.04.1

4.4.0-31.50~14.04.1

4.4.0-34.53~14.04.1

4.4.0-36.55~14.04.1

4.4.0-38.57~14.04.1

4.4.0-42.62~14.04.1

4.4.0-45.66~14.04.1

4.4.0-47.68~14.04.1

4.4.0-51.72~14.04.1

4.4.0-53.74~14.04.1

4.4.0-57.78~14.04.1

4.4.0-59.80~14.04.1

4.4.0-62.83~14.04.1

4.4.0-63.84~14.04.2

4.4.0-64.85~14.04.1

4.4.0-66.87~14.04.1

4.4.0-67.88~14.04.1

4.4.0-70.91~14.04.1

4.4.0-71.92~14.04.1

4.4.0-72.93~14.04.1

4.4.0-75.96~14.04.1

4.4.0-78.99~14.04.2

4.4.0-79.100~14.04.1

4.4.0-81.104~14.04.1

4.4.0-83.106~14.04.1

4.4.0-87.110~14.04.1

4.4.0-89.112~14.04.1

4.4.0-91.114~14.04.1

4.4.0-92.115~14.04.1

4.4.0-93.116~14.04.1

4.4.0-96.119~14.04.1

4.4.0-97.120~14.04.1

4.4.0-98.121~14.04.1

4.4.0-101.124~14.04.1

4.4.0-103.126~14.04.1

4.4.0-104.127~14.04.1

4.4.0-108.131~14.04.1

4.4.0-109.132~14.04.1

4.4.0-111.134~14.04.1

4.4.0-112.135~14.04.1

4.4.0-116.140~14.04.1

4.4.0-119.143~14.04.1

4.4.0-121.145~14.04.1

4.4.0-124.148~14.04.1

4.4.0-127.153~14.04.1

4.4.0-128.154~14.04.1

4.4.0-130.156~14.04.1

4.4.0-131.157~14.04.1

4.4.0-133.159~14.04.1

4.4.0-134.160~14.04.1

4.4.0-135.161~14.04.1

4.4.0-137.163~14.04.1

4.4.0-138.164~14.04.1

4.4.0-139.165~14.04.1

4.4.0-140.166~14.04.1

4.4.0-141.167~14.04.1

4.4.0-142.168~14.04.1

4.4.0-143.169~14.04.2

4.4.0-144.170~14.04.1

4.4.0-146.172~14.04.1

4.4.0-148.174~14.04.1

4.4.0-150.176~14.04.1

4.4.0-151.178~14.04.1

4.4.0-154.181~14.04.1

4.4.0-157.185~14.04.1

4.4.0-159.187~14.04.1

4.4.0-161.189~14.04.1

4.4.0-164.192~14.04.1

4.4.0-165.193~14.04.1

4.4.0-166.195~14.04.1

4.4.0-168.197~14.04.1

4.4.0-169.198~14.04.1

4.4.0-170.199~14.04.1

4.4.0-171.200~14.04.1

4.4.0-173.203~14.04.1

4.4.0-174.204~14.04.1

4.4.0-176.206~14.04.1

4.4.0-177.207~14.04.1

4.4.0-178.208~14.04.1

4.4.0-179.209~14.04.1

4.4.0-184.214~14.04.1

4.4.0-185.215~14.04.1

4.4.0-186.216~14.04.1

4.4.0-187.217~14.04.1

4.4.0-189.219~14.04.1

4.4.0-190.220~14.04.1

4.4.0-193.224~14.04.1

4.4.0-194.226~14.04.1

4.4.0-197.229~14.04.1

4.4.0-198.230~14.04.1

4.4.0-200.232~14.04.1

4.4.0-201.233~14.04.1

4.4.0-203.235~14.04.1

4.4.0-204.236~14.04.1

4.4.0-206.238~14.04.1

4.4.0-208.240~14.04.1

4.4.0-209.241~14.04.1

4.4.0-210.242~14.04.1

4.4.0-211.243~14.04.1

4.4.0-212.244~14.04.1

4.4.0-213.245~14.04.1

4.4.0-214.246~14.04.1

4.4.0-215.247~14.04.1

4.4.0-218.251~14.04.1

4.4.0-219.252~14.04.1

4.4.0-221.254~14.04.1

4.4.0-222.255~14.04.1

4.4.0-223.256~14.04.1

4.4.0-224.257~14.04.1

4.4.0-227.261~14.04.1

4.4.0-229.263~14.04.1

4.4.0-230.264~14.04.1

4.4.0-231.265~14.04.1

4.4.0-233.267~14.04.1

4.4.0-234.268~14.04.1

4.4.0-235.269~14.04.1

4.4.0-236.270~14.04.1

4.4.0-237.271~14.04.1

4.4.0-239.273~14.04.1

4.4.0-240.274~14.04.1

4.4.0-241.275~14.04.1

4.4.0-242.276~14.04.1

4.4.0-243.277~14.04.1

4.4.0-244.278~14.04.1

4.4.0-245.279~14.04.1

4.4.0-246.280~14.04.1

4.4.0-248.282~14.04.1

4.4.0-250.284~14.04.1

4.4.0-251.285~14.04.1

4.4.0-252.286~14.04.1

4.4.0-253.287~14.04.1

4.4.0-254.288~14.04.1

4.4.0-256.290~14.04.1

4.4.0-257.291~14.04.1

4.4.0-258.292~14.04.2

4.4.0-259.293~14.04.1

4.4.0-260.294~14.04.1

4.4.0-261.295~14.04.1

4.4.0-262.296~14.04.1

4.4.0-263.297~14.04.1

4.4.0-264.298~14.04.1

4.4.0-266.300~14.04.1

4.4.0-267.301~14.04.1

4.4.0-268.302~14.04.1

4.4.0-269.303~14.04.1

4.4.0-270.304~14.04.1

4.4.0-271.305~14.04.1

4.4.0-272.306~14.04.1

4.4.0-273.307~14.04.1

4.4.0-274.308~14.04.1

4.4.0-276.310~14.04.1

4.4.0-277.311~14.04.1

4.4.0-278.312~14.04.1

4.4.0-279.313~14.04.1

4.4.0-280.314~14.04.1

4.4.0-281.315~14.04.1

4.4.0-283.317~14.04.1

4.4.0-284.318~14.04.1

4.4.0-287.321~14.04.1

4.4.0-288.322~14.04.1

4.4.0-289.323~14.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "fat-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "fb-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "floppy-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "input-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "irda-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "kernel-image-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-headers-4.4.0-289",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-headers-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-headers-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-image-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-lts-xenial-cloud-tools-4.4.0-289",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-lts-xenial-tools-4.4.0-289",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-lts-xenial-udebs-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-modules-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-modules-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-tools-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "linux-tools-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "md-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "message-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "nic-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "parport-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "pata-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "plip-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "sata-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "serial-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "speakup-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "usb-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "virtio-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323~14.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:16.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.2.0-16.19

4.2.0-17.21

4.2.0-19.23

4.3.0-1.10

4.3.0-2.11

4.3.0-5.16

4.3.0-6.17

4.3.0-7.18

4.4.0-2.16

4.4.0-4.19

4.4.0-6.21

4.4.0-7.22

4.4.0-8.23

4.4.0-9.24

4.4.0-10.25

4.4.0-11.26

4.4.0-12.28

4.4.0-13.29

4.4.0-14.30

4.4.0-15.31

4.4.0-16.32

4.4.0-17.33

4.4.0-18.34

4.4.0-21.37

4.4.0-22.39

4.4.0-22.40

4.4.0-24.43

4.4.0-28.47

4.4.0-31.50

4.4.0-34.53

4.4.0-36.55

4.4.0-38.57

4.4.0-42.62

4.4.0-43.63

4.4.0-45.66

4.4.0-47.68

4.4.0-51.72

4.4.0-53.74

4.4.0-57.78

4.4.0-59.80

4.4.0-62.83

4.4.0-63.84

4.4.0-64.85

4.4.0-65.86

4.4.0-66.87

4.4.0-67.88

4.4.0-70.91

4.4.0-71.92

4.4.0-72.93

4.4.0-75.96

4.4.0-77.98

4.4.0-78.99

4.4.0-79.100

4.4.0-81.104

4.4.0-83.106

4.4.0-87.110

4.4.0-89.112

4.4.0-91.114

4.4.0-92.115

4.4.0-93.116

4.4.0-96.119

4.4.0-97.120

4.4.0-98.121

4.4.0-101.124

4.4.0-103.126

4.4.0-104.127

4.4.0-108.131

4.4.0-109.132

4.4.0-112.135

4.4.0-116.140

4.4.0-119.143

4.4.0-121.145

4.4.0-122.146

4.4.0-124.148

4.4.0-127.153

4.4.0-128.154

4.4.0-130.156

4.4.0-131.157

4.4.0-133.159

4.4.0-134.160

4.4.0-135.161

4.4.0-137.163

4.4.0-138.164

4.4.0-139.165

4.4.0-140.166

4.4.0-141.167

4.4.0-142.168

4.4.0-143.169

4.4.0-145.171

4.4.0-146.172

4.4.0-148.174

4.4.0-150.176

4.4.0-151.178

4.4.0-154.181

4.4.0-157.185

4.4.0-159.187

4.4.0-161.189

4.4.0-164.192

4.4.0-165.193

4.4.0-166.195

4.4.0-168.197

4.4.0-169.198

4.4.0-170.199

4.4.0-171.200

4.4.0-173.203

4.4.0-174.204

4.4.0-176.206

4.4.0-177.207

4.4.0-178.208

4.4.0-179.209

4.4.0-184.214

4.4.0-185.215

4.4.0-186.216

4.4.0-187.217

4.4.0-189.219

4.4.0-190.220

4.4.0-193.224

4.4.0-194.226

4.4.0-197.229

4.4.0-198.230

4.4.0-200.232

4.4.0-201.233

4.4.0-203.235

4.4.0-204.236

4.4.0-206.238

4.4.0-208.240

4.4.0-209.241

4.4.0-210.242

4.4.0-211.243

4.4.0-212.244

4.4.0-213.245

4.4.0-214.246

4.4.0-216.249

4.4.0-217.250

4.4.0-218.251

4.4.0-219.252

4.4.0-221.254

4.4.0-222.255

4.4.0-223.256

4.4.0-224.257

4.4.0-227.261

4.4.0-229.263

4.4.0-230.264

4.4.0-231.265

4.4.0-233.267

4.4.0-234.268

4.4.0-235.269

4.4.0-236.270

4.4.0-237.271

4.4.0-239.273

4.4.0-240.274

4.4.0-241.275

4.4.0-242.276

4.4.0-243.277

4.4.0-244.278

4.4.0-245.279

4.4.0-246.280

4.4.0-248.282

4.4.0-250.284

4.4.0-251.285

4.4.0-252.286

4.4.0-253.287

4.4.0-254.288

4.4.0-256.290

4.4.0-257.291

4.4.0-258.292

4.4.0-259.293

4.4.0-260.294

4.4.0-261.295

4.4.0-262.296

4.4.0-263.297

4.4.0-264.298

4.4.0-266.300

4.4.0-267.301

4.4.0-268.302

4.4.0-269.303

4.4.0-270.304

4.4.0-271.305

4.4.0-272.306

4.4.0-273.307

4.4.0-274.308

4.4.0-276.310

4.4.0-277.311

4.4.0-278.312

4.4.0-279.313

4.4.0-280.314

4.4.0-281.315

4.4.0-283.317

4.4.0-284.318

4.4.0-287.321

4.4.0-288.322

4.4.0-289.323

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "crypto-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "dasd-extra-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "dasd-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "fat-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "fb-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "firewire-core-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "floppy-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "fs-core-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "fs-secondary-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "input-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "ipmi-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "irda-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "kernel-image-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-289",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-headers-4.4.0-289",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-headers-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-headers-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-image-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-image-unsigned-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-image-unsigned-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-modules-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-modules-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-modules-extra-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-source-4.4.0",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-tools-4.4.0-289",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-tools-4.4.0-289-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-tools-4.4.0-289-lowlatency",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "md-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "message-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "mouse-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "multipath-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "nfs-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "nic-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "nic-shared-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "nic-usb-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "parport-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "pata-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "pcmcia-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "plip-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "ppp-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "sata-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "scsi-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "serial-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "speakup-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "storage-core-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "usb-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "virtio-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        },
        {
            "binary_name":  "vlan-modules-4.4.0-289-generic-di",
            "binary_version":  "4.4.0-289.323"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.0-1001.10

4.4.0-1003.12

4.4.0-1004.13

4.4.0-1007.16

4.4.0-1009.18

4.4.0-1011.20

4.4.0-1012.21

4.4.0-1013.22

4.4.0-1016.25

4.4.0-1017.26

4.4.0-1018.27

4.4.0-1020.29

4.4.0-1022.31

4.4.0-1026.35

4.4.0-1028.37

4.4.0-1030.39

4.4.0-1031.40

4.4.0-1032.41

4.4.0-1035.44

4.4.0-1037.46

4.4.0-1038.47

4.4.0-1039.48

4.4.0-1041.50

4.4.0-1043.52

4.4.0-1044.53

4.4.0-1047.56

4.4.0-1048.57

4.4.0-1049.58

4.4.0-1050.59

4.4.0-1052.61

4.4.0-1054.63

4.4.0-1055.64

4.4.0-1057.66

4.4.0-1060.69

4.4.0-1061.70

4.4.0-1062.71

4.4.0-1063.72

4.4.0-1065.75

4.4.0-1066.76

4.4.0-1067.77

4.4.0-1069.79

4.4.0-1070.80

4.4.0-1072.82

4.4.0-1073.83

4.4.0-1074.84

4.4.0-1075.85

4.4.0-1077.87

4.4.0-1079.89

4.4.0-1081.91

4.4.0-1083.93

4.4.0-1084.94

4.4.0-1085.96

4.4.0-1087.98

4.4.0-1088.99

4.4.0-1090.101

4.4.0-1092.103

4.4.0-1094.105

4.4.0-1095.106

4.4.0-1096.107

4.4.0-1098.109

4.4.0-1099.110

4.4.0-1100.111

4.4.0-1101.112

4.4.0-1102.113

4.4.0-1104.115

4.4.0-1105.116

4.4.0-1106.117

4.4.0-1107.118

4.4.0-1109.120

4.4.0-1110.121

4.4.0-1111.123

4.4.0-1112.124

4.4.0-1113.126

4.4.0-1114.127

4.4.0-1117.131

4.4.0-1118.132

4.4.0-1119.133

4.4.0-1121.135

4.4.0-1122.136

4.4.0-1123.137

4.4.0-1124.138

4.4.0-1126.140

4.4.0-1127.141

4.4.0-1128.142

4.4.0-1129.143

4.4.0-1130.144

4.4.0-1131.145

4.4.0-1132.146

4.4.0-1133.147

4.4.0-1134.148

4.4.0-1135.149

4.4.0-1137.151

4.4.0-1138.152

4.4.0-1139.153

4.4.0-1140.154

4.4.0-1143.158

4.4.0-1145.160

4.4.0-1146.161

4.4.0-1147.162

4.4.0-1148.163

4.4.0-1150.165

4.4.0-1151.166

4.4.0-1152.167

4.4.0-1153.168

4.4.0-1154.169

4.4.0-1155.170

4.4.0-1156.171

4.4.0-1157.172

4.4.0-1158.173

4.4.0-1159.174

4.4.0-1160.175

4.4.0-1161.176

4.4.0-1162.177

4.4.0-1163.178

4.4.0-1164.179

4.4.0-1165.180

4.4.0-1166.181

4.4.0-1167.182

4.4.0-1168.183

4.4.0-1169.184

4.4.0-1171.186

4.4.0-1172.187

4.4.0-1173.188

4.4.0-1174.189

4.4.0-1175.190

4.4.0-1176.191

4.4.0-1177.192

4.4.0-1178.193

4.4.0-1179.194

4.4.0-1180.195

4.4.0-1181.196

4.4.0-1182.197

4.4.0-1183.198

4.4.0-1184.199

4.4.0-1185.200

4.4.0-1186.201

4.4.0-1187.202

4.4.0-1188.203

4.4.0-1189.204

4.4.0-1190.205

4.4.0-1191.206

4.4.0-1192.207

4.4.0-1193.208

4.4.0-1194.209

4.4.0-1195.210

4.4.0-1196.211

4.4.0-1197.212

4.4.0-1198.213

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-4.4.0-1198",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-aws-headers-4.4.0-1198",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-aws-tools-4.4.0-1198",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-headers-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-image-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-modules-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-modules-extra-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        },
        {
            "binary_name":  "linux-tools-4.4.0-1198-aws",
            "binary_version":  "4.4.0-1198.213"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-hwe

Package

Name: linux-aws-hwe
Purl: pkg:deb/ubuntu/linux-aws-hwe?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1030.31~16.04.1

4.15.0-1031.33~16.04.1

4.15.0-1032.34~16.04.1

4.15.0-1033.35~16.04.1

4.15.0-1035.37~16.04.1

4.15.0-1036.38~16.04.1

4.15.0-1039.41~16.04.1

4.15.0-1040.42~16.04.1

4.15.0-1041.43~16.04.1

4.15.0-1043.45~16.04.1

4.15.0-1044.46~16.04.1

4.15.0-1045.47~16.04.1

4.15.0-1047.49~16.04.1

4.15.0-1048.50~16.04.1

4.15.0-1050.52~16.04.1

4.15.0-1051.53~16.04.1

4.15.0-1052.54~16.04.1

4.15.0-1054.56~16.04.1

4.15.0-1056.58~16.04.1

4.15.0-1057.59~16.04.1

4.15.0-1058.60~16.04.1

4.15.0-1060.62~16.04.1

4.15.0-1063.67~16.04.1

4.15.0-1065.69~16.04.1

4.15.0-1066.70~16.04.1

4.15.0-1067.71~16.04.1

4.15.0-1073.77~16.04.1

4.15.0-1074.78~16.04.1

4.15.0-1079.83~16.04.1

4.15.0-1080.84~16.04.1

4.15.0-1082.86~16.04.1

4.15.0-1083.87~16.04.1

4.15.0-1085.90~16.04.1

4.15.0-1088.93~16.04.1

4.15.0-1090.95~16.04.1

4.15.0-1091.96~16.04.1

4.15.0-1093.99~16.04.1

4.15.0-1094.101~16.04.1

4.15.0-1095.102~16.04.1

4.15.0-1096.103~16.04.1

4.15.0-1097.104~16.04.1

4.15.0-1098.105~16.04.1

4.15.0-1099.106~16.04.1

4.15.0-1102.109~16.04.1

4.15.0-1103.110~16.04.1

4.15.0-1106.113~16.04.1

4.15.0-1109.116~16.04.1

4.15.0-1110.117~16.04.1

4.15.0-1111.118~16.04.1

4.15.0-1112.119~16.04.1

4.15.0-1113.120~16.04.1

4.15.0-1115.122~16.04.1

4.15.0-1116.123~16.04.1

4.15.0-1118.125~16.04.1

4.15.0-1119.126~16.04.2

4.15.0-1120.128~16.04.1

4.15.0-1123.132~16.04.1

4.15.0-1124.133~16.04.1

4.15.0-1126.135~16.04.2

4.15.0-1127.136~16.04.1

4.15.0-1128.137~16.04.1

4.15.0-1130.139~16.04.1

4.15.0-1133.143~16.04.1

4.15.0-1136.147~16.04.1

4.15.0-1137.148~16.04.1

4.15.0-1139.150~16.04.1

4.15.0-1140.151~16.04.1

4.15.0-1141.152~16.04.1

4.15.0-1142.154~16.04.1

4.15.0-1143.155~16.04.1

4.15.0-1146.158~16.04.2

4.15.0-1147.159~16.04.1

4.15.0-1148.160~16.04.1

4.15.0-1151.164~16.04.1

4.15.0-1153.166~16.04.1

4.15.0-1154.167~16.04.1

4.15.0-1155.168~16.04.1

4.15.0-1156.169~16.04.1

4.15.0-1157.170~16.04.1

4.15.0-1158.171~16.04.1

4.15.0-1159.172~16.04.1

4.15.0-1160.173~16.04.1

4.15.0-1161.174~16.04.1

4.15.0-1162.175~16.04.1

4.15.0-1163.176~16.04.1

4.15.0-1164.177~16.04.1

4.15.0-1165.178~16.04.1

4.15.0-1166.179~16.04.1

4.15.0-1167.180~16.04.1

4.15.0-1168.181~16.04.1

4.15.0-1169.182~16.04.1

4.15.0-1170.183~16.04.1

4.15.0-1172.185~16.04.1

4.15.0-1173.186~16.04.1

4.15.0-1174.187~16.04.1

4.15.0-1175.188~16.04.1

4.15.0-1176.189~16.04.1

4.15.0-1177.190~16.04.1

4.15.0-1178.191~16.04.1

4.15.0-1179.192~16.04.1

4.15.0-1180.193~16.04.1

4.15.0-1181.194~16.04.1

4.15.0-1182.195~16.04.1

4.15.0-1183.196~16.04.1

4.15.0-1184.197~16.04.1

4.15.0-1185.198~16.04.1

4.15.0-1186.199~16.04.1

4.15.0-1187.200~16.04.1

4.15.0-1188.201~16.04.1

4.15.0-1189.202~16.04.1

4.15.0-1190.203~16.04.1

4.15.0-1191.204~16.04.1

4.15.0-1192.205~16.04.1

4.15.0-1194.207~16.04.1

4.15.0-1195.208~16.04.1

4.15.0-1196.209~16.04.1

4.15.0-1197.210~16.04.1

4.15.0-1198.211~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-headers-4.15.0-1198",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-aws-hwe-cloud-tools-4.15.0-1198",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-aws-hwe-tools-4.15.0-1198",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211~16.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.11.0-1009.9

4.11.0-1011.11

4.11.0-1013.13

4.11.0-1014.14

4.11.0-1015.15

4.11.0-1016.16

4.13.0-1005.7

4.13.0-1006.8

4.13.0-1007.9

4.13.0-1009.12

4.13.0-1011.14

4.13.0-1012.15

4.13.0-1014.17

4.13.0-1016.19

4.13.0-1018.21

4.15.0-1013.13~16.04.2

4.15.0-1014.14~16.04.1

4.15.0-1018.18~16.04.1

4.15.0-1019.19~16.04.1

4.15.0-1021.21~16.04.1

4.15.0-1022.22~16.04.1

4.15.0-1023.24~16.04.1

4.15.0-1025.26~16.04.1

4.15.0-1028.29~16.04.1

4.15.0-1030.31~16.04.1

4.15.0-1031.32~16.04.1

4.15.0-1032.33~16.04.1

4.15.0-1035.36~16.04.1

4.15.0-1036.38~16.04.1

4.15.0-1037.39~16.04.1

4.15.0-1039.43

4.15.0-1040.44

4.15.0-1041.45

4.15.0-1042.46

4.15.0-1045.49

4.15.0-1046.50

4.15.0-1047.51

4.15.0-1049.54

4.15.0-1050.55

4.15.0-1051.56

4.15.0-1052.57

4.15.0-1055.60

4.15.0-1056.61

4.15.0-1057.62

4.15.0-1059.64

4.15.0-1060.65

4.15.0-1061.66

4.15.0-1063.68

4.15.0-1064.69

4.15.0-1066.71

4.15.0-1067.72

4.15.0-1069.74

4.15.0-1071.76

4.15.0-1075.80

4.15.0-1077.82

4.15.0-1082.92~16.04.1

4.15.0-1083.93~16.04.1

4.15.0-1089.99~16.04.1

4.15.0-1091.101~16.04.1

4.15.0-1092.102~16.04.1

4.15.0-1093.103~16.04.1

4.15.0-1095.105~16.04.1

4.15.0-1096.106~16.04.1

4.15.0-1098.109~16.04.1

4.15.0-1100.111~16.04.1

4.15.0-1102.113~16.04.1

4.15.0-1103.114~16.04.1

4.15.0-1106.118~16.04.1

4.15.0-1108.120~16.04.1

4.15.0-1109.121~16.04.1

4.15.0-1110.122~16.04.1

4.15.0-1111.123~16.04.1

4.15.0-1112.124~16.04.1

4.15.0-1113.126~16.04.1

4.15.0-1114.127~16.04.1

4.15.0-1115.128~16.04.1

4.15.0-1118.131~16.04.1

4.15.0-1121.134~16.04.1

4.15.0-1122.135~16.04.1

4.15.0-1123.136~16.04.1

4.15.0-1124.137~16.04.1

4.15.0-1125.138~16.04.1

4.15.0-1126.139~16.04.1

4.15.0-1127.140~16.04.1

4.15.0-1129.142~16.04.1

4.15.0-1130.143~16.04.1

4.15.0-1131.144~16.04.1

4.15.0-1133.146~16.04.1

4.15.0-1134.147~16.04.1

4.15.0-1136.149~16.04.1

4.15.0-1137.150~16.04.1

4.15.0-1138.151~16.04.1

4.15.0-1139.152~16.04.1

4.15.0-1142.156~16.04.1

4.15.0-1145.160~16.04.1

4.15.0-1146.161~16.04.1

4.15.0-1149.164~16.04.1

4.15.0-1150.165~16.04.1

4.15.0-1151.166~16.04.1

4.15.0-1153.168~16.04.1

4.15.0-1159.174~16.04.1

4.15.0-1162.177~16.04.1

4.15.0-1163.178~16.04.1

4.15.0-1164.179~16.04.1

4.15.0-1165.180~16.04.1

4.15.0-1166.181~16.04.1

4.15.0-1167.182~16.04.1

4.15.0-1168.183~16.04.1

4.15.0-1169.184~16.04.1

4.15.0-1170.185~16.04.1

4.15.0-1171.186~16.04.1

4.15.0-1172.187~16.04.1

4.15.0-1173.188~16.04.1

4.15.0-1174.189~16.04.1

4.15.0-1175.190~16.04.1

4.15.0-1176.191~16.04.1

4.15.0-1177.192~16.04.1

4.15.0-1178.193~16.04.1

4.15.0-1179.194~16.04.1

4.15.0-1180.195~16.04.1

4.15.0-1181.196~16.04.1

4.15.0-1182.197~16.04.1

4.15.0-1183.198~16.04.1

4.15.0-1184.199~16.04.1

4.15.0-1185.200~16.04.1

4.15.0-1186.201~16.04.1

4.15.0-1187.202~16.04.1

4.15.0-1188.203~16.04.1

4.15.0-1189.204~16.04.1

4.15.0-1190.205~16.04.1

4.15.0-1191.206~16.04.1

4.15.0-1192.207~16.04.1

4.15.0-1193.208~16.04.1

4.15.0-1194.209~16.04.1

4.15.0-1195.210~16.04.1

4.15.0-1196.211~16.04.1

4.15.0-1197.212~16.04.1

4.15.0-1200.215~16.04.1

4.15.0-1204.219~16.04.1

4.15.0-1205.220~16.04.1

4.15.0-1206.221~16.04.1

4.15.0-1208.223~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-azure-headers-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-azure-tools-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223~16.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.10.0-1004.4

4.10.0-1006.6

4.10.0-1007.7

4.10.0-1008.8

4.10.0-1009.9

4.13.0-1002.5

4.13.0-1006.9

4.13.0-1007.10

4.13.0-1008.11

4.13.0-1011.15

4.13.0-1012.16

4.13.0-1013.17

4.13.0-1015.19

4.13.0-1017.21

4.13.0-1019.23

4.15.0-1014.14~16.04.1

4.15.0-1015.15~16.04.1

4.15.0-1017.18~16.04.1

4.15.0-1018.19~16.04.2

4.15.0-1019.20~16.04.1

4.15.0-1021.22~16.04.1

4.15.0-1023.24~16.04.1

4.15.0-1024.25~16.04.2

4.15.0-1025.26~16.04.1

4.15.0-1026.27~16.04.1

4.15.0-1027.28~16.04.1

4.15.0-1028.29~16.04.1

4.15.0-1029.31~16.04.1

4.15.0-1030.32~16.04.1

4.15.0-1032.34~16.04.1

4.15.0-1033.35~16.04.1

4.15.0-1034.36~16.04.1

4.15.0-1036.38~16.04.1

4.15.0-1037.39~16.04.1

4.15.0-1040.42~16.04.1

4.15.0-1041.43

4.15.0-1042.44

4.15.0-1044.46

4.15.0-1046.49

4.15.0-1047.50

4.15.0-1049.52

4.15.0-1050.53

4.15.0-1052.56

4.15.0-1055.59

4.15.0-1058.62

4.15.0-1060.64

4.15.0-1061.65

4.15.0-1071.81~16.04.1

4.15.0-1077.87~16.04.1

4.15.0-1078.88~16.04.1

4.15.0-1080.90~16.04.1

4.15.0-1081.92~16.04.1

4.15.0-1083.94~16.04.1

4.15.0-1084.95~16.04.1

4.15.0-1086.98~16.04.1

4.15.0-1087.100~16.04.1

4.15.0-1088.101~16.04.1

4.15.0-1090.103~16.04.1

4.15.0-1091.104~16.04.1

4.15.0-1092.105~16.04.1

4.15.0-1093.106~16.04.1

4.15.0-1094.107~16.04.1

4.15.0-1095.108~16.04.1

4.15.0-1096.109~16.04.1

4.15.0-1097.110~16.04.1

4.15.0-1098.111~16.04.1

4.15.0-1099.112~16.04.1

4.15.0-1100.113~16.04.1

4.15.0-1103.116~16.04.1

4.15.0-1106.120~16.04.1

4.15.0-1107.121~16.04.1

4.15.0-1108.122~16.04.1

4.15.0-1109.123~16.04.1

4.15.0-1110.124~16.04.1

4.15.0-1111.125~16.04.1

4.15.0-1112.126~16.04.1

4.15.0-1114.128~16.04.1

4.15.0-1115.129~16.04.1

4.15.0-1116.130~16.04.1

4.15.0-1118.132~16.04.1

4.15.0-1119.133~16.04.1

4.15.0-1120.134~16.04.1

4.15.0-1121.135~16.04.1

4.15.0-1122.136~16.04.1

4.15.0-1124.138~16.04.1

4.15.0-1127.142~16.04.1

4.15.0-1130.146~16.04.1

4.15.0-1131.147~16.04.1

4.15.0-1134.150~16.04.2

4.15.0-1135.151~16.04.2

4.15.0-1136.152~16.04.1

4.15.0-1137.153~16.04.1

4.15.0-1138.154~16.04.1

4.15.0-1141.157~16.04.2

4.15.0-1142.158~16.04.1

4.15.0-1143.159~16.04.1

4.15.0-1146.162~16.04.1

4.15.0-1147.163~16.04.1

4.15.0-1148.164~16.04.1

4.15.0-1149.165~16.04.1

4.15.0-1150.166~16.04.1

4.15.0-1151.167~16.04.1

4.15.0-1152.168~16.04.1

4.15.0-1153.170~16.04.1

4.15.0-1154.171~16.04.1

4.15.0-1155.172~16.04.1

4.15.0-1156.173~16.04.1

4.15.0-1157.174~16.04.1

4.15.0-1158.175~16.04.1

4.15.0-1159.176~16.04.1

4.15.0-1160.177~16.04.1

4.15.0-1161.178~16.04.1

4.15.0-1162.179~16.04.1

4.15.0-1163.180~16.04.1

4.15.0-1164.181~16.04.1

4.15.0-1165.182~16.04.1

4.15.0-1166.183~16.04.1

4.15.0-1167.184~16.04.2

4.15.0-1168.185~16.04.1

4.15.0-1169.186~16.04.1

4.15.0-1170.187~16.04.1

4.15.0-1171.188~16.04.1

4.15.0-1172.189~16.04.1

4.15.0-1173.190~16.04.1

4.15.0-1174.191~16.04.1

4.15.0-1175.192~16.04.1

4.15.0-1176.193~16.04.1

4.15.0-1177.194~16.04.1

4.15.0-1178.195~16.04.1

4.15.0-1179.196~16.04.1

4.15.0-1180.197~16.04.1

4.15.0-1181.198~16.04.1

4.15.0-1182.199~16.04.1

4.15.0-1183.200~16.04.2

4.15.0-1184.201~16.04.1

4.15.0-1185.202~16.04.1

4.15.0-1187.204~16.04.1

4.15.0-1188.205~16.04.1

4.15.0-1189.206~16.04.1

4.15.0-1190.207~16.04.1

4.15.0-1191.208~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-gcp-headers-4.15.0-1191",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-gcp-tools-4.15.0-1191",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208~16.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe

Package

Name: linux-hwe
Purl: pkg:deb/ubuntu/linux-hwe?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.0-36.36~16.04.1

4.8.0-39.42~16.04.1

4.8.0-41.44~16.04.1

4.8.0-42.45~16.04.1

4.8.0-44.47~16.04.1

4.8.0-45.48~16.04.1

4.8.0-46.49~16.04.1

4.8.0-49.52~16.04.1

4.8.0-51.54~16.04.1

4.8.0-52.55~16.04.1

4.8.0-53.56~16.04.1

4.8.0-54.57~16.04.1

4.8.0-56.61~16.04.1

4.8.0-58.63~16.04.1

4.10.0-27.30~16.04.2

4.10.0-28.32~16.04.2

4.10.0-30.34~16.04.1

4.10.0-32.36~16.04.1

4.10.0-33.37~16.04.1

4.10.0-35.39~16.04.1

4.10.0-37.41~16.04.1

4.10.0-38.42~16.04.1

4.10.0-40.44~16.04.1

4.10.0-42.46~16.04.1

4.13.0-26.29~16.04.2

4.13.0-31.34~16.04.1

4.13.0-32.35~16.04.1

4.13.0-36.40~16.04.1

4.13.0-37.42~16.04.1

4.13.0-38.43~16.04.1

4.13.0-39.44~16.04.1

4.13.0-41.46~16.04.1

4.13.0-43.48~16.04.1

4.13.0-45.50~16.04.1

4.15.0-24.26~16.04.1

4.15.0-29.31~16.04.1

4.15.0-30.32~16.04.1

4.15.0-32.35~16.04.1

4.15.0-33.36~16.04.1

4.15.0-34.37~16.04.1

4.15.0-36.39~16.04.1

4.15.0-38.41~16.04.1

4.15.0-39.42~16.04.1

4.15.0-42.45~16.04.1

4.15.0-43.46~16.04.1

4.15.0-45.48~16.04.1

4.15.0-46.49~16.04.1

4.15.0-47.50~16.04.1

4.15.0-48.51~16.04.1

4.15.0-50.54~16.04.1

4.15.0-51.55~16.04.1

4.15.0-52.56~16.04.1

4.15.0-54.58~16.04.1

4.15.0-55.60~16.04.2

4.15.0-58.64~16.04.1

4.15.0-60.67~16.04.1

4.15.0-62.69~16.04.1

4.15.0-64.73~16.04.1

4.15.0-65.74~16.04.1

4.15.0-66.75~16.04.1

4.15.0-69.78~16.04.1

4.15.0-70.79~16.04.1

4.15.0-72.81~16.04.1

4.15.0-74.83~16.04.1

4.15.0-76.86~16.04.1

4.15.0-88.88~16.04.1

4.15.0-91.92~16.04.1

4.15.0-96.97~16.04.1

4.15.0-99.100~16.04.1

4.15.0-101.102~16.04.1

4.15.0-106.107~16.04.1

4.15.0-107.108~16.04.1

4.15.0-112.113~16.04.1

4.15.0-115.116~16.04.1

4.15.0-117.118~16.04.1

4.15.0-118.119~16.04.1

4.15.0-120.122~16.04.1

4.15.0-122.124~16.04.1

4.15.0-123.126~16.04.1

4.15.0-126.129~16.04.1

4.15.0-128.131~16.04.1

4.15.0-129.132~16.04.1

4.15.0-132.136~16.04.1

4.15.0-133.137~16.04.1

4.15.0-136.140~16.04.1

4.15.0-137.141~16.04.1

4.15.0-139.143~16.04.1

4.15.0-140.144~16.04.1

4.15.0-142.146~16.04.1

4.15.0-143.147~16.04.3

4.15.0-144.148~16.04.1

4.15.0-147.151~16.04.1

4.15.0-151.157~16.04.1

4.15.0-153.160~16.04.1

4.15.0-154.161~16.04.1

4.15.0-156.163~16.04.1

4.15.0-158.166~16.04.1

4.15.0-159.167~16.04.1

4.15.0-161.169~16.04.1

4.15.0-162.170~16.04.1

4.15.0-163.171~16.04.1

4.15.0-166.174~16.04.1

4.15.0-167.175~16.04.1

4.15.0-169.177~16.04.1

4.15.0-171.180~16.04.1

4.15.0-173.182~16.04.1

4.15.0-175.184~16.04.1

4.15.0-176.185~16.04.1

4.15.0-177.186~16.04.1

4.15.0-180.189~16.04.1

4.15.0-184.194~16.04.1

4.15.0-187.198~16.04.1

4.15.0-188.199~16.04.1

4.15.0-189.200~16.04.1

4.15.0-191.202~16.04.1

4.15.0-192.203~16.04.1

4.15.0-193.204~16.04.1

4.15.0-194.205~16.04.1

4.15.0-196.207~16.04.1

4.15.0-197.208~16.04.1

4.15.0-200.211~16.04.2

4.15.0-201.212~16.04.1

4.15.0-202.213~16.04.1

4.15.0-206.217~16.04.1

4.15.0-208.219~16.04.1

4.15.0-209.220~16.04.1

4.15.0-210.221~16.04.1

4.15.0-211.222~16.04.1

4.15.0-212.223~16.04.1

4.15.0-213.224~16.04.1

4.15.0-214.225~16.04.1

4.15.0-216.227~16.04.1

4.15.0-218.229~16.04.1

4.15.0-219.230~16.04.1

4.15.0-220.231~16.04.1

4.15.0-221.232~16.04.1

4.15.0-222.233~16.04.1

4.15.0-223.235~16.04.1

4.15.0-224.236~16.04.1

4.15.0-225.237~16.04.1

4.15.0-226.238~16.04.1

4.15.0-227.239~16.04.1

4.15.0-228.240~16.04.1

4.15.0-229.241~16.04.1

4.15.0-230.242~16.04.1

4.15.0-231.243~16.04.1

4.15.0-232.244~16.04.1

4.15.0-233.245~16.04.1

4.15.0-234.246~16.04.1

4.15.0-235.247~16.04.1

4.15.0-236.248~16.04.1

4.15.0-237.249~16.04.1

4.15.0-238.250~16.04.1

4.15.0-239.251~16.04.1

4.15.0-240.252~16.04.1

4.15.0-241.253~16.04.1

4.15.0-242.254~16.04.1

4.15.0-243.255~16.04.1

4.15.0-245.257~16.04.1

4.15.0-246.258~16.04.1

4.15.0-247.259~16.04.1

4.15.0-248.260~16.04.1

4.15.0-249.261~16.04.1

4.15.0-250.262~16.04.1

4.15.0-253.265~16.04.1

4.15.0-254.266~16.04.1

4.15.0-257.269~16.04.1

4.15.0-260.272~16.04.2

4.15.0-261.273~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "dasd-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "fb-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-261",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-cloud-tools-4.15.0-261",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-tools-4.15.0-261",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-udebs-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "message-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "pata-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "serial-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273~16.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-kvm

Package

Name: linux-kvm
Purl: pkg:deb/ubuntu/linux-kvm?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.0-1004.9

4.4.0-1007.12

4.4.0-1008.13

4.4.0-1009.14

4.4.0-1010.15

4.4.0-1012.17

4.4.0-1013.18

4.4.0-1015.20

4.4.0-1017.22

4.4.0-1019.24

4.4.0-1020.25

4.4.0-1021.26

4.4.0-1023.28

4.4.0-1026.31

4.4.0-1027.32

4.4.0-1029.34

4.4.0-1031.37

4.4.0-1032.38

4.4.0-1033.39

4.4.0-1035.41

4.4.0-1036.42

4.4.0-1037.43

4.4.0-1038.44

4.4.0-1039.45

4.4.0-1040.46

4.4.0-1041.47

4.4.0-1043.49

4.4.0-1044.50

4.4.0-1046.52

4.4.0-1047.53

4.4.0-1048.55

4.4.0-1051.58

4.4.0-1052.59

4.4.0-1054.61

4.4.0-1056.63

4.4.0-1058.65

4.4.0-1059.66

4.4.0-1060.67

4.4.0-1062.69

4.4.0-1063.70

4.4.0-1064.71

4.4.0-1065.72

4.4.0-1066.73

4.4.0-1068.75

4.4.0-1069.76

4.4.0-1070.77

4.4.0-1071.78

4.4.0-1075.82

4.4.0-1076.83

4.4.0-1077.84

4.4.0-1078.85

4.4.0-1079.86

4.4.0-1080.87

4.4.0-1082.91

4.4.0-1084.93

4.4.0-1085.94

4.4.0-1087.96

4.4.0-1088.97

4.4.0-1089.98

4.4.0-1090.99

4.4.0-1091.100

4.4.0-1092.101

4.4.0-1093.102

4.4.0-1094.103

4.4.0-1095.104

4.4.0-1096.105

4.4.0-1097.106

4.4.0-1098.107

4.4.0-1099.108

4.4.0-1100.109

4.4.0-1102.111

4.4.0-1103.112

4.4.0-1104.113

4.4.0-1105.114

4.4.0-1108.118

4.4.0-1110.120

4.4.0-1111.121

4.4.0-1112.122

4.4.0-1113.123

4.4.0-1114.124

4.4.0-1115.125

4.4.0-1116.126

4.4.0-1117.127

4.4.0-1118.128

4.4.0-1119.129

4.4.0-1120.130

4.4.0-1121.131

4.4.0-1122.132

4.4.0-1123.133

4.4.0-1124.134

4.4.0-1125.135

4.4.0-1126.136

4.4.0-1128.138

4.4.0-1129.139

4.4.0-1130.140

4.4.0-1131.141

4.4.0-1132.142

4.4.0-1134.144

4.4.0-1135.145

4.4.0-1136.146

4.4.0-1137.147

4.4.0-1138.148

4.4.0-1139.149

4.4.0-1140.151

4.4.0-1141.152

4.4.0-1142.153

4.4.0-1143.154

4.4.0-1144.155

4.4.0-1145.156

4.4.0-1146.157

4.4.0-1147.158

4.4.0-1148.159

4.4.0-1149.160

4.4.0-1150.161

4.4.0-1151.162

4.4.0-1152.163

4.4.0-1153.164

4.4.0-1154.165

4.4.0-1155.166

4.4.0-1156.167

4.4.0-1157.168

4.4.0-1158.169

4.4.0-1159.170

4.4.0-1160.171

4.4.0-1161.172

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.4.0-1161-kvm",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-cloud-tools-4.4.0-1161-kvm",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-headers-4.4.0-1161-kvm",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-image-4.4.0-1161-kvm",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-kvm-cloud-tools-4.4.0-1161",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-kvm-headers-4.4.0-1161",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-kvm-tools-4.4.0-1161",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-modules-4.4.0-1161-kvm",
            "binary_version":  "4.4.0-1161.172"
        },
        {
            "binary_name":  "linux-tools-4.4.0-1161-kvm",
            "binary_version":  "4.4.0-1161.172"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=esm-infra-legacy%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1007.9~16.04.1

4.15.0-1008.10~16.04.1

4.15.0-1009.11~16.04.1

4.15.0-1010.12~16.04.1

4.15.0-1011.13~16.04.1

4.15.0-1013.15~16.04.1

4.15.0-1014.16~16.04.1

4.15.0-1015.17~16.04.1

4.15.0-1017.19~16.04.2

4.15.0-1018.20~16.04.1

4.15.0-1021.23~16.04.1

4.15.0-1022.25~16.04.1

4.15.0-1023.26~16.04.1

4.15.0-1025.28~16.04.1

4.15.0-1026.29~16.04.1

4.15.0-1027.30~16.04.1

4.15.0-1029.32~16.04.1

4.15.0-1030.33~16.04.1

4.15.0-1031.34~16.04.1

4.15.0-1033.36~16.04.1

4.15.0-1035.38~16.04.1

4.15.0-1037.41~16.04.1

4.15.0-1038.42~16.04.1

4.15.0-1039.43~16.04.1

4.15.0-1045.49~16.04.1

4.15.0-1046.50~16.04.1

4.15.0-1050.54~16.04.1

4.15.0-1051.55~16.04.1

4.15.0-1053.57~16.04.1

4.15.0-1054.58~16.04.1

4.15.0-1056.61~16.04.1

4.15.0-1058.64~16.04.1

4.15.0-1059.65~16.04.1

4.15.0-1061.67~16.04.1

4.15.0-1062.68~16.04.1

4.15.0-1064.71~16.04.1

4.15.0-1065.73~16.04.1

4.15.0-1066.74~16.04.1

4.15.0-1067.75~16.04.1

4.15.0-1068.76~16.04.1

4.15.0-1069.77~16.04.1

4.15.0-1070.78~16.04.1

4.15.0-1071.79~16.04.1

4.15.0-1072.80~16.04.1

4.15.0-1075.83~16.04.1

4.15.0-1078.86~16.04.1

4.15.0-1079.87~16.04.1

4.15.0-1080.88~16.04.1

4.15.0-1081.89~16.04.1

4.15.0-1082.90~16.04.1

4.15.0-1083.91~16.04.1

4.15.0-1084.92~16.04.1

4.15.0-1085.93~16.04.1

4.15.0-1086.94~16.04.1

4.15.0-1087.95~16.04.1

4.15.0-1089.98~16.04.1

4.15.0-1090.99~16.04.1

4.15.0-1091.100~16.04.1

4.15.0-1092.101~16.04.1

4.15.0-1093.102~16.04.1

4.15.0-1095.104~16.04.1

4.15.0-1098.108~16.04.1

4.15.0-1101.112~16.04.1

4.15.0-1102.113~16.04.1

4.15.0-1104.115~16.04.1

4.15.0-1105.116~16.04.1

4.15.0-1106.117~16.04.1

4.15.0-1107.118~16.04.1

4.15.0-1108.119~16.04.1

4.15.0-1111.122~16.04.2

4.15.0-1112.123~16.04.1

4.15.0-1113.124~16.04.1

4.15.0-1115.126~16.04.1

4.15.0-1116.127~16.04.1

4.15.0-1117.128~16.04.1

4.15.0-1118.129~16.04.1

4.15.0-1119.130~16.04.1

4.15.0-1120.131~16.04.1

4.15.0-1121.132~16.04.1

4.15.0-1122.133~16.04.1

4.15.0-1123.134~16.04.1

4.15.0-1124.135~16.04.1

4.15.0-1125.136~16.04.1

4.15.0-1126.137~16.04.1

4.15.0-1127.138~16.04.1

4.15.0-1128.139~16.04.1

4.15.0-1129.140~16.04.1

4.15.0-1130.141~16.04.1

4.15.0-1131.142~16.04.1

4.15.0-1132.143~16.04.1

4.15.0-1133.144~16.04.1

4.15.0-1134.145~16.04.1

4.15.0-1135.146~16.04.1

4.15.0-1136.147~16.04.1

4.15.0-1137.148~16.04.1

4.15.0-1138.149~16.04.1

4.15.0-1139.150~16.04.1

4.15.0-1140.151~16.04.1

4.15.0-1141.152~16.04.1

4.15.0-1142.153~16.04.1

4.15.0-1143.154~16.04.1

4.15.0-1144.155~16.04.1

4.15.0-1145.156~16.04.1

4.15.0-1148.159~16.04.1

4.15.0-1149.160~16.04.1

4.15.0-1150.161~16.04.1

4.15.0-1151.162~16.04.1

4.15.0-1153.164~16.04.1

4.15.0-1154.165~16.04.1

4.15.0-1156.167~16.04.1

4.15.0-1158.169~16.04.1

4.15.0-1160.171~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-oracle-headers-4.15.0-1160",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-oracle-tools-4.15.0-1160",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171~16.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:18.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.13.0-16.19

4.13.0-17.20

4.13.0-25.29

4.13.0-32.35

4.15.0-10.11

4.15.0-12.13

4.15.0-13.14

4.15.0-15.16

4.15.0-19.20

4.15.0-20.21

4.15.0-22.24

4.15.0-23.25

4.15.0-24.26

4.15.0-29.31

4.15.0-30.32

4.15.0-32.35

4.15.0-33.36

4.15.0-34.37

4.15.0-36.39

4.15.0-38.41

4.15.0-39.42

4.15.0-42.45

4.15.0-43.46

4.15.0-44.47

4.15.0-45.48

4.15.0-46.49

4.15.0-47.50

4.15.0-48.51

4.15.0-50.54

4.15.0-51.55

4.15.0-52.56

4.15.0-54.58

4.15.0-55.60

4.15.0-58.64

4.15.0-60.67

4.15.0-62.69

4.15.0-64.73

4.15.0-65.74

4.15.0-66.75

4.15.0-69.78

4.15.0-70.79

4.15.0-72.81

4.15.0-74.84

4.15.0-76.86

4.15.0-88.88

4.15.0-91.92

4.15.0-96.97

4.15.0-99.100

4.15.0-101.102

4.15.0-106.107

4.15.0-108.109

4.15.0-109.110

4.15.0-111.112

4.15.0-112.113

4.15.0-115.116

4.15.0-117.118

4.15.0-118.119

4.15.0-121.123

4.15.0-122.124

4.15.0-123.126

4.15.0-124.127

4.15.0-126.129

4.15.0-128.131

4.15.0-129.132

4.15.0-130.134

4.15.0-132.136

4.15.0-134.138

4.15.0-135.139

4.15.0-136.140

4.15.0-137.141

4.15.0-139.143

4.15.0-140.144

4.15.0-141.145

4.15.0-142.146

4.15.0-143.147

4.15.0-144.148

4.15.0-147.151

4.15.0-151.157

4.15.0-153.160

4.15.0-154.161

4.15.0-156.163

4.15.0-158.166

4.15.0-159.167

4.15.0-161.169

4.15.0-162.170

4.15.0-163.171

4.15.0-166.174

4.15.0-167.175

4.15.0-169.177

4.15.0-171.180

4.15.0-173.182

4.15.0-175.184

4.15.0-176.185

4.15.0-177.186

4.15.0-180.189

4.15.0-184.194

4.15.0-187.198

4.15.0-188.199

4.15.0-189.200

4.15.0-191.202

4.15.0-192.203

4.15.0-193.204

4.15.0-194.205

4.15.0-196.207

4.15.0-197.208

4.15.0-200.211

4.15.0-201.212

4.15.0-202.213

4.15.0-204.215

4.15.0-206.217

4.15.0-208.220

4.15.0-209.220

4.15.0-210.221

4.15.0-211.222

4.15.0-212.223

4.15.0-213.224

4.15.0-214.225

4.15.0-216.227

4.15.0-218.229

4.15.0-219.230

4.15.0-220.231

4.15.0-221.232

4.15.0-222.233

4.15.0-223.235

4.15.0-224.236

4.15.0-225.237

4.15.0-226.238

4.15.0-227.239

4.15.0-228.240

4.15.0-229.241

4.15.0-230.242

4.15.0-231.243

4.15.0-232.244

4.15.0-233.245

4.15.0-234.246

4.15.0-235.247

4.15.0-236.248

4.15.0-237.249

4.15.0-238.250

4.15.0-239.251

4.15.0-240.252

4.15.0-241.253

4.15.0-242.254

4.15.0-243.255

4.15.0-245.257

4.15.0-246.258

4.15.0-247.259

4.15.0-248.260

4.15.0-249.261

4.15.0-250.262

4.15.0-251.263

4.15.0-253.265

4.15.0-254.266

4.15.0-257.269

4.15.0-260.272

4.15.0-261.273

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "dasd-extra-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "dasd-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "fat-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "fb-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "input-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "irda-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "kernel-image-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-261",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-headers-4.15.0-261",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-headers-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-headers-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-image-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-modules-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-modules-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-source-4.15.0",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-tools-4.15.0-261",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-tools-4.15.0-261-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-tools-4.15.0-261-lowlatency",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "md-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "message-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "nic-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "parport-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "pata-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "plip-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "sata-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "serial-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "usb-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-261-generic-di",
            "binary_version":  "4.15.0-261.273"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1001.1

4.15.0-1003.3

4.15.0-1005.5

4.15.0-1006.6

4.15.0-1007.7

4.15.0-1009.9

4.15.0-1010.10

4.15.0-1011.11

4.15.0-1016.16

4.15.0-1017.17

4.15.0-1019.19

4.15.0-1020.20

4.15.0-1021.21

4.15.0-1023.23

4.15.0-1025.25

4.15.0-1027.27

4.15.0-1029.30

4.15.0-1031.33

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1035.37

4.15.0-1037.39

4.15.0-1039.41

4.15.0-1040.42

4.15.0-1041.43

4.15.0-1043.45

4.15.0-1044.46

4.15.0-1045.47

4.15.0-1047.49

4.15.0-1048.50

4.15.0-1050.52

4.15.0-1051.53

4.15.0-1052.54

4.15.0-1054.56

4.15.0-1056.58

4.15.0-1057.59

4.15.0-1058.60

4.15.0-1060.62

4.15.0-1063.67

4.15.0-1065.69

4.15.0-1066.70

4.15.0-1067.71

4.15.0-1073.77

4.15.0-1076.80

4.15.0-1077.81

4.15.0-1079.83

4.15.0-1080.84

4.15.0-1082.86

4.15.0-1083.87

4.15.0-1086.91

4.15.0-1087.92

4.15.0-1088.93

4.15.0-1090.95

4.15.0-1091.96

4.15.0-1092.98

4.15.0-1093.99

4.15.0-1094.101

4.15.0-1095.102

4.15.0-1096.103

4.15.0-1097.104

4.15.0-1098.105

4.15.0-1099.106

4.15.0-1101.108

4.15.0-1102.109

4.15.0-1103.110

4.15.0-1106.113

4.15.0-1109.116

4.15.0-1110.117

4.15.0-1111.118

4.15.0-1112.119

4.15.0-1114.121

4.15.0-1115.122

4.15.0-1116.123

4.15.0-1118.125

4.15.0-1119.127

4.15.0-1121.129

4.15.0-1123.132

4.15.0-1124.133

4.15.0-1126.135

4.15.0-1127.136

4.15.0-1128.137

4.15.0-1130.139

4.15.0-1133.143

4.15.0-1136.147

4.15.0-1137.148

4.15.0-1139.150

4.15.0-1140.151

4.15.0-1141.152

4.15.0-1142.154

4.15.0-1143.155

4.15.0-1144.156

4.15.0-1146.158

4.15.0-1147.159

4.15.0-1148.160

4.15.0-1150.163

4.15.0-1151.164

4.15.0-1153.166

4.15.0-1154.167

4.15.0-1155.168

4.15.0-1156.169

4.15.0-1157.170

4.15.0-1158.171

4.15.0-1159.172

4.15.0-1160.173

4.15.0-1161.174

4.15.0-1162.175

4.15.0-1163.176

4.15.0-1164.177

4.15.0-1165.178

4.15.0-1166.179

4.15.0-1167.180

4.15.0-1168.181

4.15.0-1169.182

4.15.0-1170.183

4.15.0-1172.185

4.15.0-1173.186

4.15.0-1174.187

4.15.0-1175.188

4.15.0-1176.189

4.15.0-1177.190

4.15.0-1178.191

4.15.0-1179.192

4.15.0-1180.193

4.15.0-1181.194

4.15.0-1182.195

4.15.0-1183.196

4.15.0-1184.197

4.15.0-1185.198

4.15.0-1186.199

4.15.0-1187.200

4.15.0-1188.201

4.15.0-1189.202

4.15.0-1190.203

4.15.0-1191.204

4.15.0-1192.205

4.15.0-1194.207

4.15.0-1195.208

4.15.0-1196.209

4.15.0-1197.210

4.15.0-1198.211

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-4.15.0-1198",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-aws-headers-4.15.0-1198",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-aws-tools-4.15.0-1198",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1198-aws",
            "binary_version":  "4.15.0-1198.211"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-5.4

Package

Name: linux-aws-5.4
Purl: pkg:deb/ubuntu/linux-aws-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1018.18~18.04.1

5.4.0-1020.20~18.04.2

5.4.0-1022.22~18.04.1

5.4.0-1024.24~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1028.29~18.04.1

5.4.0-1029.30~18.04.1

5.4.0-1030.31~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1035.37~18.04.1

5.4.0-1037.39~18.04.1

5.4.0-1038.40~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1041.43~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1045.47~18.04.1

5.4.0-1047.49~18.04.1

5.4.0-1048.50~18.04.1

5.4.0-1049.51~18.04.1

5.4.0-1051.53~18.04.1

5.4.0-1054.57~18.04.1

5.4.0-1055.58~18.04.1

5.4.0-1056.59~18.04.1

5.4.0-1057.60~18.04.1

5.4.0-1058.61~18.04.3

5.4.0-1059.62~18.04.1

5.4.0-1060.63~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1064.67~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1066.69~18.04.1

5.4.0-1068.72~18.04.1

5.4.0-1069.73~18.04.1

5.4.0-1071.76~18.04.1

5.4.0-1072.77~18.04.1

5.4.0-1075.80~18.04.1

5.4.0-1078.84~18.04.1

5.4.0-1080.87~18.04.1

5.4.0-1081.88~18.04.1

5.4.0-1083.90~18.04.1

5.4.0-1084.91~18.04.1

5.4.0-1085.92~18.04.1

5.4.0-1086.93~18.04.1

5.4.0-1088.96~18.04.1

5.4.0-1089.97~18.04.1

5.4.0-1090.98~18.04.1

5.4.0-1092.100~18.04.2

5.4.0-1093.102~18.04.2

5.4.0-1094.102~18.04.1

5.4.0-1096.104~18.04.1

5.4.0-1097.105~18.04.1

5.4.0-1099.107~18.04.1

5.4.0-1100.108~18.04.1

5.4.0-1101.109~18.04.1

5.4.0-1103.111~18.04.1

5.4.0-1104.112~18.04.1

5.4.0-1105.113~18.04.1

5.4.0-1106.114~18.04.1

5.4.0-1107.115~18.04.1

5.4.0-1108.116~18.04.1

5.4.0-1109.118~18.04.1

5.4.0-1110.119~18.04.1

5.4.0-1111.120~18.04.1

5.4.0-1112.121~18.04.2

5.4.0-1113.123~18.04.1

5.4.0-1114.124~18.04.1

5.4.0-1116.126~18.04.1

5.4.0-1117.127~18.04.1

5.4.0-1118.128~18.04.1

5.4.0-1119.129~18.04.1

5.4.0-1120.130~18.04.1

5.4.0-1121.131~18.04.1

5.4.0-1122.132~18.04.1

5.4.0-1123.133~18.04.1

5.4.0-1124.134~18.04.1

5.4.0-1125.135~18.04.1

5.4.0-1126.136~18.04.1

5.4.0-1127.137~18.04.2

5.4.0-1128.138~18.04.1

5.4.0-1129.139~18.04.1

5.4.0-1130.140~18.04.1

5.4.0-1131.141~18.04.1

5.4.0-1132.142~18.04.1

5.4.0-1133.143~18.04.1

5.4.0-1134.144~18.04.1

5.4.0-1135.145~18.04.1

5.4.0-1136.146~18.04.1

5.4.0-1137.147~18.04.1

5.4.0-1139.149~18.04.1

5.4.0-1142.152~18.04.1

5.4.0-1144.154~18.04.1

5.4.0-1145.155~18.04.1

5.4.0-1146.156~18.04.1

5.4.0-1147.157~18.04.1

5.4.0-1148.158~18.04.1

5.4.0-1149.159~18.04.1

5.4.0-1150.160~18.04.1

5.4.0-1151.161~18.04.1

5.4.0-1152.162~18.04.1

5.4.0-1153.163~18.04.1

5.4.0-1154.164~18.04.1

5.4.0-1156.166~18.04.1

5.4.0-1157.167~18.04.1

5.4.0-1158.168~18.04.1

5.4.0-1160.170~18.04.1

5.4.0-1161.172~18.04.1

5.4.0-1162.173~18.04.1

5.4.0-1163.174~18.04.1

5.4.0-1165.176~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.4-cloud-tools-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-aws-5.4-headers-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-aws-5.4-tools-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-4.15

Package

Name: linux-azure-4.15
Purl: pkg:deb/ubuntu/linux-azure-4.15?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1082.92

4.15.0-1083.93

4.15.0-1089.99

4.15.0-1091.101

4.15.0-1092.102

4.15.0-1093.103

4.15.0-1095.105

4.15.0-1096.106

4.15.0-1099.110

4.15.0-1100.111

4.15.0-1102.113

4.15.0-1103.114

4.15.0-1104.116

4.15.0-1106.118

4.15.0-1108.120

4.15.0-1109.121

4.15.0-1110.122

4.15.0-1111.123

4.15.0-1112.125

4.15.0-1113.126

4.15.0-1114.127

4.15.0-1115.128

4.15.0-1118.131

4.15.0-1121.134

4.15.0-1122.135

4.15.0-1123.136

4.15.0-1124.137

4.15.0-1125.138

4.15.0-1126.139

4.15.0-1127.140

4.15.0-1129.142

4.15.0-1130.143

4.15.0-1131.144

4.15.0-1133.146

4.15.0-1134.147

4.15.0-1136.149

4.15.0-1137.150

4.15.0-1138.151

4.15.0-1139.152

4.15.0-1142.156

4.15.0-1145.160

4.15.0-1146.161

4.15.0-1149.164

4.15.0-1150.165

4.15.0-1151.166

4.15.0-1153.168

4.15.0-1157.172

4.15.0-1158.173

4.15.0-1159.174

4.15.0-1161.176

4.15.0-1162.177

4.15.0-1163.178

4.15.0-1164.179

4.15.0-1165.180

4.15.0-1166.181

4.15.0-1167.182

4.15.0-1168.183

4.15.0-1169.184

4.15.0-1170.185

4.15.0-1171.186

4.15.0-1172.187

4.15.0-1173.188

4.15.0-1174.189

4.15.0-1175.190

4.15.0-1176.191

4.15.0-1177.192

4.15.0-1178.193

4.15.0-1179.194

4.15.0-1180.195

4.15.0-1181.196

4.15.0-1182.197

4.15.0-1183.198

4.15.0-1184.199

4.15.0-1185.200

4.15.0-1186.201

4.15.0-1187.202

4.15.0-1188.203

4.15.0-1189.204

4.15.0-1190.205

4.15.0-1191.206

4.15.0-1192.207

4.15.0-1193.208

4.15.0-1194.209

4.15.0-1195.210

4.15.0-1196.211

4.15.0-1197.212

4.15.0-1199.214

4.15.0-1200.215

4.15.0-1201.216

4.15.0-1202.217

4.15.0-1204.219

4.15.0-1205.220

4.15.0-1206.221

4.15.0-1207.222

4.15.0-1208.223

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-4.15-cloud-tools-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-azure-4.15-headers-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-azure-4.15-tools-4.15.0-1208",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1208-azure",
            "binary_version":  "4.15.0-1208.223"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.4

Package

Name: linux-azure-5.4
Purl: pkg:deb/ubuntu/linux-azure-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1020.20~18.04.1

5.4.0-1022.22~18.04.1

5.4.0-1023.23~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1026.26~18.04.1

5.4.0-1031.32~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1035.36~18.04.1

5.4.0-1036.38~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1040.42~18.04.1

5.4.0-1041.43~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1044.46~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1047.49~18.04.1

5.4.0-1048.50~18.04.1

5.4.0-1049.51~18.04.1

5.4.0-1051.53~18.04.1

5.4.0-1055.57~18.04.1

5.4.0-1056.58~18.04.1

5.4.0-1058.60~18.04.1

5.4.0-1059.62~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1062.65~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1064.67~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1067.70~18.04.1

5.4.0-1068.71~18.04.1

5.4.0-1069.72~18.04.1

5.4.0-1070.73~18.04.1

5.4.0-1072.75~18.04.1

5.4.0-1073.76~18.04.1

5.4.0-1074.77~18.04.1

5.4.0-1077.80~18.04.1

5.4.0-1078.81~18.04.1

5.4.0-1080.83~18.04.2

5.4.0-1083.87~18.04.1

5.4.0-1085.90~18.04.1

5.4.0-1086.91~18.04.1

5.4.0-1089.94~18.04.1

5.4.0-1090.95~18.04.1

5.4.0-1091.96~18.04.1

5.4.0-1094.100~18.04.1

5.4.0-1095.101~18.04.1

5.4.0-1098.104~18.04.2

5.4.0-1100.106~18.04.1

5.4.0-1101.107~18.04.1

5.4.0-1103.109~18.04.1

5.4.0-1104.110~18.04.1

5.4.0-1105.111~18.04.1

5.4.0-1106.112~18.04.1

5.4.0-1107.113~18.04.1

5.4.0-1108.114~18.04.1

5.4.0-1109.115~18.04.1

5.4.0-1110.116~18.04.1

5.4.0-1111.117~18.04.1

5.4.0-1112.118~18.04.1

5.4.0-1113.119~18.04.1

5.4.0-1115.122~18.04.1

5.4.0-1116.123~18.04.1

5.4.0-1117.124~18.04.1

5.4.0-1118.125~18.04.1

5.4.0-1119.126~18.04.2

5.4.0-1120.127~18.04.1

5.4.0-1121.128~18.04.1

5.4.0-1122.129~18.04.1

5.4.0-1123.130~18.04.1

5.4.0-1124.131~18.04.1

5.4.0-1126.133~18.04.1

5.4.0-1127.134~18.04.1

5.4.0-1128.135~18.04.1

5.4.0-1129.136~18.04.1

5.4.0-1130.137~18.04.1

5.4.0-1131.138~18.04.1

5.4.0-1132.139~18.04.1

5.4.0-1133.140~18.04.1

5.4.0-1134.141~18.04.1

5.4.0-1135.142~18.04.1

5.4.0-1136.143~18.04.1

5.4.0-1137.144~18.04.1

5.4.0-1138.145~18.04.1

5.4.0-1139.146~18.04.1

5.4.0-1140.147~18.04.1

5.4.0-1142.149~18.04.1

5.4.0-1143.150~18.04.1

5.4.0-1145.152~18.04.1

5.4.0-1147.154~18.04.1

5.4.0-1148.155~18.04.1

5.4.0-1149.156~18.04.1

5.4.0-1150.157~18.04.1

5.4.0-1151.158~18.04.1

5.4.0-1152.159~18.04.1

5.4.0-1153.160~18.04.1

5.4.0-1154.161~18.04.1

5.4.0-1156.163~18.04.1

5.4.0-1157.164~18.04.1

5.4.0-1161.167~18.04.1

5.4.0-1162.168~18.04.1

5.4.0-1163.169~18.04.1

5.4.0-1164.170~18.04.1

5.4.0-1166.172~18.04.1

5.4.0-1167.173~18.04.1

5.4.0-1168.174~18.04.1

5.4.0-1169.175~18.04.1

5.4.0-1170.176~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.4-cloud-tools-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-azure-5.4-headers-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-azure-5.4-tools-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-4.15

Package

Name: linux-gcp-4.15
Purl: pkg:deb/ubuntu/linux-gcp-4.15?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1071.81

4.15.0-1077.87

4.15.0-1078.88

4.15.0-1080.90

4.15.0-1081.92

4.15.0-1083.94

4.15.0-1084.95

4.15.0-1086.98

4.15.0-1087.100

4.15.0-1088.101

4.15.0-1090.103

4.15.0-1091.104

4.15.0-1092.105

4.15.0-1093.106

4.15.0-1094.107

4.15.0-1095.108

4.15.0-1096.109

4.15.0-1097.110

4.15.0-1098.111

4.15.0-1099.112

4.15.0-1100.113

4.15.0-1103.116

4.15.0-1106.120

4.15.0-1107.121

4.15.0-1108.122

4.15.0-1109.123

4.15.0-1110.124

4.15.0-1111.125

4.15.0-1112.126

4.15.0-1114.128

4.15.0-1115.129

4.15.0-1116.130

4.15.0-1118.132

4.15.0-1119.133

4.15.0-1120.134

4.15.0-1121.135

4.15.0-1122.136

4.15.0-1124.138

4.15.0-1127.142

4.15.0-1130.146

4.15.0-1131.147

4.15.0-1134.150

4.15.0-1135.151

4.15.0-1136.152

4.15.0-1137.153

4.15.0-1138.154

4.15.0-1141.157

4.15.0-1142.158

4.15.0-1143.159

4.15.0-1145.161

4.15.0-1146.162

4.15.0-1147.163

4.15.0-1148.164

4.15.0-1149.165

4.15.0-1150.166

4.15.0-1151.167

4.15.0-1152.168

4.15.0-1153.170

4.15.0-1154.171

4.15.0-1155.172

4.15.0-1156.173

4.15.0-1157.174

4.15.0-1158.175

4.15.0-1159.176

4.15.0-1160.177

4.15.0-1161.178

4.15.0-1162.179

4.15.0-1163.180

4.15.0-1164.181

4.15.0-1165.182

4.15.0-1166.183

4.15.0-1167.184

4.15.0-1168.185

4.15.0-1169.186

4.15.0-1170.187

4.15.0-1171.188

4.15.0-1172.189

4.15.0-1173.190

4.15.0-1174.191

4.15.0-1175.192

4.15.0-1176.193

4.15.0-1177.194

4.15.0-1178.195

4.15.0-1179.196

4.15.0-1180.197

4.15.0-1181.198

4.15.0-1182.199

4.15.0-1183.200

4.15.0-1184.201

4.15.0-1185.202

4.15.0-1186.203

4.15.0-1187.204

4.15.0-1188.205

4.15.0-1189.206

4.15.0-1190.207

4.15.0-1191.208

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-gcp-4.15-headers-4.15.0-1191",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-gcp-4.15-tools-4.15.0-1191",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1191-gcp",
            "binary_version":  "4.15.0-1191.208"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.4

Package

Name: linux-gcp-5.4
Purl: pkg:deb/ubuntu/linux-gcp-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1019.19~18.04.2

5.4.0-1021.21~18.04.1

5.4.0-1022.22~18.04.1

5.4.0-1024.24~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1028.29~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1032.34~18.04.1

5.4.0-1033.35~18.04.1

5.4.0-1034.37~18.04.1

5.4.0-1036.39~18.04.1

5.4.0-1037.40~18.04.1

5.4.0-1038.41~18.04.1

5.4.0-1040.43~18.04.1

5.4.0-1041.44~18.04.1

5.4.0-1042.45~18.04.1

5.4.0-1043.46~18.04.1

5.4.0-1044.47~18.04.2

5.4.0-1046.49~18.04.1

5.4.0-1049.53~18.04.1

5.4.0-1051.55~18.04.1

5.4.0-1052.56~18.04.1

5.4.0-1053.57~18.04.1

5.4.0-1055.59~18.04.1

5.4.0-1056.60~18.04.1

5.4.0-1057.61~18.04.1

5.4.0-1058.62~18.04.1

5.4.0-1059.63~18.04.1

5.4.0-1060.64~18.04.1

5.4.0-1062.66~18.04.1

5.4.0-1063.67~18.04.1

5.4.0-1064.68~18.04.1

5.4.0-1065.69~18.04.1

5.4.0-1067.71~18.04.1

5.4.0-1068.72~18.04.1

5.4.0-1069.73~18.04.1

5.4.0-1072.77~18.04.1

5.4.0-1073.78~18.04.1

5.4.0-1075.80~18.04.1

5.4.0-1078.84~18.04.1

5.4.0-1080.87~18.04.1

5.4.0-1083.91~18.04.1

5.4.0-1084.92~18.04.1

5.4.0-1086.94~18.04.1

5.4.0-1087.95~18.04.1

5.4.0-1089.97~18.04.1

5.4.0-1092.101~18.04.1

5.4.0-1093.102~18.04.1

5.4.0-1096.105~18.04.2

5.4.0-1097.106~18.04.1

5.4.0-1098.107~18.04.1

5.4.0-1100.109~18.04.1

5.4.0-1101.110~18.04.1

5.4.0-1102.111~18.04.2

5.4.0-1103.112~18.04.1

5.4.0-1104.113~18.04.1

5.4.0-1105.114~18.04.1

5.4.0-1106.115~18.04.1

5.4.0-1107.116~18.04.1

5.4.0-1108.117~18.04.1

5.4.0-1109.118~18.04.1

5.4.0-1110.119~18.04.1

5.4.0-1111.120~18.04.1

5.4.0-1112.121~18.04.1

5.4.0-1113.122~18.04.1

5.4.0-1115.124~18.04.1

5.4.0-1116.125~18.04.1

5.4.0-1117.126~18.04.1

5.4.0-1118.127~18.04.1

5.4.0-1120.129~18.04.1

5.4.0-1121.130~18.04.1

5.4.0-1122.131~18.04.1

5.4.0-1123.132~18.04.1

5.4.0-1124.133~18.04.1

5.4.0-1125.134~18.04.1

5.4.0-1126.135~18.04.1

5.4.0-1127.136~18.04.1

5.4.0-1128.137~18.04.1

5.4.0-1129.138~18.04.1

5.4.0-1130.139~18.04.1

5.4.0-1132.141~18.04.1

5.4.0-1133.142~18.04.1

5.4.0-1134.143~18.04.1

5.4.0-1135.144~18.04.1

5.4.0-1136.145~18.04.1

5.4.0-1137.146~18.04.1

5.4.0-1138.147~18.04.1

5.4.0-1139.148~18.04.1

5.4.0-1140.149~18.04.1

5.4.0-1141.150~18.04.1

5.4.0-1142.151~18.04.1

5.4.0-1143.152~18.04.1

5.4.0-1145.154~18.04.1

5.4.0-1147.156~18.04.1

5.4.0-1148.157~18.04.1

5.4.0-1149.158~18.04.1

5.4.0-1150.159~18.04.1

5.4.0-1151.160~18.04.1

5.4.0-1152.161~18.04.1

5.4.0-1153.162~18.04.1

5.4.0-1154.163~18.04.1

5.4.0-1155.164~18.04.1

5.4.0-1156.165~18.04.1

5.4.0-1157.166~18.04.1

5.4.0-1159.168~18.04.1

5.4.0-1160.169~18.04.1

5.4.0-1161.170~18.04.1

5.4.0-1162.171~18.04.1

5.4.0-1163.172~18.04.1

5.4.0-1164.173~18.04.1

5.4.0-1165.174~18.04.1

5.4.0-1166.175~18.04.1

5.4.0-1167.176~18.04.1

5.4.0-1168.178~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.4-headers-5.4.0-1168",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.4-tools-5.4.0-1168",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-5.4

Package

Name: linux-hwe-5.4
Purl: pkg:deb/ubuntu/linux-hwe-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-37.41~18.04.1

5.4.0-39.43~18.04.1

5.4.0-40.44~18.04.1

5.4.0-42.46~18.04.1

5.4.0-45.49~18.04.2

5.4.0-47.51~18.04.1

5.4.0-48.52~18.04.1

5.4.0-51.56~18.04.1

5.4.0-52.57~18.04.1

5.4.0-53.59~18.04.1

5.4.0-54.60~18.04.1

5.4.0-56.62~18.04.1

5.4.0-58.64~18.04.1

5.4.0-59.65~18.04.1

5.4.0-60.67~18.04.1

5.4.0-62.70~18.04.1

5.4.0-64.72~18.04.1

5.4.0-65.73~18.04.1

5.4.0-66.74~18.04.2

5.4.0-67.75~18.04.1

5.4.0-70.78~18.04.1

5.4.0-71.79~18.04.1

5.4.0-72.80~18.04.1

5.4.0-73.82~18.04.1

5.4.0-74.83~18.04.1

5.4.0-77.86~18.04.1

5.4.0-80.90~18.04.1

5.4.0-81.91~18.04.1

5.4.0-84.94~18.04.1

5.4.0-86.97~18.04.1

5.4.0-87.98~18.04.1

5.4.0-89.100~18.04.1

5.4.0-90.101~18.04.1

5.4.0-91.102~18.04.1

5.4.0-92.103~18.04.2

5.4.0-94.106~18.04.1

5.4.0-96.109~18.04.1

5.4.0-97.110~18.04.1

5.4.0-99.112~18.04.1

5.4.0-100.113~18.04.1

5.4.0-104.118~18.04.1

5.4.0-105.119~18.04.1

5.4.0-107.121~18.04.1

5.4.0-109.123~18.04.1

5.4.0-110.124~18.04.1

5.4.0-113.127~18.04.1

5.4.0-117.132~18.04.1

5.4.0-120.136~18.04.1

5.4.0-121.137~18.04.1

5.4.0-122.138~18.04.1

5.4.0-124.140~18.04.1

5.4.0-125.141~18.04.1

5.4.0-126.142~18.04.1

5.4.0-128.144~18.04.1

5.4.0-131.147~18.04.1

5.4.0-132.148~18.04.1

5.4.0-133.149~18.04.1

5.4.0-135.152~18.04.2

5.4.0-136.153~18.04.1

5.4.0-137.154~18.04.1

5.4.0-139.156~18.04.1

5.4.0-144.161~18.04.1

5.4.0-146.163~18.04.1

5.4.0-147.164~18.04.1

5.4.0-148.165~18.04.1

5.4.0-149.166~18.04.1

5.4.0-150.167~18.04.1

5.4.0-152.169~18.04.1

5.4.0-153.170~18.04.1

5.4.0-155.172~18.04.1

5.4.0-156.173~18.04.1

5.4.0-159.176~18.04.1

5.4.0-162.179~18.04.1

5.4.0-163.180~18.04.1

5.4.0-164.181~18.04.1

5.4.0-165.182~18.04.1

5.4.0-166.183~18.04.2

5.4.0-167.184~18.04.1

5.4.0-169.187~18.04.1

5.4.0-170.188~18.04.1

5.4.0-171.189~18.04.1

5.4.0-172.190~18.04.1

5.4.0-173.191~18.04.1

5.4.0-174.193~18.04.1

5.4.0-175.195~18.04.1

5.4.0-177.197~18.04.1

5.4.0-181.201~18.04.1

5.4.0-182.202~18.04.1

5.4.0-186.206~18.04.1

5.4.0-187.207~18.04.1

5.4.0-189.209~18.04.1

5.4.0-190.210~18.04.1

5.4.0-192.212~18.04.1

5.4.0-193.213~18.04.1

5.4.0-195.215~18.04.1

5.4.0-196.216~18.04.1

5.4.0-198.218~18.04.1

5.4.0-200.220~18.04.1

5.4.0-202.222~18.04.1

5.4.0-204.224~18.04.1

5.4.0-205.225~18.04.1

5.4.0-208.228~18.04.1

5.4.0-211.231~18.04.1

5.4.0-212.232~18.04.1

5.4.0-214.234~18.04.1

5.4.0-215.235~18.04.1

5.4.0-216.236~18.04.1

5.4.0-218.238~18.04.1

5.4.0-219.239~18.04.1

5.4.0-220.240~18.04.1

5.4.0-221.241~18.04.1

5.4.0-222.242~18.04.1

5.4.0-223.243~18.04.1

5.4.0-224.244~18.04.1

5.4.0-225.245~18.04.1

5.4.0-227.247~18.04.1

5.4.0-228.248~18.04.1

5.4.0-229.249~18.04.1

5.4.0-231.251~18.04.1

5.4.0-233.253~18.04.1

5.4.0-234.254~18.04.1

5.4.0-238.258~18.04.1

5.4.0-241.261~18.04.1

5.4.0-242.262~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "fat-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "fb-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "input-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "kernel-image-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-cloud-tools-5.4.0-242",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-cloud-tools-common",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-headers-5.4.0-242",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-source-5.4.0",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-tools-5.4.0-242",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-tools-common",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.4-udebs-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "md-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "message-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "nic-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "parport-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "pata-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "plip-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "sata-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "serial-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "usb-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-ibm-5.4

Package

Name: linux-ibm-5.4
Purl: pkg:deb/ubuntu/linux-ibm-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1010.11~18.04.2

5.4.0-1012.13~18.04.1

5.4.0-1014.15~18.04.1

5.4.0-1015.16~18.04.1

5.4.0-1017.19~18.04.1

5.4.0-1018.20~18.04.1

5.4.0-1019.21~18.04.1

5.4.0-1020.22~18.04.1

5.4.0-1021.23~18.04.1

5.4.0-1023.25~18.04.1

5.4.0-1026.29~18.04.1

5.4.0-1028.32~18.04.1

5.4.0-1029.33~18.04.1

5.4.0-1031.35~18.04.1

5.4.0-1032.36~18.04.1

5.4.0-1033.37~18.04.1

5.4.0-1034.38~18.04.1

5.4.0-1036.41~18.04.1

5.4.0-1037.42~18.04.1

5.4.0-1040.45~18.04.2

5.4.0-1041.46~18.04.1

5.4.0-1042.47~18.04.1

5.4.0-1044.49~18.04.1

5.4.0-1045.50~18.04.1

5.4.0-1046.51~18.04.1

5.4.0-1047.52~18.04.1

5.4.0-1048.53~18.04.1

5.4.0-1049.54~18.04.1

5.4.0-1050.55~18.04.1

5.4.0-1051.56~18.04.1

5.4.0-1052.57~18.04.1

5.4.0-1053.58~18.04.1

5.4.0-1054.59~18.04.1

5.4.0-1056.61~18.04.1

5.4.0-1057.62~18.04.1

5.4.0-1058.63~18.04.1

5.4.0-1059.64~18.04.1

5.4.0-1060.65~18.04.1

5.4.0-1061.66~18.04.1

5.4.0-1063.68~18.04.1

5.4.0-1064.69~18.04.1

5.4.0-1065.70~18.04.1

5.4.0-1066.71~18.04.1

5.4.0-1067.72~18.04.1

5.4.0-1068.73~18.04.1

5.4.0-1069.74~18.04.1

5.4.0-1070.75~18.04.1

5.4.0-1071.76~18.04.1

5.4.0-1072.77~18.04.1

5.4.0-1073.78~18.04.1

5.4.0-1074.79~18.04.1

5.4.0-1075.80~18.04.1

5.4.0-1076.81~18.04.1

5.4.0-1077.82~18.04.1

5.4.0-1078.83~18.04.1

5.4.0-1079.84~18.04.1

5.4.0-1080.85~18.04.1

5.4.0-1081.86~18.04.1

5.4.0-1082.87~18.04.1

5.4.0-1083.88~18.04.1

5.4.0-1084.89~18.04.1

5.4.0-1085.90~18.04.1

5.4.0-1086.91~18.04.1

5.4.0-1090.95~18.04.1

5.4.0-1092.97~18.04.1

5.4.0-1093.98~18.04.1

5.4.0-1094.99~18.04.1

5.4.0-1095.100~18.04.1

5.4.0-1096.101~18.04.1

5.4.0-1097.102~18.04.1

5.4.0-1098.103~18.04.1

5.4.0-1099.104~18.04.1

5.4.0-1100.105~18.04.1

5.4.0-1102.107~18.04.1

5.4.0-1103.108~18.04.1

5.4.0-1104.109~18.04.1

5.4.0-1105.110~18.04.1

5.4.0-1107.112~18.04.1

5.4.0-1108.113~18.04.1

5.4.0-1109.114~18.04.1

5.4.0-1111.116~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-cloud-tools-common",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-headers-5.4.0-1111",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-source-5.4.0",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-tools-5.4.0-1111",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.4-tools-common",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-kvm

Package

Name: linux-kvm
Purl: pkg:deb/ubuntu/linux-kvm?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.2

4.15.0-1003.3

4.15.0-1004.4

4.15.0-1006.6

4.15.0-1008.8

4.15.0-1010.10

4.15.0-1011.11

4.15.0-1012.12

4.15.0-1016.16

4.15.0-1017.17

4.15.0-1019.19

4.15.0-1020.20

4.15.0-1021.21

4.15.0-1023.23

4.15.0-1025.25

4.15.0-1026.26

4.15.0-1027.27

4.15.0-1028.28

4.15.0-1029.29

4.15.0-1030.30

4.15.0-1031.31

4.15.0-1032.32

4.15.0-1034.34

4.15.0-1035.35

4.15.0-1036.36

4.15.0-1038.38

4.15.0-1039.39

4.15.0-1042.42

4.15.0-1043.43

4.15.0-1044.44

4.15.0-1046.46

4.15.0-1047.47

4.15.0-1048.48

4.15.0-1050.50

4.15.0-1051.51

4.15.0-1052.52

4.15.0-1053.53

4.15.0-1056.57

4.15.0-1058.59

4.15.0-1059.60

4.15.0-1060.61

4.15.0-1067.68

4.15.0-1069.70

4.15.0-1071.72

4.15.0-1072.73

4.15.0-1074.75

4.15.0-1075.76

4.15.0-1077.79

4.15.0-1079.81

4.15.0-1081.83

4.15.0-1082.84

4.15.0-1084.86

4.15.0-1085.87

4.15.0-1086.88

4.15.0-1087.89

4.15.0-1088.90

4.15.0-1089.91

4.15.0-1090.92

4.15.0-1091.93

4.15.0-1092.94

4.15.0-1094.96

4.15.0-1097.99

4.15.0-1098.100

4.15.0-1099.101

4.15.0-1100.102

4.15.0-1101.103

4.15.0-1102.104

4.15.0-1103.105

4.15.0-1105.107

4.15.0-1106.108

4.15.0-1107.109

4.15.0-1109.112

4.15.0-1110.113

4.15.0-1112.115

4.15.0-1113.116

4.15.0-1114.117

4.15.0-1116.119

4.15.0-1119.123

4.15.0-1122.127

4.15.0-1123.128

4.15.0-1125.130

4.15.0-1126.131

4.15.0-1127.132

4.15.0-1128.133

4.15.0-1129.134

4.15.0-1132.137

4.15.0-1133.138

4.15.0-1134.139

4.15.0-1135.140

4.15.0-1136.141

4.15.0-1137.142

4.15.0-1138.143

4.15.0-1139.144

4.15.0-1140.145

4.15.0-1141.146

4.15.0-1142.147

4.15.0-1143.148

4.15.0-1144.149

4.15.0-1145.150

4.15.0-1146.151

4.15.0-1147.152

4.15.0-1148.153

4.15.0-1149.154

4.15.0-1150.155

4.15.0-1151.156

4.15.0-1152.157

4.15.0-1153.158

4.15.0-1154.159

4.15.0-1155.160

4.15.0-1156.161

4.15.0-1157.162

4.15.0-1158.163

4.15.0-1159.164

4.15.0-1160.165

4.15.0-1161.166

4.15.0-1162.167

4.15.0-1163.168

4.15.0-1164.169

4.15.0-1165.170

4.15.0-1166.171

4.15.0-1167.172

4.15.0-1168.173

4.15.0-1169.174

4.15.0-1170.175

4.15.0-1171.176

4.15.0-1172.177

4.15.0-1173.178

4.15.0-1174.179

4.15.0-1175.180

4.15.0-1176.181

4.15.0-1177.182

4.15.0-1178.183

4.15.0-1179.184

4.15.0-1180.185

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1180-kvm",
            "binary_version":  "4.15.0-1180.185"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1180-kvm",
            "binary_version":  "4.15.0-1180.185"
        },
        {
            "binary_name":  "linux-image-4.15.0-1180-kvm",
            "binary_version":  "4.15.0-1180.185"
        },
        {
            "binary_name":  "linux-kvm-headers-4.15.0-1180",
            "binary_version":  "4.15.0-1180.185"
        },
        {
            "binary_name":  "linux-kvm-tools-4.15.0-1180",
            "binary_version":  "4.15.0-1180.185"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1180-kvm",
            "binary_version":  "4.15.0-1180.185"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1180-kvm",
            "binary_version":  "4.15.0-1180.185"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1007.9

4.15.0-1008.10

4.15.0-1009.11

4.15.0-1010.12

4.15.0-1011.13

4.15.0-1013.15

4.15.0-1014.16

4.15.0-1015.17

4.15.0-1017.19

4.15.0-1018.20

4.15.0-1021.23

4.15.0-1022.25

4.15.0-1023.26

4.15.0-1025.28

4.15.0-1026.29

4.15.0-1027.30

4.15.0-1029.32

4.15.0-1030.33

4.15.0-1031.34

4.15.0-1033.36

4.15.0-1035.39

4.15.0-1037.41

4.15.0-1038.42

4.15.0-1039.43

4.15.0-1045.49

4.15.0-1047.51

4.15.0-1048.52

4.15.0-1050.54

4.15.0-1051.55

4.15.0-1053.57

4.15.0-1054.58

4.15.0-1057.62

4.15.0-1058.64

4.15.0-1059.65

4.15.0-1061.67

4.15.0-1062.68

4.15.0-1063.70

4.15.0-1064.71

4.15.0-1065.73

4.15.0-1066.74

4.15.0-1067.75

4.15.0-1068.76

4.15.0-1069.77

4.15.0-1070.78

4.15.0-1071.79

4.15.0-1072.80

4.15.0-1075.83

4.15.0-1078.86

4.15.0-1079.87

4.15.0-1080.88

4.15.0-1081.89

4.15.0-1082.90

4.15.0-1083.91

4.15.0-1084.92

4.15.0-1085.93

4.15.0-1086.94

4.15.0-1087.95

4.15.0-1089.98

4.15.0-1090.99

4.15.0-1091.100

4.15.0-1092.101

4.15.0-1093.102

4.15.0-1095.104

4.15.0-1098.108

4.15.0-1101.112

4.15.0-1102.113

4.15.0-1104.115

4.15.0-1105.116

4.15.0-1106.117

4.15.0-1107.118

4.15.0-1108.119

4.15.0-1111.122

4.15.0-1112.123

4.15.0-1113.124

4.15.0-1114.125

4.15.0-1115.126

4.15.0-1116.127

4.15.0-1117.128

4.15.0-1118.129

4.15.0-1119.130

4.15.0-1120.131

4.15.0-1121.132

4.15.0-1122.133

4.15.0-1123.134

4.15.0-1124.135

4.15.0-1125.136

4.15.0-1126.137

4.15.0-1127.138

4.15.0-1128.139

4.15.0-1129.140

4.15.0-1130.141

4.15.0-1131.142

4.15.0-1132.143

4.15.0-1133.144

4.15.0-1134.145

4.15.0-1135.146

4.15.0-1136.147

4.15.0-1137.148

4.15.0-1138.149

4.15.0-1139.150

4.15.0-1140.151

4.15.0-1141.152

4.15.0-1142.153

4.15.0-1143.154

4.15.0-1144.155

4.15.0-1145.156

4.15.0-1146.157

4.15.0-1147.158

4.15.0-1148.159

4.15.0-1149.160

4.15.0-1150.161

4.15.0-1151.162

4.15.0-1152.163

4.15.0-1153.164

4.15.0-1154.165

4.15.0-1155.166

4.15.0-1156.167

4.15.0-1158.169

4.15.0-1160.171

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-oracle-headers-4.15.0-1160",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-oracle-tools-4.15.0-1160",
            "binary_version":  "4.15.0-1160.171"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1160-oracle",
            "binary_version":  "4.15.0-1160.171"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.4

Package

Name: linux-oracle-5.4
Purl: pkg:deb/ubuntu/linux-oracle-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1019.19~18.04.1

5.4.0-1021.21~18.04.1

5.4.0-1022.22~18.04.1

5.4.0-1024.24~18.04.1

5.4.0-1025.25~18.04.1

5.4.0-1028.29~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1033.35

5.4.0-1034.36~18.04.1

5.4.0-1035.38~18.04.1

5.4.0-1037.40~18.04.1

5.4.0-1038.41~18.04.1

5.4.0-1039.42~18.04.1

5.4.0-1041.44~18.04.1

5.4.0-1042.45~18.04.1

5.4.0-1043.46~18.04.1

5.4.0-1044.47~18.04.1

5.4.0-1046.50~18.04.2

5.4.0-1048.52~18.04.1

5.4.0-1049.53~18.04.1

5.4.0-1052.56~18.04.1

5.4.0-1053.57~18.04.1

5.4.0-1054.58~18.04.1

5.4.0-1055.59~18.04.1

5.4.0-1056.60~18.04.1

5.4.0-1057.61~18.04.1

5.4.0-1058.62~18.04.1

5.4.0-1059.63~18.04.1

5.4.0-1061.65~18.04.1

5.4.0-1062.66~18.04.1

5.4.0-1063.67~18.04.1

5.4.0-1064.68~18.04.1

5.4.0-1066.71~18.04.1

5.4.0-1067.72~18.04.1

5.4.0-1069.75~18.04.1

5.4.0-1070.76~18.04.1

5.4.0-1071.77~18.04.1

5.4.0-1073.79~18.04.1

5.4.0-1076.83~18.04.1

5.4.0-1078.86~18.04.1

5.4.0-1079.87~18.04.1

5.4.0-1081.89~18.04.1

5.4.0-1082.90~18.04.1

5.4.0-1083.91~18.04.1

5.4.0-1084.92~18.04.1

5.4.0-1086.95~18.04.1

5.4.0-1087.96~18.04.1

5.4.0-1090.99~18.04.2

5.4.0-1091.100~18.04.1

5.4.0-1092.101~18.04.1

5.4.0-1093.102~18.04.1

5.4.0-1094.103~18.04.1

5.4.0-1098.107~18.04.1

5.4.0-1099.108~18.04.1

5.4.0-1100.109~18.04.1

5.4.0-1101.110~18.04.1

5.4.0-1102.111~18.04.1

5.4.0-1103.112~18.04.1

5.4.0-1104.113~18.04.1

5.4.0-1105.114~18.04.1

5.4.0-1106.115~18.04.1

5.4.0-1107.116~18.04.1

5.4.0-1108.117~18.04.1

5.4.0-1109.118~18.04.1

5.4.0-1110.119~18.04.1

5.4.0-1111.120~18.04.1

5.4.0-1112.121~18.04.4

5.4.0-1113.122~18.04.1

5.4.0-1115.124~18.04.1

5.4.0-1116.125~18.04.1

5.4.0-1117.126~18.04.1

5.4.0-1118.127~18.04.1

5.4.0-1119.128~18.04.1

5.4.0-1120.129~18.04.1

5.4.0-1121.130~18.04.1

5.4.0-1122.131~18.04.1

5.4.0-1123.132~18.04.1

5.4.0-1124.133~18.04.1

5.4.0-1125.134~18.04.1

5.4.0-1126.135~18.04.1

5.4.0-1127.136~18.04.1

5.4.0-1129.138~18.04.1

5.4.0-1130.139~18.04.1

5.4.0-1131.140~18.04.1

5.4.0-1132.141~18.04.1

5.4.0-1133.142~18.04.1

5.4.0-1134.143~18.04.1

5.4.0-1135.144~18.04.1

5.4.0-1136.145~18.04.1

5.4.0-1137.146~18.04.1

5.4.0-1138.147~18.04.1

5.4.0-1140.149~18.04.1

5.4.0-1141.151~18.04.1

5.4.0-1142.152~18.04.1

5.4.0-1143.153~18.04.1

5.4.0-1144.154~18.04.1

5.4.0-1145.155~18.04.1

5.4.0-1146.156~18.04.1

5.4.0-1148.158~18.04.1

5.4.0-1149.159~18.04.1

5.4.0-1150.160~18.04.1

5.4.0-1151.161~18.04.1

5.4.0-1152.162~18.04.1

5.4.0-1154.164~18.04.1

5.4.0-1155.165~18.04.1

5.4.0-1156.166~18.04.2

5.4.0-1157.167~18.04.1

5.4.0-1158.168~18.04.1

5.4.0-1159.169~18.04.1

5.4.0-1161.171~18.04.1

5.4.0-1162.172~18.04.1

5.4.0-1163.173~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.4-headers-5.4.0-1163",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.4-tools-5.4.0-1163",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi-5.4

Package

Name: linux-raspi-5.4
Purl: pkg:deb/ubuntu/linux-raspi-5.4?arch=source&distro=esm-infra%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1013.13~18.04.1

5.4.0-1015.15~18.04.1

5.4.0-1016.17~18.04.1

5.4.0-1018.20~18.04.1

5.4.0-1019.21~18.04.1

5.4.0-1021.24~18.04.1

5.4.0-1022.25~18.04.1

5.4.0-1023.26~18.04.1

5.4.0-1025.28~18.04.1

5.4.0-1026.29~18.04.1

5.4.0-1028.31~18.04.1

5.4.0-1029.32~18.04.1

5.4.0-1030.33~18.04.1

5.4.0-1032.35~18.04.1

5.4.0-1033.36~18.04.1

5.4.0-1034.37~18.04.1

5.4.0-1035.38~18.04.1

5.4.0-1036.39~18.04.1

5.4.0-1038.41~18.04.1

5.4.0-1041.45~18.04.1

5.4.0-1042.46~18.04.3

5.4.0-1043.47~18.04.1

5.4.0-1044.48~18.04.1

5.4.0-1045.49~18.04.1

5.4.0-1046.50~18.04.1

5.4.0-1047.52~18.04.1

5.4.0-1048.53~18.04.1

5.4.0-1050.56~18.04.1

5.4.0-1052.58~18.04.1

5.4.0-1053.60~18.04.1

5.4.0-1055.62~18.04.1

5.4.0-1056.63~18.04.1

5.4.0-1058.65~18.04.1

5.4.0-1059.66~18.04.1

5.4.0-1060.68~18.04.1

5.4.0-1062.70~18.04.1

5.4.0-1065.75~18.04.1

5.4.0-1066.76~18.04.1

5.4.0-1068.78~18.04.1

5.4.0-1069.79~18.04.1

5.4.0-1070.80~18.04.1

5.4.0-1071.81~18.04.1

5.4.0-1073.84~18.04.1

5.4.0-1074.85~18.04.1

5.4.0-1077.88~18.04.2

5.4.0-1078.89~18.04.1

5.4.0-1079.90~18.04.1

5.4.0-1080.91~18.04.1

5.4.0-1081.92~18.04.1

5.4.0-1082.93~18.04.1

5.4.0-1083.94~18.04.1

5.4.0-1084.95~18.04.1

5.4.0-1085.96~18.04.1

5.4.0-1086.97~18.04.1

5.4.0-1088.99~18.04.1

5.4.0-1089.100~18.04.1

5.4.0-1090.101~18.04.1

5.4.0-1091.102~18.04.1

5.4.0-1092.103~18.04.1

5.4.0-1093.104~18.04.1

5.4.0-1094.105~18.04.1

5.4.0-1095.106~18.04.1

5.4.0-1096.107~18.04.1

5.4.0-1097.109~18.04.2

5.4.0-1098.110~18.04.2

5.4.0-1100.112~18.04.1

5.4.0-1101.113~18.04.1

5.4.0-1102.114~18.04.1

5.4.0-1103.115~18.04.1

5.4.0-1104.116~18.04.1

5.4.0-1105.117~18.04.1

5.4.0-1106.118~18.04.1

5.4.0-1107.119~18.04.1

5.4.0-1108.120~18.04.1

5.4.0-1109.121~18.04.1

5.4.0-1110.122~18.04.1

5.4.0-1111.123~18.04.1

5.4.0-1112.124~18.04.1

5.4.0-1114.126~18.04.1

5.4.0-1115.127~18.04.1

5.4.0-1116.128~18.04.1

5.4.0-1117.129~18.04.1

5.4.0-1118.130~18.04.1

5.4.0-1119.131~18.04.1

5.4.0-1120.132~18.04.1

5.4.0-1121.133~18.04.1

5.4.0-1122.134~18.04.1

5.4.0-1129.142~18.04.1

5.4.0-1130.143~18.04.1

5.4.0-1131.144~18.04.1

5.4.0-1132.145~18.04.1

5.4.0-1133.146~18.04.1

5.4.0-1134.147~18.04.1

5.4.0-1135.148~18.04.1

5.4.0-1136.149~18.04.1

5.4.0-1137.150~18.04.1

5.4.0-1139.152~18.04.1

5.4.0-1140.153~18.04.1

5.4.0-1143.156~18.04.1

5.4.0-1144.157~18.04.1

5.4.0-1145.158~18.04.1

5.4.0-1146.159~18.04.1

5.4.0-1147.160~18.04.1

5.4.0-1148.161~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        },
        {
            "binary_name":  "linux-image-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        },
        {
            "binary_name":  "linux-raspi-5.4-headers-5.4.0-1148",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        },
        {
            "binary_name":  "linux-raspi-5.4-tools-5.4.0-1148",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161~18.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:20.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-18.19

5.3.0-24.26

5.4.0-9.12

5.4.0-18.22

5.4.0-21.25

5.4.0-24.28

5.4.0-25.29

5.4.0-26.30

5.4.0-28.32

5.4.0-29.33

5.4.0-31.35

5.4.0-33.37

5.4.0-37.41

5.4.0-39.43

5.4.0-40.44

5.4.0-42.46

5.4.0-45.49

5.4.0-47.51

5.4.0-48.52

5.4.0-51.56

5.4.0-52.57

5.4.0-53.59

5.4.0-54.60

5.4.0-56.62

5.4.0-58.64

5.4.0-59.65

5.4.0-60.67

5.4.0-62.70

5.4.0-64.72

5.4.0-65.73

5.4.0-66.74

5.4.0-67.75

5.4.0-70.78

5.4.0-71.79

5.4.0-72.80

5.4.0-73.82

5.4.0-74.83

5.4.0-77.86

5.4.0-80.90

5.4.0-81.91

5.4.0-84.94

5.4.0-86.97

5.4.0-88.99

5.4.0-89.100

5.4.0-90.101

5.4.0-91.102

5.4.0-92.103

5.4.0-94.106

5.4.0-96.109

5.4.0-97.110

5.4.0-99.112

5.4.0-100.113

5.4.0-104.118

5.4.0-105.119

5.4.0-107.121

5.4.0-109.123

5.4.0-110.124

5.4.0-113.127

5.4.0-117.132

5.4.0-120.136

5.4.0-121.137

5.4.0-122.138

5.4.0-124.140

5.4.0-125.141

5.4.0-126.142

5.4.0-128.144

5.4.0-131.147

5.4.0-132.148

5.4.0-135.152

5.4.0-136.153

5.4.0-137.154

5.4.0-139.156

5.4.0-144.161

5.4.0-146.163

5.4.0-147.164

5.4.0-148.165

5.4.0-149.166

5.4.0-150.167

5.4.0-152.169

5.4.0-153.170

5.4.0-155.172

5.4.0-156.173

5.4.0-159.176

5.4.0-162.179

5.4.0-163.180

5.4.0-164.181

5.4.0-165.182

5.4.0-166.183

5.4.0-167.184

5.4.0-169.187

5.4.0-170.188

5.4.0-171.189

5.4.0-172.190

5.4.0-173.191

5.4.0-174.193

5.4.0-176.196

5.4.0-177.197

5.4.0-181.201

5.4.0-182.202

5.4.0-186.206

5.4.0-187.207

5.4.0-189.209

5.4.0-190.210

5.4.0-192.212

5.4.0-193.213

5.4.0-195.215

5.4.0-196.216

5.4.0-198.218

5.4.0-200.220

5.4.0-202.222

5.4.0-204.224

5.4.0-205.225

5.4.0-208.228

5.4.0-211.231

5.4.0-212.232

5.4.0-214.234

5.4.0-215.235

5.4.0-216.236

5.4.0-218.238

5.4.0-219.239

5.4.0-220.240

5.4.0-221.241

5.4.0-222.242

5.4.0-223.243

5.4.0-224.244

5.4.0-225.245

5.4.0-227.247

5.4.0-228.248

5.4.0-229.249

5.4.0-230.250

5.4.0-231.251

5.4.0-233.253

5.4.0-234.254

5.4.0-238.258

5.4.0-241.261

5.4.0-242.262

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "block-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "dasd-extra-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "dasd-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fat-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fat-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fb-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "floppy-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "input-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "input-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "kernel-image-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "kernel-image-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-242-generic-lpae",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-242",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-headers-5.4.0-242",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-headers-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-headers-5.4.0-242-generic-lpae",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-headers-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-image-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-image-5.4.0-242-generic-lpae",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-modules-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-modules-5.4.0-242-generic-lpae",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-modules-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-source-5.4.0",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-tools-5.4.0-242",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-tools-5.4.0-242-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-tools-5.4.0-242-generic-lpae",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-tools-5.4.0-242-lowlatency",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "linux-udebs-generic-lpae",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "md-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "md-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "message-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "parport-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "parport-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "pata-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "pcmcia-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "plip-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "plip-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "sata-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "sata-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "serial-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "usb-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "usb-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-242-generic-di",
            "binary_version":  "5.4.0-242.262"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-242-generic-lpae-di",
            "binary_version":  "5.4.0-242.262"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.3.0-1010.11

5.4.0-1005.5

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1017.17

5.4.0-1018.18

5.4.0-1020.20

5.4.0-1021.21

5.4.0-1022.22

5.4.0-1024.24

5.4.0-1025.25

5.4.0-1028.29

5.4.0-1029.30

5.4.0-1030.31

5.4.0-1032.33

5.4.0-1034.35

5.4.0-1035.37

5.4.0-1037.39

5.4.0-1038.40

5.4.0-1039.41

5.4.0-1041.43

5.4.0-1043.45

5.4.0-1045.47

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1051.53

5.4.0-1054.57

5.4.0-1055.58

5.4.0-1056.59

5.4.0-1057.60

5.4.0-1058.61

5.4.0-1059.62

5.4.0-1060.63

5.4.0-1061.64

5.4.0-1063.66

5.4.0-1064.67

5.4.0-1065.68

5.4.0-1066.69

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1071.76

5.4.0-1072.77

5.4.0-1073.78

5.4.0-1075.80

5.4.0-1078.84

5.4.0-1080.87

5.4.0-1081.88

5.4.0-1083.90

5.4.0-1084.91

5.4.0-1085.92

5.4.0-1086.93

5.4.0-1088.96

5.4.0-1089.97

5.4.0-1092.100

5.4.0-1093.101

5.4.0-1094.102

5.4.0-1096.104

5.4.0-1097.105

5.4.0-1099.107

5.4.0-1100.108

5.4.0-1101.109

5.4.0-1102.110

5.4.0-1103.111

5.4.0-1104.112

5.4.0-1105.113

5.4.0-1106.114

5.4.0-1107.115

5.4.0-1108.116

5.4.0-1109.118

5.4.0-1110.119

5.4.0-1111.120

5.4.0-1112.121

5.4.0-1113.123

5.4.0-1114.124

5.4.0-1116.126

5.4.0-1117.127

5.4.0-1118.128

5.4.0-1119.129

5.4.0-1120.130

5.4.0-1121.131

5.4.0-1122.132

5.4.0-1123.133

5.4.0-1124.134

5.4.0-1125.135

5.4.0-1126.136

5.4.0-1127.137

5.4.0-1128.138

5.4.0-1129.139

5.4.0-1130.140

5.4.0-1131.141

5.4.0-1132.142

5.4.0-1133.143

5.4.0-1134.144

5.4.0-1135.145

5.4.0-1136.146

5.4.0-1137.147

5.4.0-1139.149

5.4.0-1140.150

5.4.0-1142.152

5.4.0-1144.154

5.4.0-1145.155

5.4.0-1146.156

5.4.0-1147.157

5.4.0-1148.158

5.4.0-1149.159

5.4.0-1150.160

5.4.0-1151.161

5.4.0-1152.162

5.4.0-1153.163

5.4.0-1154.164

5.4.0-1156.166

5.4.0-1157.167

5.4.0-1158.168

5.4.0-1159.169

5.4.0-1160.170

5.4.0-1161.172

5.4.0-1162.173

5.4.0-1163.174

5.4.0-1164.175

5.4.0-1165.176

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-aws-headers-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-aws-tools-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1165-aws",
            "binary_version":  "5.4.0-1165.176"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-aws-5.15

Package

Name: linux-aws-5.15
Purl: pkg:deb/ubuntu/linux-aws-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1014.18~20.04.1

5.15.0-1015.19~20.04.1

5.15.0-1017.21~20.04.1

5.15.0-1019.23~20.04.1

5.15.0-1020.24~20.04.1

5.15.0-1021.25~20.04.1

5.15.0-1022.26~20.04.1

5.15.0-1023.27~20.04.1

5.15.0-1026.30~20.04.2

5.15.0-1027.31~20.04.1

5.15.0-1028.32~20.04.1

5.15.0-1030.34~20.04.1

5.15.0-1031.35~20.04.1

5.15.0-1033.37~20.04.1

5.15.0-1034.38~20.04.1

5.15.0-1035.39~20.04.1

5.15.0-1036.40~20.04.1

5.15.0-1037.41~20.04.1

5.15.0-1038.43~20.04.1

5.15.0-1039.44~20.04.1

5.15.0-1040.45~20.04.1

5.15.0-1041.46~20.04.1

5.15.0-1043.48~20.04.1

5.15.0-1044.49~20.04.1

5.15.0-1045.50~20.04.1

5.15.0-1047.52~20.04.1

5.15.0-1048.53~20.04.1

5.15.0-1049.54~20.04.1

5.15.0-1050.55~20.04.1

5.15.0-1051.56~20.04.1

5.15.0-1052.57~20.04.1

5.15.0-1053.58~20.04.1

5.15.0-1055.60~20.04.1

5.15.0-1056.61~20.04.1

5.15.0-1057.63~20.04.1

5.15.0-1058.64~20.04.1

5.15.0-1061.67~20.04.1

5.15.0-1062.68~20.04.1

5.15.0-1063.69~20.04.1

5.15.0-1064.70~20.04.1

5.15.0-1065.71~20.04.1

5.15.0-1066.72~20.04.1

5.15.0-1067.73~20.04.1

5.15.0-1068.74~20.04.1

5.15.0-1069.75~20.04.1

5.15.0-1070.76~20.04.1

5.15.0-1071.77~20.04.1

5.15.0-1072.78~20.04.1

5.15.0-1073.79~20.04.1

5.15.0-1075.82~20.04.1

5.15.0-1077.84~20.04.1

5.15.0-1080.87~20.04.1

5.15.0-1081.88~20.04.1

5.15.0-1082.89~20.04.1

5.15.0-1083.90~20.04.1

5.15.0-1084.91~20.04.1

5.15.0-1086.93~20.04.1

5.15.0-1087.94~20.04.1

5.15.0-1088.95~20.04.1

5.15.0-1089.96~20.04.1

5.15.0-1090.97~20.04.1

5.15.0-1091.98~20.04.1

5.15.0-1092.99~20.04.1

5.15.0-1093.100~20.04.1

5.15.0-1095.102~20.04.1

5.15.0-1096.103~20.04.1

5.15.0-1097.104~20.04.1

5.15.0-1098.105~20.04.1

5.15.0-1099.106~20.04.1

5.15.0-1100.107~20.04.2

5.15.0-1101.108~20.04.1

5.15.0-1103.110~20.04.1

5.15.0-1104.111~20.04.1

5.15.0-1105.112~20.04.1

5.15.0-1106.113~20.04.1

5.15.0-1108.115~20.04.1

5.15.0-1109.116~20.04.1

5.15.0-1111.118~20.04.1

5.15.0-1112.119~20.04.1

5.15.0-1114.121~20.04.1

5.15.0-1115.122~20.04.1

5.15.0-1116.123~20.04.1

5.15.0-1117.124~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.15-cloud-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.15-headers-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.15-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.4.0-1006.6

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1010.10

5.4.0-1012.12

5.4.0-1016.16

5.4.0-1019.19

5.4.0-1020.20

5.4.0-1022.22

5.4.0-1023.23

5.4.0-1025.25

5.4.0-1026.26

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1034.35

5.4.0-1035.36

5.4.0-1036.38

5.4.0-1039.41

5.4.0-1040.42

5.4.0-1041.43

5.4.0-1043.45

5.4.0-1044.46

5.4.0-1046.48

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1051.53

5.4.0-1055.57

5.4.0-1056.58

5.4.0-1058.60

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1064.67

5.4.0-1065.68

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1069.72

5.4.0-1070.73

5.4.0-1072.75

5.4.0-1073.76

5.4.0-1074.77

5.4.0-1077.80

5.4.0-1078.81

5.4.0-1080.83

5.4.0-1083.87

5.4.0-1085.90

5.4.0-1086.91

5.4.0-1089.94

5.4.0-1090.95

5.4.0-1091.96

5.4.0-1094.100

5.4.0-1095.101

5.4.0-1098.104

5.4.0-1100.106

5.4.0-1101.107

5.4.0-1103.109

5.4.0-1104.110

5.4.0-1105.111

5.4.0-1106.112

5.4.0-1107.113

5.4.0-1108.114

5.4.0-1109.115

5.4.0-1110.116

5.4.0-1111.117

5.4.0-1112.118

5.4.0-1113.119

5.4.0-1114.120

5.4.0-1115.122

5.4.0-1116.123

5.4.0-1117.124

5.4.0-1118.125

5.4.0-1119.126

5.4.0-1120.127

5.4.0-1121.128

5.4.0-1122.129

5.4.0-1123.130

5.4.0-1124.131

5.4.0-1126.133

5.4.0-1127.134

5.4.0-1128.135

5.4.0-1129.136

5.4.0-1130.137

5.4.0-1131.138

5.4.0-1132.139

5.4.0-1133.140

5.4.0-1134.141

5.4.0-1135.142

5.4.0-1136.143

5.4.0-1137.144

5.4.0-1138.145

5.4.0-1139.146

5.4.0-1140.147

5.4.0-1142.149

5.4.0-1143.150

5.4.0-1145.152

5.4.0-1147.154

5.4.0-1148.155

5.4.0-1149.156

5.4.0-1150.157

5.4.0-1151.158

5.4.0-1152.159

5.4.0-1153.160

5.4.0-1154.161

5.4.0-1156.163

5.4.0-1157.164

5.4.0-1160.166

5.4.0-1161.167

5.4.0-1162.168

5.4.0-1163.169

5.4.0-1164.170

5.4.0-1166.172

5.4.0-1167.173

5.4.0-1168.174

5.4.0-1169.175

5.4.0-1170.176

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-azure-headers-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-azure-tools-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1170-azure",
            "binary_version":  "5.4.0-1170.176"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-5.15

Package

Name: linux-azure-5.15
Purl: pkg:deb/ubuntu/linux-azure-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1007.8~20.04.1

5.15.0-1008.9~20.04.1

5.15.0-1013.16~20.04.1

5.15.0-1014.17~20.04.1

5.15.0-1017.20~20.04.1

5.15.0-1019.24~20.04.1

5.15.0-1020.25~20.04.1

5.15.0-1021.26~20.04.1

5.15.0-1022.27~20.04.1

5.15.0-1023.29~20.04.1

5.15.0-1029.36~20.04.1

5.15.0-1030.37~20.04.1

5.15.0-1031.38~20.04.1

5.15.0-1033.40~20.04.1

5.15.0-1034.41~20.04.1

5.15.0-1035.42~20.04.1

5.15.0-1036.43~20.04.1

5.15.0-1037.44~20.04.1

5.15.0-1038.45~20.04.1

5.15.0-1039.46~20.04.1

5.15.0-1040.47~20.04.1

5.15.0-1041.48~20.04.1

5.15.0-1042.49~20.04.1

5.15.0-1043.50~20.04.1

5.15.0-1045.52~20.04.1

5.15.0-1046.53~20.04.1

5.15.0-1047.54~20.04.1

5.15.0-1049.56~20.04.1

5.15.0-1050.57~20.04.1

5.15.0-1051.59~20.04.1

5.15.0-1052.60~20.04.1

5.15.0-1053.61~20.04.1

5.15.0-1054.62~20.04.1

5.15.0-1056.64~20.04.1

5.15.0-1057.65~20.04.1

5.15.0-1058.66~20.04.2

5.15.0-1059.67~20.04.1

5.15.0-1060.69~20.04.1

5.15.0-1061.70~20.04.1

5.15.0-1063.72~20.04.1

5.15.0-1064.73~20.04.1

5.15.0-1065.74~20.04.1

5.15.0-1067.76~20.04.1

5.15.0-1068.77~20.04.1

5.15.0-1070.79~20.04.1

5.15.0-1071.80~20.04.1

5.15.0-1072.81~20.04.1

5.15.0-1073.82~20.04.1

5.15.0-1074.83~20.04.1

5.15.0-1075.84~20.04.1

5.15.0-1078.87~20.04.1

5.15.0-1079.88~20.04.1

5.15.0-1081.90~20.04.1

5.15.0-1082.91~20.04.1

5.15.0-1086.95~20.04.1

5.15.0-1087.96~20.04.1

5.15.0-1088.97~20.04.1

5.15.0-1089.98~20.04.1

5.15.0-1091.100~20.04.1

5.15.0-1094.103~20.04.1

5.15.0-1095.104~20.04.1

5.15.0-1096.105~20.04.1

5.15.0-1097.106~20.04.1

5.15.0-1098.107~20.04.1

5.15.0-1102.111~20.04.1

5.15.0-1103.112~20.04.1

5.15.0-1110.119~20.04.1

5.15.0-1111.120~20.04.1

5.15.0-1114.123~20.04.1

5.15.0-1116.125~20.04.1

5.15.0-1117.126~20.04.1

5.15.0-1119.128~20.04.1

5.15.0-1121.130~20.04.1

5.15.0-1122.131~20.04.1

5.15.0-1123.132~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.15-cloud-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.15-headers-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.15-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fde-5.15

Package

Name: linux-azure-fde-5.15
Purl: pkg:deb/ubuntu/linux-azure-fde-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1019.24~20.04.1.1

5.15.0-1020.25~20.04.1.1

5.15.0-1021.26~20.04.1.1

5.15.0-1029.36~20.04.1.1

5.15.0-1030.37~20.04.1.1

5.15.0-1031.38~20.04.1.1

5.15.0-1033.40~20.04.1.1

5.15.0-1034.41~20.04.1.2

5.15.0-1035.42~20.04.1.1

5.15.0-1036.43~20.04.1.1

5.15.0-1037.44~20.04.1.1

5.15.0-1038.45~20.04.1.1

5.15.0-1039.46~20.04.1.1

5.15.0-1040.47~20.04.1.1

5.15.0-1041.48~20.04.1.1

5.15.0-1042.49~20.04.1.1

5.15.0-1043.50~20.04.1.1

5.15.0-1046.53~20.04.1.1

5.15.0-1047.54~20.04.1.1

5.15.0-1049.56~20.04.1.1

5.15.0-1050.57~20.04.1.1

5.15.0-1051.59~20.04.1.1

5.15.0-1052.60~20.04.1.1

5.15.0-1053.61~20.04.1.1

5.15.0-1054.62~20.04.1.1

5.15.0-1056.64~20.04.1.1

5.15.0-1057.65~20.04.1.1

5.15.0-1058.66~20.04.2.1

5.15.0-1059.67~20.04.1.1

5.15.0-1060.69~20.04.1.1

5.15.0-1061.70~20.04.1.1

5.15.0-1063.72~20.04.1.1

5.15.0-1064.73~20.04.1.1

5.15.0-1065.74~20.04.1.1

5.15.0-1067.76~20.04.1.1

5.15.0-1068.77~20.04.1.1

5.15.0-1070.79~20.04.1.1

5.15.0-1071.80~20.04.1.1

5.15.0-1072.81~20.04.1.1

5.15.0-1073.82~20.04.1.1

5.15.0-1074.83~20.04.1.1

5.15.0-1076.85~20.04.1.1

5.15.0-1078.87~20.04.1.1

5.15.0-1081.90~20.04.1.1

5.15.0-1082.91~20.04.1.1

5.15.0-1086.95~20.04.1.1

5.15.0-1087.96~20.04.1.1

5.15.0-1088.97~20.04.1.1

5.15.0-1089.98~20.04.1.1

5.15.0-1091.100~20.04.1.1

5.15.0-1094.103~20.04.1.1

5.15.0-1096.105~20.04.1.1

5.15.0-1097.106~20.04.1.1

5.15.0-1098.107~20.04.1.1

5.15.0-1102.111~20.04.1.1

5.15.0-1103.112~20.04.1.1

5.15.0-1111.120~20.04.1.1

5.15.0-1114.123~20.04.1

5.15.0-1116.125~20.04.1

5.15.0-1117.126~20.04.2

5.15.0-1118.127~20.04.1

5.15.0-1119.128~20.04.1

5.15.0-1120.129~20.04.1

5.15.0-1121.130~20.04.1

5.15.0-1122.131~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-5.15-cloud-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-5.15-headers-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-5.15-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-bluefield

Package

Name: linux-bluefield
Purl: pkg:deb/ubuntu/linux-bluefield?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1007.10

5.4.0-1011.14

5.4.0-1012.15

5.4.0-1013.16

5.4.0-1016.19

5.4.0-1019.22

5.4.0-1020.23

5.4.0-1021.24

5.4.0-1022.25

5.4.0-1023.26

5.4.0-1025.28

5.4.0-1026.29

5.4.0-1028.31

5.4.0-1030.33

5.4.0-1032.35

5.4.0-1035.38

5.4.0-1036.39

5.4.0-1040.44

5.4.0-1042.47

5.4.0-1044.49

5.4.0-1045.50

5.4.0-1046.51

5.4.0-1047.52

5.4.0-1049.55

5.4.0-1050.56

5.4.0-1054.60

5.4.0-1058.64

5.4.0-1059.65

5.4.0-1060.66

5.4.0-1062.68

5.4.0-1064.70

5.4.0-1065.71

5.4.0-1066.72

5.4.0-1068.74

5.4.0-1070.76

5.4.0-1071.77

5.4.0-1072.78

5.4.0-1073.79

5.4.0-1074.80

5.4.0-1075.81

5.4.0-1076.82

5.4.0-1077.83

5.4.0-1078.84

5.4.0-1079.85

5.4.0-1080.87

5.4.0-1081.88

5.4.0-1082.89

5.4.0-1083.90

5.4.0-1084.91

5.4.0-1085.92

5.4.0-1086.93

5.4.0-1087.94

5.4.0-1088.95

5.4.0-1089.96

5.4.0-1090.97

5.4.0-1091.98

5.4.0-1092.99

5.4.0-1093.100

5.4.0-1094.101

5.4.0-1095.102

5.4.0-1096.103

5.4.0-1097.104

5.4.0-1098.105

5.4.0-1099.106

5.4.0-1101.108

5.4.0-1102.109

5.4.0-1103.110

5.4.0-1105.112

5.4.0-1106.113

5.4.0-1107.114

5.4.0-1108.115

5.4.0-1109.116

5.4.0-1110.117

5.4.0-1111.118

5.4.0-1112.119

5.4.0-1116.123

5.4.0-1117.124

5.4.0-1118.125

5.4.0-1119.126

5.4.0-1120.127

5.4.0-1121.128

5.4.0-1123.130

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-headers-5.4.0-1123",
            "binary_version":  "5.4.0-1123.130"
        },
        {
            "binary_name":  "linux-bluefield-tools-5.4.0-1123",
            "binary_version":  "5.4.0-1123.130"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1123-bluefield",
            "binary_version":  "5.4.0-1123.130"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1123-bluefield",
            "binary_version":  "5.4.0-1123.130"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1123-bluefield",
            "binary_version":  "5.4.0-1123.130"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1123-bluefield",
            "binary_version":  "5.4.0-1123.130"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1123-bluefield",
            "binary_version":  "5.4.0-1123.130"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1004.4

5.3.0-1009.10

5.3.0-1011.12

5.4.0-1005.5

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1018.18

5.4.0-1019.19

5.4.0-1021.21

5.4.0-1022.22

5.4.0-1024.24

5.4.0-1025.25

5.4.0-1028.29

5.4.0-1029.31

5.4.0-1030.32

5.4.0-1032.34

5.4.0-1033.35

5.4.0-1034.37

5.4.0-1036.39

5.4.0-1037.40

5.4.0-1038.41

5.4.0-1040.43

5.4.0-1041.44

5.4.0-1042.45

5.4.0-1043.46

5.4.0-1044.47

5.4.0-1046.49

5.4.0-1049.53

5.4.0-1051.55

5.4.0-1052.56

5.4.0-1053.57

5.4.0-1055.59

5.4.0-1056.60

5.4.0-1057.61

5.4.0-1058.62

5.4.0-1059.63

5.4.0-1060.64

5.4.0-1062.66

5.4.0-1063.67

5.4.0-1064.68

5.4.0-1065.69

5.4.0-1067.71

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1072.77

5.4.0-1073.78

5.4.0-1075.80

5.4.0-1078.84

5.4.0-1080.87

5.4.0-1083.91

5.4.0-1084.92

5.4.0-1086.94

5.4.0-1087.95

5.4.0-1089.97

5.4.0-1090.98

5.4.0-1092.101

5.4.0-1093.102

5.4.0-1096.105

5.4.0-1097.106

5.4.0-1098.107

5.4.0-1100.109

5.4.0-1101.110

5.4.0-1102.111

5.4.0-1103.112

5.4.0-1104.113

5.4.0-1105.114

5.4.0-1106.115

5.4.0-1107.116

5.4.0-1108.117

5.4.0-1109.118

5.4.0-1110.119

5.4.0-1111.120

5.4.0-1112.121

5.4.0-1113.122

5.4.0-1115.124

5.4.0-1116.125

5.4.0-1117.126

5.4.0-1118.127

5.4.0-1120.129

5.4.0-1121.130

5.4.0-1122.131

5.4.0-1123.132

5.4.0-1124.133

5.4.0-1125.134

5.4.0-1126.135

5.4.0-1127.136

5.4.0-1128.137

5.4.0-1129.138

5.4.0-1130.139

5.4.0-1131.140

5.4.0-1132.141

5.4.0-1133.142

5.4.0-1134.143

5.4.0-1135.144

5.4.0-1136.145

5.4.0-1137.146

5.4.0-1138.147

5.4.0-1139.148

5.4.0-1140.149

5.4.0-1141.150

5.4.0-1142.151

5.4.0-1143.152

5.4.0-1145.154

5.4.0-1146.155

5.4.0-1147.156

5.4.0-1148.157

5.4.0-1149.158

5.4.0-1150.159

5.4.0-1151.160

5.4.0-1152.161

5.4.0-1153.162

5.4.0-1154.163

5.4.0-1155.164

5.4.0-1156.165

5.4.0-1157.166

5.4.0-1159.168

5.4.0-1160.169

5.4.0-1161.170

5.4.0-1162.171

5.4.0-1163.172

5.4.0-1164.173

5.4.0-1165.174

5.4.0-1166.175

5.4.0-1167.177

5.4.0-1168.178

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-gcp-headers-5.4.0-1168",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-gcp-tools-5.4.0-1168",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1168-gcp",
            "binary_version":  "5.4.0-1168.178"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-5.15

Package

Name: linux-gcp-5.15
Purl: pkg:deb/ubuntu/linux-gcp-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1006.9~20.04.1

5.15.0-1012.17~20.04.1

5.15.0-1013.18~20.04.1

5.15.0-1016.21~20.04.1

5.15.0-1017.23~20.04.2

5.15.0-1018.24~20.04.1

5.15.0-1021.28~20.04.1

5.15.0-1022.29~20.04.1

5.15.0-1025.32~20.04.2

5.15.0-1026.33~20.04.1

5.15.0-1027.34~20.04.1

5.15.0-1029.36~20.04.1

5.15.0-1030.37~20.04.1

5.15.0-1031.38~20.04.1

5.15.0-1032.40~20.04.1

5.15.0-1033.41~20.04.1

5.15.0-1034.42~20.04.1

5.15.0-1035.43~20.04.1

5.15.0-1036.44~20.04.1

5.15.0-1037.45~20.04.1

5.15.0-1038.46~20.04.1

5.15.0-1039.47~20.04.1

5.15.0-1040.48~20.04.1

5.15.0-1041.49~20.04.1

5.15.0-1042.50~20.04.1

5.15.0-1044.52~20.04.1

5.15.0-1045.53~20.04.2

5.15.0-1046.54~20.04.1

5.15.0-1047.55~20.04.1

5.15.0-1048.56~20.04.1

5.15.0-1049.57~20.04.1

5.15.0-1051.59~20.04.1

5.15.0-1052.60~20.04.1

5.15.0-1053.61~20.04.1

5.15.0-1054.62~20.04.1

5.15.0-1055.63~20.04.1

5.15.0-1058.66~20.04.1

5.15.0-1059.67~20.04.1

5.15.0-1060.68~20.04.1

5.15.0-1062.70~20.04.1

5.15.0-1065.73~20.04.1

5.15.0-1066.74~20.04.1

5.15.0-1067.75~20.04.1

5.15.0-1068.76~20.04.1

5.15.0-1069.77~20.04.1

5.15.0-1070.78~20.04.1

5.15.0-1071.79~20.04.1

5.15.0-1072.80~20.04.1

5.15.0-1073.81~20.04.1

5.15.0-1074.83~20.04.1

5.15.0-1075.84~20.04.1

5.15.0-1077.86~20.04.1

5.15.0-1078.87~20.04.1

5.15.0-1081.90~20.04.1

5.15.0-1083.92~20.04.1

5.15.0-1085.94~20.04.1

5.15.0-1086.95~20.04.1

5.15.0-1087.96~20.04.2

5.15.0-1088.97~20.04.1

5.15.0-1090.99~20.04.1

5.15.0-1091.100~20.04.1

5.15.0-1092.101~20.04.1

5.15.0-1093.102~20.04.1

5.15.0-1095.104~20.04.1

5.15.0-1096.105~20.04.1

5.15.0-1097.106~20.04.1

5.15.0-1098.107~20.04.1

5.15.0-1099.108~20.04.1

5.15.0-1100.109~20.04.1

5.15.0-1101.110~20.04.1

5.15.0-1103.112~20.04.1

5.15.0-1104.113~20.04.1

5.15.0-1106.115~20.04.1

5.15.0-1108.117~20.04.1

5.15.0-1109.118~20.04.1

5.15.0-1111.121~20.04.1

5.15.0-1112.122~20.04.1

5.15.0-1114.124~20.04.1

5.15.0-1118.128~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.15-headers-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.15-tools-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-hwe-5.15

Package

Name: linux-hwe-5.15
Purl: pkg:deb/ubuntu/linux-hwe-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-33.34~20.04.1

5.15.0-41.44~20.04.1

5.15.0-43.46~20.04.1

5.15.0-46.49~20.04.1

5.15.0-48.54~20.04.1

5.15.0-50.56~20.04.1

5.15.0-52.58~20.04.1

5.15.0-53.59~20.04.1

5.15.0-56.62~20.04.1

5.15.0-57.63~20.04.1

5.15.0-58.64~20.04.1

5.15.0-60.66~20.04.1

5.15.0-67.74~20.04.1

5.15.0-69.76~20.04.1

5.15.0-70.77~20.04.1

5.15.0-71.78~20.04.1

5.15.0-72.79~20.04.1

5.15.0-73.80~20.04.1

5.15.0-75.82~20.04.1

5.15.0-76.83~20.04.1

5.15.0-78.85~20.04.1

5.15.0-79.86~20.04.2

5.15.0-82.91~20.04.1

5.15.0-83.92~20.04.1

5.15.0-84.93~20.04.1

5.15.0-86.96~20.04.1

5.15.0-87.97~20.04.1

5.15.0-88.98~20.04.1

5.15.0-89.99~20.04.1

5.15.0-91.101~20.04.1

5.15.0-92.102~20.04.1

5.15.0-94.104~20.04.1

5.15.0-97.107~20.04.1

5.15.0-100.110~20.04.1

5.15.0-101.111~20.04.1

5.15.0-102.112~20.04.1

5.15.0-105.115~20.04.1

5.15.0-106.116~20.04.1

5.15.0-107.117~20.04.1

5.15.0-113.123~20.04.1

5.15.0-116.126~20.04.1

5.15.0-117.127~20.04.1

5.15.0-118.128~20.04.1

5.15.0-119.129~20.04.1

5.15.0-121.131~20.04.1

5.15.0-122.132~20.04.1

5.15.0-124.134~20.04.1

5.15.0-125.135~20.04.1

5.15.0-126.136~20.04.1

5.15.0-127.137~20.04.1

5.15.0-130.140~20.04.1

5.15.0-131.141~20.04.1

5.15.0-134.145~20.04.1

5.15.0-136.147~20.04.1

5.15.0-138.148~20.04.1

5.15.0-139.149~20.04.1

5.15.0-142.152~20.04.1

5.15.0-143.153~20.04.1

5.15.0-144.157~20.04.1

5.15.0-145.158~20.04.1

5.15.0-151.161~20.04.1

5.15.0-152.162~20.04.1

5.15.0-153.163~20.04.1

5.15.0-156.166~20.04.1

5.15.0-157.167~20.04.1

5.15.0-160.170~20.04.1

5.15.0-161.171~20.04.1

5.15.0-163.173~20.04.1

5.15.0-164.174~20.04.1

5.15.0-168.178~20.04.1

5.15.0-170.180~20.04.3

5.15.0-171.181~20.04.1

5.15.0-173.183~20.04.1

5.15.0-176.186~20.04.1

5.15.0-177.187~20.04.1

5.15.0-179.189~20.04.1

5.15.0-181.191~20.04.1

5.15.0-185.195~20.04.1

5.15.0-186.196~20.04.1

5.15.0-190.200~20.04.1

5.15.0-191.201~20.04.1

5.15.0-194.204~20.04.1

5.15.0-198.208~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-cloud-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-headers-5.15.0-198",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-ibm

Package

Name: linux-ibm
Purl: pkg:deb/ubuntu/linux-ibm?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1003.4

5.4.0-1004.5

5.4.0-1005.6

5.4.0-1006.7

5.4.0-1007.8

5.4.0-1008.9

5.4.0-1010.11

5.4.0-1012.13

5.4.0-1013.14

5.4.0-1014.15

5.4.0-1015.16

5.4.0-1017.19

5.4.0-1018.20

5.4.0-1019.21

5.4.0-1020.22

5.4.0-1021.23

5.4.0-1023.25

5.4.0-1026.29

5.4.0-1028.32

5.4.0-1029.33

5.4.0-1031.35

5.4.0-1032.36

5.4.0-1033.37

5.4.0-1034.38

5.4.0-1036.41

5.4.0-1037.42

5.4.0-1040.45

5.4.0-1041.46

5.4.0-1042.47

5.4.0-1044.49

5.4.0-1045.50

5.4.0-1046.51

5.4.0-1047.52

5.4.0-1048.53

5.4.0-1049.54

5.4.0-1050.55

5.4.0-1051.56

5.4.0-1052.57

5.4.0-1053.58

5.4.0-1054.59

5.4.0-1056.61

5.4.0-1057.62

5.4.0-1058.63

5.4.0-1059.64

5.4.0-1060.65

5.4.0-1061.66

5.4.0-1063.68

5.4.0-1064.69

5.4.0-1065.70

5.4.0-1066.71

5.4.0-1067.72

5.4.0-1068.73

5.4.0-1069.74

5.4.0-1070.75

5.4.0-1071.76

5.4.0-1072.77

5.4.0-1073.78

5.4.0-1074.79

5.4.0-1075.80

5.4.0-1076.81

5.4.0-1077.82

5.4.0-1078.83

5.4.0-1079.84

5.4.0-1080.85

5.4.0-1081.86

5.4.0-1082.87

5.4.0-1083.88

5.4.0-1084.89

5.4.0-1085.90

5.4.0-1086.91

5.4.0-1088.93

5.4.0-1089.94

5.4.0-1090.95

5.4.0-1091.96

5.4.0-1092.97

5.4.0-1093.98

5.4.0-1094.99

5.4.0-1095.100

5.4.0-1096.101

5.4.0-1097.102

5.4.0-1098.103

5.4.0-1099.104

5.4.0-1100.105

5.4.0-1102.107

5.4.0-1103.108

5.4.0-1104.109

5.4.0-1105.110

5.4.0-1107.112

5.4.0-1108.113

5.4.0-1109.114

5.4.0-1111.116

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-ibm-cloud-tools-common",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-ibm-headers-5.4.0-1111",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-ibm-source-5.4.0",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-ibm-tools-5.4.0-1111",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-ibm-tools-common",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1111-ibm",
            "binary_version":  "5.4.0-1111.116"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-ibm-5.15

Package

Name: linux-ibm-5.15
Purl: pkg:deb/ubuntu/linux-ibm-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1033.36~20.04.1

5.15.0-1034.37~20.04.1

5.15.0-1035.38~20.04.1

5.15.0-1036.39~20.04.1

5.15.0-1037.40~20.04.1

5.15.0-1038.41~20.04.1

5.15.0-1040.43~20.04.1

5.15.0-1041.44~20.04.1

5.15.0-1042.45~20.04.1

5.15.0-1043.46~20.04.1

5.15.0-1044.47~20.04.1

5.15.0-1045.48~20.04.1

5.15.0-1046.49~20.04.1

5.15.0-1047.50~20.04.1

5.15.0-1048.51~20.04.1

5.15.0-1049.52~20.04.1

5.15.0-1050.53~20.04.1

5.15.0-1053.56~20.04.1

5.15.0-1054.57~20.04.1

5.15.0-1055.58~20.04.1

5.15.0-1057.60~20.04.1

5.15.0-1058.61~20.04.1

5.15.0-1059.62~20.04.1

5.15.0-1060.63~20.04.1

5.15.0-1061.64~20.04.1

5.15.0-1062.65~20.04.1

5.15.0-1063.66~20.04.1

5.15.0-1064.67~20.04.1

5.15.0-1065.68~20.04.1

5.15.0-1066.69~20.04.1

5.15.0-1067.70~20.04.1

5.15.0-1068.71~20.04.1

5.15.0-1069.72~20.04.1

5.15.0-1074.77~20.04.1

5.15.0-1075.78~20.04.1

5.15.0-1076.79~20.04.1

5.15.0-1078.81~20.04.1

5.15.0-1079.82~20.04.1

5.15.0-1080.83~20.04.1

5.15.0-1081.84~20.04.1

5.15.0-1083.86~20.04.1

5.15.0-1085.88~20.04.1

5.15.0-1086.89~20.04.1

5.15.0-1087.90~20.04.1

5.15.0-1089.92~20.04.1

5.15.0-1090.93~20.04.1

5.15.0-1091.94~20.04.1

5.15.0-1092.95~20.04.1

5.15.0-1093.96~20.04.1

5.15.0-1094.97~20.04.1

5.15.0-1095.98~20.04.1

5.15.0-1097.100~20.04.1

5.15.0-1098.101~20.04.1

5.15.0-1099.102~20.04.1

5.15.0-1100.103~20.04.1

5.15.0-1102.105~20.04.1

5.15.0-1103.106~20.04.1

5.15.0-1105.109~20.04.1

5.15.0-1106.110~20.04.1

5.15.0-1107.111~20.04.1

5.15.0-1108.112~20.04.1

5.15.0-1109.113~20.04.1

5.15.0-1110.114~20.04.1

5.15.0-1111.115~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.15-headers-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.15-source-5.15.0",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.15-tools-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-intel-iotg-5.15

Package

Name: linux-intel-iotg-5.15
Purl: pkg:deb/ubuntu/linux-intel-iotg-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1003.5~20.04.1

5.15.0-1008.11~20.04.1

5.15.0-1010.14~20.04.1

5.15.0-1015.20~20.04.2

5.15.0-1016.21~20.04.1

5.15.0-1017.22~20.04.1

5.15.0-1018.23~20.04.1

5.15.0-1021.26~20.04.1

5.15.0-1023.28~20.04.1

5.15.0-1025.30~20.04.1

5.15.0-1026.31~20.04.1

5.15.0-1027.32~20.04.1

5.15.0-1030.35~20.04.1

5.15.0-1031.36~20.04.1

5.15.0-1033.38~20.04.1

5.15.0-1034.39~20.04.1

5.15.0-1036.41~20.04.1

5.15.0-1037.42~20.04.1

5.15.0-1038.43~20.04.1

5.15.0-1040.46~20.04.1

5.15.0-1043.49~20.04.1

5.15.0-1045.51~20.04.1

5.15.0-1046.52~20.04.1

5.15.0-1048.54~20.04.1

5.15.0-1049.55~20.04.1

5.15.0-1050.56~20.04.1

5.15.0-1051.57~20.04.1

5.15.0-1052.58~20.04.1

5.15.0-1055.61~20.04.1

5.15.0-1058.64~20.04.1

5.15.0-1059.65~20.04.1

5.15.0-1060.66~20.04.1

5.15.0-1061.67~20.04.1

5.15.0-1062.68~20.04.1

5.15.0-1063.69~20.04.1

5.15.0-1064.70~20.04.1

5.15.0-1065.71~20.04.1

5.15.0-1066.72~20.04.1

5.15.0-1067.73~20.04.1

5.15.0-1071.77~20.04.1

5.15.0-1072.78~20.04.1

5.15.0-1073.79~20.04.2

5.15.0-1074.80~20.04.1

5.15.0-1077.83~20.04.1

5.15.0-1078.84~20.04.1

5.15.0-1079.85~20.04.1

5.15.0-1083.89~20.04.1

5.15.0-1084.90~20.04.1

5.15.0-1085.91~20.04.1

5.15.0-1086.92~20.04.1

5.15.0-1087.93~20.04.1

5.15.0-1088.94~20.04.1

5.15.0-1090.96~20.04.1

5.15.0-1091.97~20.04.1

5.15.0-1092.98~20.04.1

5.15.0-1093.99~20.04.1

5.15.0-1094.100~20.04.1

5.15.0-1095.101~20.04.1

5.15.0-1096.102~20.04.1

5.15.0-1098.104~20.04.1

5.15.0-1099.105~20.04.1

5.15.0-1100.106~20.04.1

5.15.0-1101.107~20.04.1

5.15.0-1103.109~20.04.1

5.15.0-1104.110~20.04.1

5.15.0-1106.112~20.04.1

5.15.0-1107.113~20.04.1

5.15.0-1108.114~20.04.1

5.15.0-1109.115~20.04.1

5.15.0-1110.116~20.04.1

5.15.0-1111.117~20.04.1

5.15.0-1112.118~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-cloud-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-cloud-tools-common",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-headers-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-common",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-host",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-iot

Package

Name: linux-iot
Purl: pkg:deb/ubuntu/linux-iot?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1001.3

5.4.0-1004.6

5.4.0-1005.7

5.4.0-1006.8

5.4.0-1009.11

5.4.0-1010.12

5.4.0-1011.13

5.4.0-1012.14

5.4.0-1013.15

5.4.0-1014.16

5.4.0-1017.18

5.4.0-1018.19

5.4.0-1019.20

5.4.0-1021.22

5.4.0-1022.23

5.4.0-1023.24

5.4.0-1024.25

5.4.0-1025.26

5.4.0-1026.27

5.4.0-1028.29

5.4.0-1029.30

5.4.0-1030.31

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1033.34

5.4.0-1034.35

5.4.0-1035.36

5.4.0-1036.37

5.4.0-1037.38

5.4.0-1038.39

5.4.0-1039.40

5.4.0-1040.41

5.4.0-1041.42

5.4.0-1042.43

5.4.0-1043.44

5.4.0-1044.45

5.4.0-1045.46

5.4.0-1048.51

5.4.0-1049.52

5.4.0-1051.54

5.4.0-1052.55

5.4.0-1053.56

5.4.0-1054.57

5.4.0-1055.58

5.4.0-1056.59

5.4.0-1057.60

5.4.0-1058.61

5.4.0-1060.63

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1064.67

5.4.0-1065.68

5.4.0-1066.69

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1069.72

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1069-iot",
            "binary_version":  "5.4.0-1069.72"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1069-iot",
            "binary_version":  "5.4.0-1069.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1069-iot",
            "binary_version":  "5.4.0-1069.72"
        },
        {
            "binary_name":  "linux-iot-headers-5.4.0-1069",
            "binary_version":  "5.4.0-1069.72"
        },
        {
            "binary_name":  "linux-iot-tools-5.4.0-1069",
            "binary_version":  "5.4.0-1069.72"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1069-iot",
            "binary_version":  "5.4.0-1069.72"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1069-iot",
            "binary_version":  "5.4.0-1069.72"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-kvm

Package

Name: linux-kvm
Purl: pkg:deb/ubuntu/linux-kvm?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1003.3

5.3.0-1008.9

5.3.0-1009.10

5.4.0-1004.4

5.4.0-1006.6

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1018.18

5.4.0-1020.20

5.4.0-1021.21

5.4.0-1023.23

5.4.0-1024.24

5.4.0-1026.27

5.4.0-1028.29

5.4.0-1030.31

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1033.34

5.4.0-1034.35

5.4.0-1036.37

5.4.0-1037.38

5.4.0-1038.39

5.4.0-1039.40

5.4.0-1040.41

5.4.0-1041.42

5.4.0-1044.46

5.4.0-1045.47

5.4.0-1046.48

5.4.0-1047.49

5.4.0-1048.50

5.4.0-1049.51

5.4.0-1050.52

5.4.0-1051.53

5.4.0-1053.55

5.4.0-1054.56

5.4.0-1055.57

5.4.0-1056.58

5.4.0-1058.61

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1065.68

5.4.0-1068.72

5.4.0-1070.75

5.4.0-1071.76

5.4.0-1073.78

5.4.0-1074.79

5.4.0-1075.80

5.4.0-1076.81

5.4.0-1078.84

5.4.0-1079.85

5.4.0-1082.88

5.4.0-1083.89

5.4.0-1084.90

5.4.0-1086.92

5.4.0-1087.93

5.4.0-1088.94

5.4.0-1089.95

5.4.0-1090.96

5.4.0-1091.97

5.4.0-1092.98

5.4.0-1093.99

5.4.0-1094.100

5.4.0-1095.101

5.4.0-1096.102

5.4.0-1097.103

5.4.0-1098.104

5.4.0-1099.105

5.4.0-1100.106

5.4.0-1101.107

5.4.0-1102.108

5.4.0-1103.110

5.4.0-1104.111

5.4.0-1105.112

5.4.0-1106.113

5.4.0-1107.114

5.4.0-1108.115

5.4.0-1109.116

5.4.0-1110.117

5.4.0-1111.118

5.4.0-1112.119

5.4.0-1113.120

5.4.0-1114.121

5.4.0-1115.122

5.4.0-1116.123

5.4.0-1117.124

5.4.0-1118.125

5.4.0-1119.127

5.4.0-1120.128

5.4.0-1121.129

5.4.0-1122.130

5.4.0-1123.131

5.4.0-1124.132

5.4.0-1125.133

5.4.0-1126.134

5.4.0-1127.136

5.4.0-1129.138

5.4.0-1130.139

5.4.0-1131.140

5.4.0-1132.141

5.4.0-1133.142

5.4.0-1134.143

5.4.0-1135.144

5.4.0-1136.145

5.4.0-1137.146

5.4.0-1138.147

5.4.0-1139.148

5.4.0-1140.149

5.4.0-1141.150

5.4.0-1143.152

5.4.0-1144.153

5.4.0-1145.154

5.4.0-1146.155

5.4.0-1147.156

5.4.0-1148.157

5.4.0-1149.158

5.4.0-1150.159

5.4.0-1151.160

5.4.0-1152.161

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1152-kvm",
            "binary_version":  "5.4.0-1152.161"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1152-kvm",
            "binary_version":  "5.4.0-1152.161"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1152-kvm",
            "binary_version":  "5.4.0-1152.161"
        },
        {
            "binary_name":  "linux-kvm-headers-5.4.0-1152",
            "binary_version":  "5.4.0-1152.161"
        },
        {
            "binary_name":  "linux-kvm-tools-5.4.0-1152",
            "binary_version":  "5.4.0-1152.161"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1152-kvm",
            "binary_version":  "5.4.0-1152.161"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1152-kvm",
            "binary_version":  "5.4.0-1152.161"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-lowlatency-hwe-5.15

Package

Name: linux-lowlatency-hwe-5.15
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-33.34~20.04.1

5.15.0-42.45~20.04.1

5.15.0-43.46~20.04.1

5.15.0-46.49~20.04.1

5.15.0-48.54~20.04.1

5.15.0-50.56~20.04.1

5.15.0-52.58~20.04.1

5.15.0-53.59~20.04.1

5.15.0-56.62~20.04.1

5.15.0-58.64~20.04.1

5.15.0-60.66~20.04.1

5.15.0-67.74~20.04.1

5.15.0-69.76~20.04.1

5.15.0-70.77~20.04.1

5.15.0-71.78~20.04.1

5.15.0-72.79~20.04.1

5.15.0-73.80~20.04.1

5.15.0-75.82~20.04.1

5.15.0-76.83~20.04.1

5.15.0-78.85~20.04.1

5.15.0-79.88~20.04.1

5.15.0-82.91~20.04.1

5.15.0-83.92~20.04.1

5.15.0-84.93~20.04.1

5.15.0-86.95~20.04.1

5.15.0-87.96~20.04.1

5.15.0-88.98~20.04.1

5.15.0-89.99~20.04.1

5.15.0-91.101~20.04.1

5.15.0-92.102~20.04.1

5.15.0-94.104~20.04.1

5.15.0-97.107~20.04.1

5.15.0-100.110~20.04.1

5.15.0-101.111~20.04.1

5.15.0-102.112~20.04.1

5.15.0-105.115~20.04.1

5.15.0-106.116~20.04.1

5.15.0-107.117~20.04.1

5.15.0-110.120~20.04.1

5.15.0-113.123~20.04.1

5.15.0-116.126~20.04.1

5.15.0-117.127~20.04.1

5.15.0-118.128~20.04.1

5.15.0-119.129~20.04.1

5.15.0-121.131~20.04.1

5.15.0-122.132~20.04.1

5.15.0-124.134~20.04.1

5.15.0-125.135~20.04.1

5.15.0-126.136~20.04.1

5.15.0-127.137~20.04.1

5.15.0-128.138~20.04.1

5.15.0-129.139~20.04.1

5.15.0-131.141~20.04.1

5.15.0-133.143~20.04.1

5.15.0-134.145~20.04.1

5.15.0-135.146~20.04.1

5.15.0-136.147~20.04.1

5.15.0-138.148~20.04.1

5.15.0-139.149~20.04.1

5.15.0-140.150~20.04.1

5.15.0-142.152~20.04.1

5.15.0-143.153~20.04.1

5.15.0-144.157~20.04.1

5.15.0-145.158~20.04.1

5.15.0-152.162~20.04.1

5.15.0-153.163~20.04.1

5.15.0-156.166~20.04.1

5.15.0-157.167~20.04.1

5.15.0-160.170~20.04.1

5.15.0-161.171~20.04.1

5.15.0-163.173~20.04.1

5.15.0-164.174~20.04.1

5.15.0-168.178~20.04.1

5.15.0-170.180~20.04.1

5.15.0-171.181~20.04.1

5.15.0-173.183~20.04.1

5.15.0-174.184~20.04.1

5.15.0-175.185~20.04.1

5.15.0-177.187~20.04.1

5.15.0-178.188~20.04.1

5.15.0-179.189~20.04.1

5.15.0-181.191~20.04.1

5.15.0-183.193~20.04.1

5.15.0-184.194~20.04.1

5.15.0-190.200~20.04.1

5.15.0-191.201~20.04.1

5.15.0-194.204~20.04.1

5.15.0-195.205~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-headers-5.15.0-195",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-nvidia-tegra-5.15

Package

Name: linux-nvidia-tegra-5.15
Purl: pkg:deb/ubuntu/linux-nvidia-tegra-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1009.9~20.04.1

5.15.0-1010.10~20.04.1

5.15.0-1012.12~20.04.1

5.15.0-1014.14~20.04.1

5.15.0-1015.15~20.04.1

5.15.0-1016.16~20.04.1

5.15.0-1017.17~20.04.1

5.15.0-1018.18~20.04.1

5.15.0-1019.19~20.04.1

5.15.0-1020.20~20.04.1

5.15.0-1022.22~20.04.1

5.15.0-1025.25~20.04.1

5.15.0-1027.27~20.04.1

5.15.0-1030.30~20.04.1

5.15.0-1032.32~20.04.1

5.15.0-1039.39~20.04.1

5.15.0-1040.40~20.04.1

5.15.0-1041.41~20.04.1

5.15.0-1042.42~20.04.1

5.15.0-1043.43~20.04.1

5.15.0-1044.44~20.04.1

5.15.0-1045.45~20.04.1

5.15.0-1046.46~20.04.1

5.15.0-1047.47~20.04.1

5.15.0-1048.48~20.04.1

5.15.0-1049.49~20.04.1

5.15.0-1050.50~20.04.1

5.15.0-1051.51~20.04.1

5.15.0-1052.52~20.04.2

5.15.0-1053.53~20.04.1

5.15.0-1055.55~20.04.1

5.15.0-1057.57~20.04.1

5.15.0-1058.58~20.04.1

5.15.0-1060.60~20.04.1

5.15.0-1061.61~20.04.1

5.15.0-1063.63~20.04.1

5.15.0-1064.66~20.04.1

5.15.0-1065.67~20.04.1

5.15.0-1066.68~20.04.1

5.15.0-1067.69~20.04.1

5.15.0-1068.70~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-nvidia-tegra-5.15-headers-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-nvidia-tegra-5.15-tools-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1002.2

5.3.0-1007.8

5.3.0-1008.9

5.4.0-1005.5

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1009.9

5.4.0-1011.11

5.4.0-1015.15

5.4.0-1018.18

5.4.0-1019.19

5.4.0-1021.21

5.4.0-1022.22

5.4.0-1024.24

5.4.0-1025.25

5.4.0-1028.29

5.4.0-1029.31

5.4.0-1030.32

5.4.0-1032.34

5.4.0-1034.36

5.4.0-1035.38

5.4.0-1037.40

5.4.0-1038.41

5.4.0-1039.42

5.4.0-1041.44

5.4.0-1042.45

5.4.0-1043.46

5.4.0-1045.49

5.4.0-1046.50

5.4.0-1048.52

5.4.0-1049.53

5.4.0-1052.56

5.4.0-1053.57

5.4.0-1054.58

5.4.0-1055.59

5.4.0-1056.60

5.4.0-1057.61

5.4.0-1058.62

5.4.0-1059.63

5.4.0-1061.65

5.4.0-1062.66

5.4.0-1063.67

5.4.0-1064.68

5.4.0-1066.71

5.4.0-1067.72

5.4.0-1069.75

5.4.0-1070.76

5.4.0-1071.77

5.4.0-1073.79

5.4.0-1076.83

5.4.0-1078.86

5.4.0-1079.87

5.4.0-1081.89

5.4.0-1082.90

5.4.0-1083.91

5.4.0-1084.92

5.4.0-1086.95

5.4.0-1087.96

5.4.0-1090.99

5.4.0-1091.100

5.4.0-1092.101

5.4.0-1093.102

5.4.0-1094.103

5.4.0-1097.106

5.4.0-1098.107

5.4.0-1099.108

5.4.0-1100.109

5.4.0-1101.110

5.4.0-1102.111

5.4.0-1103.112

5.4.0-1104.113

5.4.0-1105.114

5.4.0-1106.115

5.4.0-1107.116

5.4.0-1108.117

5.4.0-1109.118

5.4.0-1110.119

5.4.0-1111.120

5.4.0-1112.121

5.4.0-1113.122

5.4.0-1115.124

5.4.0-1116.125

5.4.0-1117.126

5.4.0-1118.127

5.4.0-1119.128

5.4.0-1120.129

5.4.0-1121.130

5.4.0-1122.131

5.4.0-1123.132

5.4.0-1124.133

5.4.0-1125.134

5.4.0-1126.135

5.4.0-1127.136

5.4.0-1129.138

5.4.0-1130.139

5.4.0-1131.140

5.4.0-1132.141

5.4.0-1133.142

5.4.0-1134.143

5.4.0-1135.144

5.4.0-1136.145

5.4.0-1137.146

5.4.0-1138.147

5.4.0-1140.150

5.4.0-1141.151

5.4.0-1142.152

5.4.0-1143.153

5.4.0-1144.154

5.4.0-1145.155

5.4.0-1146.156

5.4.0-1147.157

5.4.0-1149.159

5.4.0-1150.160

5.4.0-1151.161

5.4.0-1152.162

5.4.0-1154.164

5.4.0-1155.165

5.4.0-1156.166

5.4.0-1157.167

5.4.0-1158.168

5.4.0-1159.169

5.4.0-1160.170

5.4.0-1161.171

5.4.0-1162.172

5.4.0-1163.173

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-oracle-headers-5.4.0-1163",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-oracle-tools-5.4.0-1163",
            "binary_version":  "5.4.0-1163.173"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1163-oracle",
            "binary_version":  "5.4.0-1163.173"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-oracle-5.15

Package

Name: linux-oracle-5.15
Purl: pkg:deb/ubuntu/linux-oracle-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1007.9~20.04.1

5.15.0-1013.17~20.04.1

5.15.0-1016.20~20.04.1

5.15.0-1017.22~20.04.1

5.15.0-1018.23~20.04.1

5.15.0-1019.24~20.04.1

5.15.0-1021.27~20.04.1

5.15.0-1022.28~20.04.1

5.15.0-1025.31~20.04.2

5.15.0-1027.33~20.04.1

5.15.0-1029.35~20.04.1

5.15.0-1030.36~20.04.1

5.15.0-1032.38~20.04.1

5.15.0-1033.39~20.04.1

5.15.0-1034.40~20.04.1

5.15.0-1035.41~20.04.1

5.15.0-1036.42~20.04.1

5.15.0-1037.43~20.04.1

5.15.0-1038.44~20.04.1

5.15.0-1039.45~20.04.1

5.15.0-1040.46~20.04.1

5.15.0-1041.47~20.04.1

5.15.0-1042.48~20.04.1

5.15.0-1044.50~20.04.1

5.15.0-1045.51~20.04.1

5.15.0-1046.52~20.04.1

5.15.0-1047.53~20.04.1

5.15.0-1048.54~20.04.1

5.15.0-1049.55~20.04.1

5.15.0-1050.56~20.04.1

5.15.0-1051.57~20.04.1

5.15.0-1052.58~20.04.1

5.15.0-1053.59~20.04.1

5.15.0-1054.60~20.04.1

5.15.0-1055.61~20.04.1

5.15.0-1058.64~20.04.1

5.15.0-1059.65~20.04.1

5.15.0-1061.67~20.04.1

5.15.0-1062.68~20.04.1

5.15.0-1063.69~20.04.1

5.15.0-1065.71~20.04.1

5.15.0-1066.72~20.04.1

5.15.0-1067.73~20.04.1

5.15.0-1068.74~20.04.1

5.15.0-1069.75~20.04.1

5.15.0-1070.76~20.04.1

5.15.0-1071.77~20.04.1

5.15.0-1072.78~20.04.1

5.15.0-1073.79~20.04.1

5.15.0-1074.80~20.04.1

5.15.0-1075.81~20.04.1

5.15.0-1076.82~20.04.1

5.15.0-1077.83~20.04.1

5.15.0-1078.84~20.04.1

5.15.0-1079.85~20.04.1

5.15.0-1080.86~20.04.1

5.15.0-1081.87~20.04.1

5.15.0-1083.89~20.04.1

5.15.0-1084.90~20.04.1

5.15.0-1085.91~20.04.3

5.15.0-1086.92~20.04.1

5.15.0-1088.94~20.04.1

5.15.0-1090.96~20.04.1

5.15.0-1091.97~20.04.1

5.15.0-1092.98~20.04.1

5.15.0-1093.99~20.04.1

5.15.0-1094.100~20.04.1

5.15.0-1095.101~20.04.1

5.15.0-1096.102~20.04.1

5.15.0-1097.103~20.04.1

5.15.0-1098.104~20.04.1

5.15.0-1100.106~20.04.1

5.15.0-1101.107~20.04.1

5.15.0-1102.108~20.04.1

5.15.0-1104.110~20.04.1

5.15.0-1106.112~20.04.1

5.15.0-1108.114~20.04.1

5.15.0-1109.115~20.04.1

5.15.0-1110.116~20.04.1

5.15.0-1111.117~20.04.1

5.15.0-1114.120~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.15-headers-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.15-tools-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1007.7

5.4.0-1008.8

5.4.0-1011.11

5.4.0-1012.12

5.4.0-1013.13

5.4.0-1015.15

5.4.0-1016.17

5.4.0-1018.20

5.4.0-1019.21

5.4.0-1021.24

5.4.0-1022.25

5.4.0-1023.26

5.4.0-1025.28

5.4.0-1026.29

5.4.0-1028.31

5.4.0-1029.32

5.4.0-1030.33

5.4.0-1032.35

5.4.0-1033.36

5.4.0-1034.37

5.4.0-1035.38

5.4.0-1036.39

5.4.0-1038.41

5.4.0-1041.45

5.4.0-1042.46

5.4.0-1043.47

5.4.0-1044.48

5.4.0-1045.49

5.4.0-1046.50

5.4.0-1047.52

5.4.0-1048.53

5.4.0-1050.56

5.4.0-1052.58

5.4.0-1053.60

5.4.0-1055.62

5.4.0-1056.63

5.4.0-1058.65

5.4.0-1059.67

5.4.0-1060.68

5.4.0-1062.70

5.4.0-1065.75

5.4.0-1066.76

5.4.0-1068.78

5.4.0-1069.79

5.4.0-1070.80

5.4.0-1071.81

5.4.0-1073.84

5.4.0-1074.85

5.4.0-1077.88

5.4.0-1078.89

5.4.0-1079.90

5.4.0-1080.91

5.4.0-1081.92

5.4.0-1082.93

5.4.0-1083.94

5.4.0-1084.95

5.4.0-1085.96

5.4.0-1086.97

5.4.0-1088.99

5.4.0-1089.100

5.4.0-1090.101

5.4.0-1091.102

5.4.0-1092.103

5.4.0-1093.104

5.4.0-1094.105

5.4.0-1095.106

5.4.0-1096.107

5.4.0-1097.109

5.4.0-1098.110

5.4.0-1100.112

5.4.0-1101.113

5.4.0-1102.114

5.4.0-1103.115

5.4.0-1104.116

5.4.0-1105.117

5.4.0-1106.118

5.4.0-1107.119

5.4.0-1108.120

5.4.0-1109.121

5.4.0-1110.122

5.4.0-1111.123

5.4.0-1112.124

5.4.0-1113.125

5.4.0-1114.126

5.4.0-1115.127

5.4.0-1116.128

5.4.0-1117.129

5.4.0-1118.130

5.4.0-1119.131

5.4.0-1120.132

5.4.0-1121.133

5.4.0-1122.134

5.4.0-1129.142

5.4.0-1130.143

5.4.0-1131.144

5.4.0-1132.145

5.4.0-1133.146

5.4.0-1134.147

5.4.0-1135.148

5.4.0-1136.149

5.4.0-1137.150

5.4.0-1139.152

5.4.0-1140.153

5.4.0-1143.156

5.4.0-1144.157

5.4.0-1145.158

5.4.0-1146.159

5.4.0-1147.160

5.4.0-1148.161

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161"
        },
        {
            "binary_name":  "linux-image-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161"
        },
        {
            "binary_name":  "linux-raspi-headers-5.4.0-1148",
            "binary_version":  "5.4.0-1148.161"
        },
        {
            "binary_name":  "linux-raspi-tools-5.4.0-1148",
            "binary_version":  "5.4.0-1148.161"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1148-raspi",
            "binary_version":  "5.4.0-1148.161"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-riscv-5.15

Package

Name: linux-riscv-5.15
Purl: pkg:deb/ubuntu/linux-riscv-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1015.17~20.04.1

5.15.0-1017.19~20.04.1

5.15.0-1018.21~20.04.1

5.15.0-1019.22~20.04.1

5.15.0-1022.26~20.04.1

5.15.0-1023.27~20.04.1

5.15.0-1026.30~20.04.2

5.15.0-1027.31~20.04.1

5.15.0-1028.32~20.04.1

5.15.0-1029.33~20.04.1

5.15.0-1030.34~20.04.1

5.15.0-1031.35~20.04.1

5.15.0-1032.36~20.04.1

5.15.0-1033.37~20.04.1

5.15.0-1034.38~20.04.1

5.15.0-1035.39~20.04.1

5.15.0-1036.40~20.04.2

5.15.0-1037.41~20.04.2

5.15.0-1038.42~20.04.2

5.15.0-1039.43~20.04.2

5.15.0-1040.44~20.04.3

5.15.0-1041.45~20.04.1

5.15.0-1043.47~20.04.1

5.15.0-1044.48~20.04.1

5.15.0-1045.49~20.04.1

5.15.0-1046.50~20.04.1

5.15.0-1047.51~20.04.1

5.15.0-1048.52~20.04.1

5.15.0-1049.53~20.04.2

5.15.0-1050.54~20.04.1

5.15.0-1051.55~20.04.1

5.15.0-1052.56~20.04.1

5.15.0-1053.57~20.04.1

5.15.0-1056.60~20.04.1

5.15.0-1057.61~20.04.1

5.15.0-1058.62~20.04.1

5.15.0-1059.63~20.04.1

5.15.0-1060.64~20.04.1

5.15.0-1061.65~20.04.1

5.15.0-1062.66~20.04.1

5.15.0-1063.67~20.04.1

5.15.0-1064.68~20.04.1

5.15.0-1065.69~20.04.1

5.15.0-1066.70~20.04.1

5.15.0-1067.71~20.04.1

5.15.0-1068.72~20.04.1

5.15.0-1069.73~20.04.1

5.15.0-1070.74~20.04.1

5.15.0-1071.75~20.04.1

5.15.0-1072.76~20.04.1

5.15.0-1073.77~20.04.1

5.15.0-1074.78~20.04.1

5.15.0-1075.79~20.04.1

5.15.0-1076.80~20.04.1

5.15.0-1077.81~20.04.1

5.15.0-1078.82~20.04.1

5.15.0-1079.83~20.04.1

5.15.0-1081.85~20.04.1

5.15.0-1082.86~20.04.1

5.15.0-1083.87~20.04.1

5.15.0-1084.88~20.04.1

5.15.0-1085.89~20.04.1

5.15.0-1086.90~20.04.1

5.15.0-1087.91~20.04.1

5.15.0-1088.92~20.04.1

5.15.0-1090.94~20.04.1

5.15.0-1091.95~20.04.1

5.15.0-1092.96~20.04.1

5.15.0-1093.97~20.04.2

5.15.0-1094.98~20.04.1

5.15.0-1095.99~20.04.1

5.15.0-1096.100~20.04.1

5.15.0-1097.101~20.04.1

5.15.0-1098.102~20.04.1

5.15.0-1099.103~20.04.1

5.15.0-1100.104~20.04.1

5.15.0-1102.106~20.04.1

5.15.0-1103.107~20.04.1

5.15.0-1105.109~20.04.1

5.15.0-1106.110~20.04.1

5.15.0-1107.111~20.04.1

5.15.0-1108.112~20.04.1

5.15.0-1109.113~20.04.1

5.15.0-1110.114~20.04.1

5.15.0-1111.115~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.15-headers-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.15-tools-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-xilinx-zynqmp

Package

Name: linux-xilinx-zynqmp
Purl: pkg:deb/ubuntu/linux-xilinx-zynqmp?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1020.24

5.4.0-1021.25

5.4.0-1022.26

5.4.0-1023.27

5.4.0-1024.28

5.4.0-1025.29

5.4.0-1026.30

5.4.0-1027.31

5.4.0-1028.32

5.4.0-1029.33

5.4.0-1030.34

5.4.0-1031.35

5.4.0-1032.36

5.4.0-1033.37

5.4.0-1034.38

5.4.0-1035.39

5.4.0-1036.40

5.4.0-1037.41

5.4.0-1038.42

5.4.0-1039.43

5.4.0-1040.44

5.4.0-1041.45

5.4.0-1042.46

5.4.0-1043.47

5.4.0-1044.48

5.4.0-1045.49

5.4.0-1046.50

5.4.0-1047.51

5.4.0-1048.52

5.4.0-1049.53

5.4.0-1050.54

5.4.0-1051.55

5.4.0-1052.56

5.4.0-1053.57

5.4.0-1054.58

5.4.0-1055.59

5.4.0-1056.60

5.4.0-1058.62

5.4.0-1060.64

5.4.0-1061.65

5.4.0-1062.66

5.4.0-1064.68

5.4.0-1065.69

5.4.0-1066.70

5.4.0-1067.71

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1070.74

5.4.0-1071.75

5.4.0-1072.76

5.4.0-1074.78

5.4.0-1075.79

5.4.0-1076.80

5.4.0-1077.81

5.4.0-1078.82

5.4.0-1079.83

5.4.0-1080.84

5.4.0-1081.85

5.4.0-1082.86

5.4.0-1083.87

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1083-xilinx-zynqmp",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1083-xilinx-zynqmp",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-image-5.4.0-1083-xilinx-zynqmp",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1083-xilinx-zynqmp",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1083-xilinx-zynqmp",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-xilinx-zynqmp-headers-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87"
        },
        {
            "binary_name":  "linux-xilinx-zynqmp-tools-5.4.0-1083",
            "binary_version":  "5.4.0-1083.87"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS-preview:22.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1042.47+fips1

5.15.0-1051.56+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-5.15.0-1051",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-5.15.0-1051",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.15.0-1051",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1053.61+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.15.0-1053",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.15.0-1053",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.15.0-1053",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-73.80+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-fips-headers-5.15.0-73",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-5.15.0-73",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1048.56+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.15.0-1048",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.15.0-1048",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS-updates:16.04:LTS

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.0-1003.3

4.4.0-1005.5

4.4.0-1006.6

4.4.0-1008.10

4.4.0-1010.13

4.4.0-1011.14

4.4.0-1012.16

4.4.0-1013.17

4.4.0-1015.20

4.4.0-1017.22

4.4.0-1019.24

4.4.0-1021.26

4.4.0-1022.27

4.4.0-1023.28

4.4.0-1025.30

4.4.0-1026.31

4.4.0-1027.32

4.4.0-1028.33

4.4.0-1029.34

4.4.0-1031.36

4.4.0-1032.37

4.4.0-1033.38

4.4.0-1034.39

4.4.0-1041.46

4.4.0-1042.47

4.4.0-1043.48

4.4.0-1044.49

4.4.0-1045.50

4.4.0-1046.51

4.4.0-1048.53

4.4.0-1049.55

4.4.0-1051.57

4.4.0-1052.58

4.4.0-1054.60

4.4.0-1055.61

4.4.0-1056.62

4.4.0-1057.63

4.4.0-1058.64

4.4.0-1060.66

4.4.0-1061.67

4.4.0-1062.68

4.4.0-1063.69

4.4.0-1064.70

4.4.0-1065.71

4.4.0-1066.72

4.4.0-1067.73

4.4.0-1068.74

4.4.0-1069.75

4.4.0-1071.77

4.4.0-1072.78

4.4.0-1073.79

4.4.0-1074.80

4.4.0-1077.84

4.4.0-1079.86

4.4.0-1080.87

4.4.0-1081.88

4.4.0-1082.89

4.4.0-1083.90

4.4.0-1084.91

4.4.0-1085.92

4.4.0-1086.93

4.4.0-1088.95

4.4.0-1089.96

4.4.0-1090.97

4.4.0-1091.98

4.4.0-1092.99

4.4.0-1093.100

4.4.0-1094.101

4.4.0-1095.102

4.4.0-1097.104

4.4.0-1099.106

4.4.0-1100.107

4.4.0-1101.108

4.4.0-1102.109

4.4.0-1103.110

4.4.0-1104.111

4.4.0-1105.112

4.4.0-1106.113

4.4.0-1107.114

4.4.0-1108.115

4.4.0-1109.116

4.4.0-1110.117

4.4.0-1111.118

4.4.0-1112.119

4.4.0-1113.120

4.4.0-1114.121

4.4.0-1115.122

4.4.0-1116.123

4.4.0-1117.124

4.4.0-1119.126

4.4.0-1120.127

4.4.0-1121.128

4.4.0-1122.129

4.4.0-1123.130

4.4.0-1124.131

4.4.0-1125.132

4.4.0-1126.133

4.4.0-1127.134

4.4.0-1128.135

4.4.0-1129.136

4.4.0-1130.137

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "crypto-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "dasd-extra-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "dasd-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "fat-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "fb-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "firewire-core-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "floppy-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "fs-core-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "fs-secondary-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "input-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "ipmi-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "irda-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "kernel-image-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-buildinfo-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-fips-cloud-tools-common",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-fips-headers-4.4.0-1130",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-fips-source-4.4.0",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-fips-tools-4.4.0-1130",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-headers-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-image-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-image-hmac-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-image-unsigned-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-modules-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-modules-extra-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-tools-4.4.0-1130-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "linux-udebs-fips",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "md-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "message-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "mouse-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "multipath-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "nfs-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "nic-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "nic-shared-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "nic-usb-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "parport-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "pata-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "pcmcia-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "plip-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "ppp-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "sata-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "scsi-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "serial-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "speakup-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "storage-core-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "usb-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "virtio-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        },
        {
            "binary_name":  "vlan-modules-4.4.0-1130-fips-di",
            "binary_version":  "4.4.0-1130.137"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS-updates:18.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-2000.4

4.15.0-2018.18

4.15.0-2021.21

4.15.0-2022.22

4.15.0-2024.24

4.15.0-2025.25

4.15.0-2026.26

4.15.0-2027.27

4.15.0-2030.31

4.15.0-2031.32

4.15.0-2033.34

4.15.0-2034.35

4.15.0-2035.37

4.15.0-2036.38

4.15.0-2037.39

4.15.0-2038.40

4.15.0-2039.41

4.15.0-2040.42

4.15.0-2041.43

4.15.0-2042.44

4.15.0-2044.46

4.15.0-2045.47

4.15.0-2048.50

4.15.0-2051.53

4.15.0-2052.54

4.15.0-2053.55

4.15.0-2054.56

4.15.0-2055.57

4.15.0-2056.58

4.15.0-2057.59

4.15.0-2059.61

4.15.0-2060.62

4.15.0-2061.63

4.15.0-2063.66

4.15.0-2064.67

4.15.0-2065.68

4.15.0-2066.69

4.15.0-2067.70

4.15.0-2069.72

4.15.0-2072.76

4.15.0-2075.80

4.15.0-2076.81

4.15.0-2078.83

4.15.0-2079.84

4.15.0-2080.85

4.15.0-2081.87

4.15.0-2082.88

4.15.0-2083.89

4.15.0-2085.91

4.15.0-2087.93

4.15.0-2089.95

4.15.0-2090.96

4.15.0-2092.98

4.15.0-2093.99

4.15.0-2094.100

4.15.0-2095.101

4.15.0-2096.102

4.15.0-2097.103

4.15.0-2098.104

4.15.0-2099.105

4.15.0-2100.106

4.15.0-2101.107

4.15.0-2102.108

4.15.0-2103.109

4.15.0-2104.110

4.15.0-2105.111

4.15.0-2106.112

4.15.0-2107.113

4.15.0-2108.114

4.15.0-2109.115

4.15.0-2110.116

4.15.0-2111.117

4.15.0-2112.118

4.15.0-2113.119

4.15.0-2114.120

4.15.0-2115.121

4.15.0-2116.122

4.15.0-2117.123

4.15.0-2118.124

4.15.0-2119.125

4.15.0-2120.126

4.15.0-2121.127

4.15.0-2122.128

4.15.0-2123.129

4.15.0-2124.130

4.15.0-2125.131

4.15.0-2126.132

4.15.0-2127.133

4.15.0-2128.134

4.15.0-2129.135

4.15.0-2130.136

4.15.0-2132.138

4.15.0-2133.139

4.15.0-2134.140

4.15.0-2135.141

4.15.0-2136.142

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-headers-4.15.0-2136",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-aws-fips-tools-4.15.0-2136",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-headers-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-modules-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        },
        {
            "binary_name":  "linux-tools-4.15.0-2136-aws-fips",
            "binary_version":  "4.15.0-2136.142"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.2

4.15.0-2006.7

4.15.0-2007.8

4.15.0-2008.9

4.15.0-2009.10

4.15.0-2012.14

4.15.0-2013.15

4.15.0-2015.17

4.15.0-2016.18

4.15.0-2017.20

4.15.0-2018.21

4.15.0-2020.23

4.15.0-2021.24

4.15.0-2022.25

4.15.0-2023.26

4.15.0-2024.27

4.15.0-2025.28

4.15.0-2026.29

4.15.0-2027.30

4.15.0-2030.33

4.15.0-2033.37

4.15.0-2034.38

4.15.0-2035.39

4.15.0-2036.40

4.15.0-2037.41

4.15.0-2038.42

4.15.0-2039.43

4.15.0-2041.45

4.15.0-2042.46

4.15.0-2043.47

4.15.0-2045.49

4.15.0-2046.50

4.15.0-2047.51

4.15.0-2048.52

4.15.0-2049.53

4.15.0-2050.54

4.15.0-2053.58

4.15.0-2056.62

4.15.0-2057.63

4.15.0-2059.65

4.15.0-2060.66

4.15.0-2062.68

4.15.0-2066.72

4.15.0-2067.73

4.15.0-2068.74

4.15.0-2070.76

4.15.0-2071.77

4.15.0-2072.78

4.15.0-2073.79

4.15.0-2074.80

4.15.0-2075.81

4.15.0-2076.82

4.15.0-2077.83

4.15.0-2078.84

4.15.0-2079.85

4.15.0-2080.86

4.15.0-2081.87

4.15.0-2082.88

4.15.0-2084.90

4.15.0-2085.91

4.15.0-2086.92

4.15.0-2087.93

4.15.0-2088.94

4.15.0-2089.95

4.15.0-2090.96

4.15.0-2091.97

4.15.0-2092.98

4.15.0-2093.99

4.15.0-2094.100

4.15.0-2095.101

4.15.0-2096.102

4.15.0-2097.103

4.15.0-2098.104

4.15.0-2099.105

4.15.0-2100.106

4.15.0-2101.107

4.15.0-2102.108

4.15.0-2104.110

4.15.0-2105.111

4.15.0-2106.112

4.15.0-2109.115

4.15.0-2110.116

4.15.0-2111.117

4.15.0-2112.118

4.15.0-2113.119

4.15.0-2114.120

4.15.0-2115.121

4.15.0-2116.122

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-4.15.0-2116",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-azure-fips-headers-4.15.0-2116",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-azure-fips-tools-4.15.0-2116",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-headers-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-modules-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        },
        {
            "binary_name":  "linux-tools-4.15.0-2116-azure-fips",
            "binary_version":  "4.15.0-2116.122"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1027.32

4.15.0-1029.34

4.15.0-1034.39

4.15.0-1035.40

4.15.0-1037.42

4.15.0-1038.43

4.15.0-1039.44

4.15.0-1040.45

4.15.0-1041.46

4.15.0-1044.50

4.15.0-1045.52

4.15.0-1046.53

4.15.0-1048.55

4.15.0-1049.56

4.15.0-1050.58

4.15.0-1051.59

4.15.0-1052.60

4.15.0-1053.61

4.15.0-1054.62

4.15.0-1055.63

4.15.0-1056.64

4.15.0-1057.65

4.15.0-1058.66

4.15.0-1059.67

4.15.0-1060.68

4.15.0-1063.71

4.15.0-1066.75

4.15.0-1067.76

4.15.0-1068.77

4.15.0-1069.78

4.15.0-1070.79

4.15.0-1071.80

4.15.0-1072.81

4.15.0-1073.82

4.15.0-1075.84

4.15.0-1076.85

4.15.0-1078.87

4.15.0-1080.89

4.15.0-1081.90

4.15.0-1083.92

4.15.0-1084.93

4.15.0-1085.94

4.15.0-1087.96

4.15.0-1090.100

4.15.0-1093.104

4.15.0-1094.105

4.15.0-1096.107

4.15.0-1097.108

4.15.0-1098.109

4.15.0-1099.110

4.15.0-1100.111

4.15.0-1103.114

4.15.0-1104.115

4.15.0-1105.116

4.15.0-1107.118

4.15.0-1108.119

4.15.0-1109.120

4.15.0-1110.121

4.15.0-1111.122

4.15.0-1112.123

4.15.0-1113.124

4.15.0-1114.125

4.15.0-1115.126

4.15.0-1116.127

4.15.0-1117.128

4.15.0-1118.129

4.15.0-1119.130

4.15.0-1121.132

4.15.0-1122.133

4.15.0-1123.134

4.15.0-1124.135

4.15.0-1125.136

4.15.0-1126.137

4.15.0-1127.138

4.15.0-1128.139

4.15.0-1129.140

4.15.0-1130.141

4.15.0-1131.142

4.15.0-1132.143

4.15.0-1133.144

4.15.0-1134.145

4.15.0-1135.146

4.15.0-1136.147

4.15.0-1137.148

4.15.0-1138.149

4.15.0-1139.150

4.15.0-1140.151

4.15.0-1141.153

4.15.0-1142.154

4.15.0-1143.155

4.15.0-1144.156

4.15.0-1145.157

4.15.0-1146.158

4.15.0-1147.159

4.15.0-1148.160

4.15.0-1149.161

4.15.0-1150.162

4.15.0-1151.163

4.15.0-1152.164

4.15.0-1153.165

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-fips-headers-4.15.0-1153",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-fips-tools-4.15.0-1153",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-image-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-image-hmac-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1153-fips",
            "binary_version":  "4.15.0-1153.165"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-2013.14

4.15.0-2016.18

4.15.0-2017.19

4.15.0-2018.20

4.15.0-2019.21

4.15.0-2020.22

4.15.0-2021.23

4.15.0-2022.24

4.15.0-2024.26

4.15.0-2025.27

4.15.0-2026.28

4.15.0-2028.31

4.15.0-2029.32

4.15.0-2030.33

4.15.0-2031.34

4.15.0-2032.35

4.15.0-2034.37

4.15.0-2037.41

4.15.0-2040.45

4.15.0-2041.46

4.15.0-2043.48

4.15.0-2044.49

4.15.0-2045.50

4.15.0-2047.52

4.15.0-2050.55

4.15.0-2052.57

4.15.0-2054.59

4.15.0-2055.60

4.15.0-2056.61

4.15.0-2057.62

4.15.0-2058.63

4.15.0-2059.64

4.15.0-2060.65

4.15.0-2061.66

4.15.0-2062.67

4.15.0-2063.68

4.15.0-2064.69

4.15.0-2065.70

4.15.0-2066.71

4.15.0-2067.72

4.15.0-2068.73

4.15.0-2069.74

4.15.0-2070.75

4.15.0-2071.76

4.15.0-2072.77

4.15.0-2073.78

4.15.0-2074.79

4.15.0-2075.80

4.15.0-2076.81

4.15.0-2077.83

4.15.0-2078.84

4.15.0-2079.85

4.15.0-2080.86

4.15.0-2081.87

4.15.0-2082.88

4.15.0-2083.89

4.15.0-2084.90

4.15.0-2085.91

4.15.0-2086.92

4.15.0-2087.93

4.15.0-2088.94

4.15.0-2089.95

4.15.0-2090.96

4.15.0-2091.97

4.15.0-2092.98

4.15.0-2093.99

4.15.0-2094.100

4.15.0-2095.101

4.15.0-2096.102

4.15.0-2097.103

4.15.0-2098.104

4.15.0-2099.105

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-4.15.0-2099",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-4.15.0-2099",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-headers-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-modules-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        },
        {
            "binary_name":  "linux-tools-4.15.0-2099-gcp-fips",
            "binary_version":  "4.15.0-2099.105"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS-updates:20.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1021.21+fips2

5.4.0-1069.73+fips2

5.4.0-1071.76+fips1

5.4.0-1072.77+fips1

5.4.0-1073.78+fips1

5.4.0-1078.84+fips1

5.4.0-1080.87+fips1

5.4.0-1081.88+fips1

5.4.0-1083.90+fips1

5.4.0-1085.92+fips1

5.4.0-1086.93+fips1

5.4.0-1088.96+fips1

5.4.0-1089.97+fips1

5.4.0-1092.100+fips1

5.4.0-1093.101+fips1

5.4.0-1094.102+fips1

5.4.0-1096.104+fips1

5.4.0-1099.107+fips1

5.4.0-1100.108+fips1

5.4.0-1101.109+fips1

5.4.0-1102.110+fips1

5.4.0-1103.111+fips1

5.4.0-1104.112+fips1

5.4.0-1105.113+fips1

5.4.0-1106.114+fips1

5.4.0-1107.115+fips1

5.4.0-1108.116+fips1

5.4.0-1109.118+fips1

5.4.0-1110.119+fips1

5.4.0-1111.120+fips1

5.4.0-1112.121+fips1

5.4.0-1113.123+fips1

5.4.0-1114.124+fips1

5.4.0-1116.126+fips1

5.4.0-1117.127+fips1

5.4.0-1118.128+fips1

5.4.0-1119.129+fips1

5.4.0-1120.130+fips1

5.4.0-1121.131+fips1

5.4.0-1122.132+fips1

5.4.0-1123.133+fips1

5.4.0-1124.134+fips1

5.4.0-1125.135+fips1

5.4.0-1126.136+fips2

5.4.0-1127.137+fips1

5.4.0-1128.138+fips1

5.4.0-1129.139+fips1

5.4.0-1130.140+fips1

5.4.0-1131.141+fips1

5.4.0-1132.142+fips1

5.4.0-1133.143+fips1

5.4.0-1134.144+fips1

5.4.0-1135.145+fips1

5.4.0-1136.146+fips1

5.4.0-1137.147+fips1

5.4.0-1139.149+fips1

5.4.0-1140.151+fips1

5.4.0-1142.153+fips1

5.4.0-1144.155+fips1

5.4.0-1145.156+fips1

5.4.0-1146.156+fips1

5.4.0-1147.157+fips1

5.4.0-1148.158+fips1

5.4.0-1149.159+fips1

5.4.0-1150.160+fips1

5.4.0-1151.161+fips1

5.4.0-1152.162+fips1

5.4.0-1153.163+fips1

5.4.0-1154.164+fips1

5.4.0-1155.165+fips1

5.4.0-1156.166+fips1

5.4.0-1157.167+fips1

5.4.0-1158.168+fips1

5.4.0-1159.169+fips1

5.4.0-1160.170+fips1

5.4.0-1161.172+fips1

5.4.0-1163.174+fips1

5.4.0-1165.176+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-headers-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.4.0-1165",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1165-aws-fips",
            "binary_version":  "5.4.0-1165.176+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1022.22+fips1

5.4.0-1073.76+fips1

5.4.0-1074.77+fips1

5.4.0-1076.79+fips1

5.4.0-1078.81+fips1

5.4.0-1080.83+fips1

5.4.0-1083.87+fips1

5.4.0-1085.90+fips1

5.4.0-1086.91+fips1

5.4.0-1089.94+fips1

5.4.0-1090.95+fips1

5.4.0-1091.96+fips1

5.4.0-1094.100+fips1

5.4.0-1095.101+fips1

5.4.0-1098.104+fips1

5.4.0-1100.106+fips1

5.4.0-1101.107+fips1

5.4.0-1103.109+fips1

5.4.0-1104.110+fips1

5.4.0-1105.111+fips1

5.4.0-1106.112+fips1

5.4.0-1107.113+fips1

5.4.0-1108.114+fips1

5.4.0-1109.115+fips1

5.4.0-1110.116+fips1

5.4.0-1111.117+fips1

5.4.0-1112.118+fips1

5.4.0-1113.119+fips1

5.4.0-1114.120+fips1

5.4.0-1115.122+fips1

5.4.0-1116.123+fips1

5.4.0-1117.124+fips1

5.4.0-1118.125+fips1

5.4.0-1119.126+fips1

5.4.0-1121.128+fips1

5.4.0-1122.129+fips1

5.4.0-1123.130+fips1

5.4.0-1124.131+fips1

5.4.0-1126.133+fips1

5.4.0-1127.134+fips1

5.4.0-1128.135+fips1

5.4.0-1129.136+fips1

5.4.0-1130.137+fips1

5.4.0-1131.138+fips1

5.4.0-1132.139+fips1

5.4.0-1133.140+fips1

5.4.0-1134.141+fips1

5.4.0-1135.142+fips1

5.4.0-1136.143+fips1

5.4.0-1137.144+fips1

5.4.0-1138.145+fips1

5.4.0-1139.146+fips1

5.4.0-1140.147+fips1

5.4.0-1142.149+fips1

5.4.0-1143.150+fips1

5.4.0-1145.152+fips1

5.4.0-1147.154+fips1

5.4.0-1148.156+fips1

5.4.0-1149.157+fips1

5.4.0-1151.158+fips1

5.4.0-1152.159+fips1

5.4.0-1153.160+fips1

5.4.0-1154.161+fips1

5.4.0-1155.162+fips1

5.4.0-1157.164+fips1

5.4.0-1158.165+fips1

5.4.0-1160.166+fips1

5.4.0-1161.167+fips1

5.4.0-1162.168+fips1

5.4.0-1163.169+fips1

5.4.0-1164.170+fips1

5.4.0-1166.172+fips1

5.4.0-1167.173+fips1

5.4.0-1168.174+fips1

5.4.0-1170.176+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.4.0-1170",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1170-azure-fips",
            "binary_version":  "5.4.0-1170.176+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1026.30

5.4.0-1028.32

5.4.0-1031.36

5.4.0-1032.37

5.4.0-1033.38

5.4.0-1034.40

5.4.0-1035.41

5.4.0-1036.42

5.4.0-1037.43

5.4.0-1038.44

5.4.0-1040.46

5.4.0-1041.47

5.4.0-1042.48

5.4.0-1043.49

5.4.0-1045.51

5.4.0-1046.52

5.4.0-1047.53

5.4.0-1048.54

5.4.0-1049.55

5.4.0-1051.57

5.4.0-1054.61

5.4.0-1056.64

5.4.0-1057.65

5.4.0-1059.67

5.4.0-1060.68

5.4.0-1061.69

5.4.0-1062.70

5.4.0-1064.73

5.4.0-1065.74

5.4.0-1068.77

5.4.0-1069.78

5.4.0-1070.79

5.4.0-1072.81

5.4.0-1073.82

5.4.0-1074.83

5.4.0-1075.84

5.4.0-1076.85

5.4.0-1077.86

5.4.0-1078.87

5.4.0-1079.88

5.4.0-1080.89

5.4.0-1081.90

5.4.0-1082.91

5.4.0-1083.92

5.4.0-1084.93

5.4.0-1085.94

5.4.0-1086.95

5.4.0-1087.96

5.4.0-1088.97

5.4.0-1089.98

5.4.0-1090.100

5.4.0-1091.101

5.4.0-1092.102

5.4.0-1094.104

5.4.0-1095.105

5.4.0-1096.106

5.4.0-1097.107

5.4.0-1098.108

5.4.0-1099.109

5.4.0-1100.110

5.4.0-1101.111

5.4.0-1102.112

5.4.0-1103.113

5.4.0-1104.114

5.4.0-1105.115

5.4.0-1106.116

5.4.0-1107.117

5.4.0-1108.118

5.4.0-1109.119

5.4.0-1110.120

5.4.0-1111.121

5.4.0-1112.122

5.4.0-1116.126

5.4.0-1117.127

5.4.0-1118.128

5.4.0-1119.129

5.4.0-1120.130

5.4.0-1121.131

5.4.0-1122.132

5.4.0-1123.133

5.4.0-1124.134

5.4.0-1125.135

5.4.0-1126.136

5.4.0-1127.137

5.4.0-1128.138

5.4.0-1130.140

5.4.0-1131.141

5.4.0-1132.142

5.4.0-1133.143

5.4.0-1134.144

5.4.0-1135.145

5.4.0-1136.146

5.4.0-1137.147

5.4.0-1138.148

5.4.0-1139.149

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-fips-headers-5.4.0-1139",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-fips-tools-5.4.0-1139",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1139-fips",
            "binary_version":  "5.4.0-1139.149"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1021.21+fips1

5.4.0-1067.71~20.04.1

5.4.0-1069.73+fips2

5.4.0-1071.75+fips1

5.4.0-1073.78+fips1

5.4.0-1075.80+fips1

5.4.0-1078.84+fips1

5.4.0-1080.87+fips1

5.4.0-1081.88+fips1

5.4.0-1086.94+fips1

5.4.0-1087.95+fips1

5.4.0-1089.97+fips1

5.4.0-1092.101+fips1

5.4.0-1093.102+fips1

5.4.0-1096.105+fips1

5.4.0-1097.106+fips1

5.4.0-1098.107+fips1

5.4.0-1100.109+fips1

5.4.0-1101.110+fips1

5.4.0-1102.111+fips1

5.4.0-1103.112+fips1

5.4.0-1104.113+fips1

5.4.0-1105.114+fips1

5.4.0-1106.115+fips1

5.4.0-1107.116+fips1

5.4.0-1108.117+fips1

5.4.0-1109.118+fips1

5.4.0-1110.119+fips1

5.4.0-1111.120+fips1

5.4.0-1112.121+fips1

5.4.0-1113.122+fips1

5.4.0-1115.124+fips1

5.4.0-1116.125+fips1

5.4.0-1117.126+fips1

5.4.0-1118.127+fips1

5.4.0-1120.129+fips1

5.4.0-1121.130+fips1

5.4.0-1122.131+fips1

5.4.0-1124.133+fips1

5.4.0-1125.134+fips1

5.4.0-1126.135+fips1

5.4.0-1127.136+fips1

5.4.0-1128.137+fips1

5.4.0-1129.138+fips1

5.4.0-1130.139+fips1

5.4.0-1131.140+fips1

5.4.0-1132.141+fips1

5.4.0-1133.142+fips1

5.4.0-1134.143+fips1

5.4.0-1135.144+fips1

5.4.0-1136.145+fips1

5.4.0-1137.146+fips1

5.4.0-1138.147+fips1

5.4.0-1139.148+fips1

5.4.0-1140.149+fips1

5.4.0-1141.150+fips1

5.4.0-1142.151+fips1

5.4.0-1143.152+fips1

5.4.0-1145.154+fips1

5.4.0-1146.155+fips1

5.4.0-1147.156+fips1

5.4.0-1148.157+fips1

5.4.0-1149.158+fips1

5.4.0-1150.159+fips1

5.4.0-1151.160+fips1

5.4.0-1152.161+fips1

5.4.0-1153.162+fips1

5.4.0-1154.163+fips1

5.4.0-1155.164+fips1

5.4.0-1156.165+fips1

5.4.0-1157.166+fips1

5.4.0-1159.168+fips1

5.4.0-1160.169+fips1

5.4.0-1161.170+fips1

5.4.0-1162.171+fips1

5.4.0-1163.172+fips1

5.4.0-1164.173+fips1

5.4.0-1165.174+fips1

5.4.0-1166.175+fips1

5.4.0-1167.176+fips1

5.4.0-1168.178+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.4.0-1168",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.4.0-1168",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1168-gcp-fips",
            "binary_version":  "5.4.0-1168.178+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS-updates:22.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1051.56+fips1

5.15.0-1052.57+fips1

5.15.0-1053.58+fips1

5.15.0-1055.60+fips1

5.15.0-1056.61+fips1

5.15.0-1057.63+fips1

5.15.0-1060.66+fips1

5.15.0-1061.67+fips1

5.15.0-1062.68+fips1

5.15.0-1063.69+fips1

5.15.0-1064.70+fips1

5.15.0-1065.71+fips1

5.15.0-1066.72+fips1

5.15.0-1067.73+fips1

5.15.0-1068.74+fips1

5.15.0-1069.75+fips1

5.15.0-1070.76+fips1

5.15.0-1071.77+fips1

5.15.0-1072.78+fips1

5.15.0-1073.79+fips1

5.15.0-1076.83+fips1

5.15.0-1077.84+fips1

5.15.0-1078.85+fips1

5.15.0-1079.86+fips1

5.15.0-1080.87+fips1

5.15.0-1081.88+fips1

5.15.0-1082.89+fips1

5.15.0-1083.90+fips1

5.15.0-1084.91+fips1

5.15.0-1085.92+fips1

5.15.0-1086.93+fips1

5.15.0-1087.94+fips1

5.15.0-1088.95+fips1

5.15.0-1089.96+fips1

5.15.0-1090.97+fips1

5.15.0-1091.98+fips1

5.15.0-1092.99+fips1

5.15.0-1093.100+fips1

5.15.0-1095.102+fips1

5.15.0-1096.103+fips1

5.15.0-1097.104+fips1

5.15.0-1098.105+fips1

5.15.0-1099.106+fips1

5.15.0-1100.107+fips1

5.15.0-1101.108+fips1

5.15.0-1103.110+fips1

5.15.0-1104.111+fips1

5.15.0-1105.112+fips1

5.15.0-1106.113+fips1

5.15.0-1108.115+fips1

5.15.0-1109.116+fips1

5.15.0-1111.118+fips1

5.15.0-1112.119+fips1

5.15.0-1113.120+fips1

5.15.0-1114.121+fips1

5.15.0-1115.122+fips1

5.15.0-1116.123+fips1

5.15.0-1117.124+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1053.61+fips1

5.15.0-1058.66+fips1

5.15.0-1059.67+fips1

5.15.0-1060.69+fips1

5.15.0-1061.70+fips1

5.15.0-1063.72+fips1

5.15.0-1064.73+fips1

5.15.0-1065.74+fips1

5.15.0-1067.76+fips1

5.15.0-1068.77+fips1

5.15.0-1070.79+fips1

5.15.0-1071.80+fips1

5.15.0-1072.81+fips1

5.15.0-1073.82+fips1

5.15.0-1074.83+fips1

5.15.0-1075.84+fips1

5.15.0-1078.87+fips1

5.15.0-1079.88+fips1

5.15.0-1080.89+fips1

5.15.0-1082.91+fips1

5.15.0-1083.92+fips1

5.15.0-1085.94+fips1

5.15.0-1087.96+fips1

5.15.0-1088.97+fips1

5.15.0-1089.98+fips1

5.15.0-1090.99+fips1

5.15.0-1091.100+fips1

5.15.0-1094.103+fips1

5.15.0-1095.104+fips1

5.15.0-1096.105+fips1

5.15.0-1097.106+fips1

5.15.0-1098.107+fips1

5.15.0-1101.110+fips1

5.15.0-1102.111+fips1

5.15.0-1103.112+fips1

5.15.0-1109.118+fips1

5.15.0-1110.119+fips1

5.15.0-1111.120+fips1

5.15.0-1114.123+fips1

5.15.0-1116.125+fips1

5.15.0-1117.126+fips1

5.15.0-1118.127+fips1

5.15.0-1119.128+fips1

5.15.0-1121.130+fips1

5.15.0-1122.131+fips1

5.15.0-1123.132+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-73.80+fips1

5.15.0-92.102+fips1

5.15.0-94.104+fips1

5.15.0-97.107+fips1

5.15.0-100.110+fips1

5.15.0-101.111+fips1

5.15.0-102.112+fips1

5.15.0-105.115+fips1

5.15.0-106.116+fips1

5.15.0-107.117+fips1

5.15.0-111.121+fips1

5.15.0-113.123+fips1

5.15.0-115.125+fips1

5.15.0-117.127+fips1

5.15.0-118.128+fips1

5.15.0-119.129+fips1

5.15.0-121.131+fips1

5.15.0-122.132+fips1

5.15.0-124.134+fips1

5.15.0-125.135+fips1

5.15.0-127.137+fips1

5.15.0-128.138+fips1

5.15.0-130.140+fips1

5.15.0-131.141+fips1

5.15.0-133.144+fips1

5.15.0-134.145+fips1

5.15.0-135.146+fips1

5.15.0-136.147+fips1

5.15.0-138.148+fips1

5.15.0-139.149+fips1

5.15.0-140.150+fips1

5.15.0-141.151+fips1

5.15.0-142.152+fips1

5.15.0-143.153+fips1

5.15.0-144.157+fips1

5.15.0-145.158+fips1

5.15.0-152.162+fips1

5.15.0-153.163+fips1

5.15.0-156.166+fips1

5.15.0-157.167+fips1

5.15.0-160.170+fips1

5.15.0-161.171+fips1

5.15.0-163.173+fips1

5.15.0-164.174+fips1

5.15.0-168.178+fips1

5.15.0-170.180+fips1

5.15.0-171.181+fips1

5.15.0-173.183+fips1

5.15.0-174.184+fips1

5.15.0-176.186+fips1

5.15.0-177.187+fips1

5.15.0-179.189+fips1

5.15.0-181.191+fips1

5.15.0-185.195+fips1

5.15.0-186.196+fips1

5.15.0-190.200+fips1

5.15.0-191.201+fips1

5.15.0-194.204+fips1

5.15.0-198.208+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-fips-cloud-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-fips-headers-5.15.0-198",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1048.56+fips1

5.15.0-1055.63+fips2

5.15.0-1058.66+fips1

5.15.0-1059.67+fips1

5.15.0-1060.68+fips1

5.15.0-1062.70+fips1

5.15.0-1063.71+fips1

5.15.0-1064.72+fips1

5.15.0-1065.73+fips1

5.15.0-1066.74+fips1

5.15.0-1067.75+fips1

5.15.0-1068.76+fips1

5.15.0-1069.77+fips1

5.15.0-1070.78+fips1

5.15.0-1071.79+fips1

5.15.0-1072.80+fips1

5.15.0-1073.81+fips1

5.15.0-1074.83+fips1

5.15.0-1075.84+fips1

5.15.0-1077.86+fips1

5.15.0-1078.87+fips1

5.15.0-1079.88+fips1

5.15.0-1080.89+fips1

5.15.0-1081.90+fips1

5.15.0-1082.91+fips1

5.15.0-1083.92+fips1

5.15.0-1084.93+fips1

5.15.0-1085.94+fips1

5.15.0-1086.95+fips1

5.15.0-1087.96+fips1

5.15.0-1088.97+fips1

5.15.0-1090.99+fips1

5.15.0-1091.100+fips1

5.15.0-1092.101+fips1

5.15.0-1093.102+fips1

5.15.0-1095.104+fips1

5.15.0-1096.105+fips1

5.15.0-1097.106+fips1

5.15.0-1098.107+fips1

5.15.0-1099.108+fips1

5.15.0-1100.109+fips1

5.15.0-1101.110+fips1

5.15.0-1103.112+fips1

5.15.0-1104.113+fips1

5.15.0-1105.114+fips1

5.15.0-1106.115+fips1

5.15.0-1108.117+fips1

5.15.0-1109.118+fips1

5.15.0-1111.121+fips1

5.15.0-1112.122+fips1

5.15.0-1114.124+fips1

5.15.0-1115.125+fips1

5.15.0-1116.126+fips1

5.15.0-1118.128+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS-updates:24.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1061.64+fips1

Affected versions

6.*

6.8.0-1035.37+fips1

6.8.0-1036.38+fips1

6.8.0-1038.40+fips1

6.8.0-1039.41+fips1

6.8.0-1040.42+fips1

6.8.0-1041.43+fips1

6.8.0-1042.44+fips1

6.8.0-1043.45+fips1

6.8.0-1044.46+fips1

6.8.0-1045.47+fips1

6.8.0-1046.49+fips1

6.8.0-1047.50+fips1

6.8.0-1050.53+fips1

6.8.0-1051.54+fips1

6.8.0-1052.55+fips1

6.8.0-1053.56+fips1

6.8.0-1055.58+fips1

6.8.0-1057.60+fips1

6.8.0-1060.63+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-6.8.0-1061",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1061-aws-fips",
            "binary_version":  "6.8.0-1061.64+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1063.71+fips2

Affected versions

6.*

6.8.0-1034.39+fips1

6.8.0-1040.46+fips1

6.8.0-1044.50+fips1

6.8.0-1046.52+fips1

6.8.0-1047.53+fips1

6.8.0-1052.58+fips1

6.8.0-1053.59+fips1

6.8.0-1054.60+fips1

6.8.0-1059.65+fips1

6.8.0-1062.69+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-azure-fips-headers-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-azure-fips-tools-6.8.0-1063",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1063-azure-fips",
            "binary_version":  "6.8.0-1063.71+fips2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-136.136+fips2

Affected versions

6.*

6.8.0-38.38+fips4

6.8.0-78.78+fips1

6.8.0-79.79+fips1

6.8.0-83.83+fips1

6.8.0-84.84+fips1

6.8.0-85.85+fips1

6.8.0-86.87+fips1

6.8.0-87.88+fips1

6.8.0-88.89+fips1

6.8.0-90.91+fips1

6.8.0-94.96+fips1

6.8.0-100.100+fips1

6.8.0-101.101+fips1

6.8.0-106.106+fips1

6.8.0-107.107+fips1

6.8.0-110.110+fips2

6.8.0-111.111+fips1

6.8.0-116.116+fips1

6.8.0-124.124+fips1

6.8.0-134.134+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-fips-cloud-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-fips-headers-6.8.0-136",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-fips-lib-rust-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-fips-tools-6.8.0-136",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-image-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-image-hmac-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-136-fips",
            "binary_version":  "6.8.0-136.136+fips2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1064.72+fips1

Affected versions

6.*

6.8.0-1036.38+fips1

6.8.0-1037.39+fips1

6.8.0-1039.41+fips1

6.8.0-1040.42+fips1

6.8.0-1041.43+fips1

6.8.0-1042.45+fips1

6.8.0-1043.46+fips1

6.8.0-1044.47+fips1

6.8.0-1045.48+fips1

6.8.0-1046.49+fips1

6.8.0-1047.50+fips1

6.8.0-1048.51+fips1

6.8.0-1052.55+fips1

6.8.0-1053.56+fips1

6.8.0-1054.57+fips1

6.8.0-1055.58+fips1

6.8.0-1058.61+fips1

6.8.0-1060.63+fips1

6.8.0-1063.69+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-6.8.0-1064",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-6.8.0-1064",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1064-gcp-fips",
            "binary_version":  "6.8.0-1064.72+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS:16.04:LTS

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips%2Fxenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.4.0-1001.1

4.4.0-1002.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "crypto-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "dasd-extra-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "dasd-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "fat-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "fb-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "firewire-core-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "floppy-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "fs-core-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "fs-secondary-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "input-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "ipmi-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "irda-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "kernel-image-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-fips-headers-4.4.0-1002",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-fips-source-4.4.0",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-fips-tools-4.4.0-1002",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-headers-4.4.0-1002-fips",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-image-4.4.0-1002-fips",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-image-extra-4.4.0-1002-fips",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-image-hmac-4.4.0-1002-fips",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-tools-4.4.0-1002-fips",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "linux-udebs-fips",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "md-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "message-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "mouse-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "multipath-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "nfs-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "nic-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "nic-shared-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "nic-usb-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "parport-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "pata-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "pcmcia-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "plip-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "ppp-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "sata-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "scsi-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "serial-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "speakup-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "storage-core-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "usb-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "virtio-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        },
        {
            "binary_name":  "vlan-modules-4.4.0-1002-fips-di",
            "binary_version":  "4.4.0-1002.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS:18.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-2000.4

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-headers-4.15.0-2000",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-aws-fips-tools-4.15.0-2000",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-headers-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-modules-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        },
        {
            "binary_name":  "linux-tools-4.15.0-2000-aws-fips",
            "binary_version":  "4.15.0-2000.4"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-4.15.0-1002",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-azure-fips-headers-4.15.0-1002",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-azure-fips-tools-4.15.0-1002",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1002-azure-fips",
            "binary_version":  "4.15.0-1002.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1011.12

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-fips-headers-4.15.0-1011",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-fips-tools-4.15.0-1011",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-image-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-image-hmac-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1011-fips",
            "binary_version":  "4.15.0-1011.12"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips%2Fbionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1001.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-4.15.0-1001",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-4.15.0-1001",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1001-gcp-fips",
            "binary_version":  "4.15.0-1001.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:FIPS:20.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1021.21+fips2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-headers-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1021-aws-fips",
            "binary_version":  "5.4.0-1021.21+fips2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1022.22+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.4.0-1022",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.4.0-1022",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.4.0-1022",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1022-azure-fips",
            "binary_version":  "5.4.0-1022.22+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1007.8

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-fips-headers-5.4.0-1007",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-fips-tools-5.4.0-1007",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1007-fips",
            "binary_version":  "5.4.0-1007.8"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips%2Ffocal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1021.21+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.4.0-1021",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1021-gcp-fips",
            "binary_version":  "5.4.0-1021.21+fips1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:Realtime:22.04:LTS

linux-intel-iot-realtime

Package

Name: linux-intel-iot-realtime
Purl: pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1021.26

5.15.0-1022.27

5.15.0-1023.28

5.15.0-1024.29

5.15.0-1028.33

5.15.0-1033.35

5.15.0-1034.36

5.15.0-1035.37

5.15.0-1036.38

5.15.0-1037.39

5.15.0-1038.40

5.15.0-1039.41

5.15.0-1040.42

5.15.0-1041.43

5.15.0-1042.44

5.15.0-1043.45

5.15.0-1044.46

5.15.0-1046.48

5.15.0-1047.49

5.15.0-1048.50

5.15.0-1049.51

5.15.0-1050.52

5.15.0-1053.55

5.15.0-1054.56

5.15.0-1055.57

5.15.0-1056.58

5.15.0-1057.59

5.15.0-1058.60

5.15.0-1059.61

5.15.0-1060.62

5.15.0-1061.63

5.15.0-1063.65

5.15.0-1064.66

5.15.0-1066.68

5.15.0-1071.73

5.15.0-1072.74

5.15.0-1073.75

5.15.0-1074.76

5.15.0-1075.77

5.15.0-1076.78

5.15.0-1077.79

5.15.0-1078.80

5.15.0-1079.81

5.15.0-1080.82

5.15.0-1081.83

5.15.0-1082.84

5.15.0-1083.85

5.15.0-1084.86

5.15.0-1085.87

5.15.0-1086.88

5.15.0-1087.89

5.15.0-1088.90

5.15.0-1089.91

5.15.0-1090.92

5.15.0-1091.93

5.15.0-1092.94

5.15.0-1093.95

5.15.0-1094.96

5.15.0-1096.98

5.15.0-1097.99

5.15.0-1098.100

5.15.0-1099.101

5.15.0-1100.102

5.15.0-1101.103

5.15.0-1103.105

5.15.0-1104.106

5.15.0-1105.107

5.15.0-1106.108

5.15.0-1107.109

5.15.0-1108.110

5.15.0-1109.111

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-5.15.0-1109",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-headers-5.15.0-1109",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-5.15.0-1109",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-common",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-host",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1006.6

5.15.0-1007.7

5.15.0-1009.9

5.15.0-1011.11

5.15.0-1014.14

5.15.0-1015.15

5.15.0-1016.16

5.15.0-1019.19

5.15.0-1020.20

5.15.0-1021.21

5.15.0-1022.22

5.15.0-1024.25

5.15.0-1025.28

5.15.0-1028.31

5.15.0-1029.32

5.15.0-1030.33

5.15.0-1032.35

5.15.0-1033.36

5.15.0-1034.37

5.15.0-1036.39

5.15.0-1037.40

5.15.0-1038.41

5.15.0-1039.42

5.15.0-1040.45

5.15.0-1041.46

5.15.0-1042.47

5.15.0-1043.48

5.15.0-1044.49

5.15.0-1045.50

5.15.0-1046.52

5.15.0-1048.54

5.15.0-1049.55

5.15.0-1050.56

5.15.0-1051.57

5.15.0-1052.58

5.15.0-1053.59

5.15.0-1054.60

5.15.0-1055.62

5.15.0-1056.63

5.15.0-1057.64

5.15.0-1058.66

5.15.0-1061.69

5.15.0-1062.70

5.15.0-1063.71

5.15.0-1064.72

5.15.0-1065.73

5.15.0-1066.74

5.15.0-1067.75

5.15.0-1068.76

5.15.0-1069.77

5.15.0-1070.78

5.15.0-1071.79

5.15.0-1072.80

5.15.0-1073.81

5.15.0-1074.82

5.15.0-1075.83

5.15.0-1076.84

5.15.0-1077.85

5.15.0-1078.86

5.15.0-1079.87

5.15.0-1080.88

5.15.0-1081.89

5.15.0-1082.91

5.15.0-1083.92

5.15.0-1084.93

5.15.0-1085.94

5.15.0-1086.95

5.15.0-1087.96

5.15.0-1088.97

5.15.0-1089.98

5.15.0-1090.99

5.15.0-1091.100

5.15.0-1092.101

5.15.0-1093.102

5.15.0-1094.103

5.15.0-1095.104

5.15.0-1096.105

5.15.0-1097.106

5.15.0-1098.107

5.15.0-1099.108

5.15.0-1100.109

5.15.0-1102.111

5.15.0-1103.112

5.15.0-1104.113

5.15.0-1105.114

5.15.0-1107.116

5.15.0-1108.117

5.15.0-1110.119

5.15.0-1111.120

5.15.0-1112.121

5.15.0-1113.122

5.15.0-1114.123

5.15.0-1115.124

5.15.0-1116.125

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1116",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1116",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1116",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime-6.8

Package

Name: linux-realtime-6.8
Purl: pkg:deb/ubuntu/linux-realtime-6.8?arch=source&distro=realtime%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.1-1056.57~22.04.2

Affected versions

6.*

6.8.1-1004.4~22.04.1

6.8.1-1005.5~22.04.2

6.8.1-1006.6~22.04.1

6.8.1-1007.7~22.04.1

6.8.1-1008.8~22.04.1

6.8.1-1009.9~22.04.1

6.8.1-1010.10~22.04.1

6.8.1-1011.11~22.04.1

6.8.1-1012.12~22.04.1

6.8.1-1013.14~22.04.1

6.8.1-1014.15~22.04.1

6.8.1-1015.16~22.04.1

6.8.1-1016.17~22.04.1

6.8.1-1017.18~22.04.1

6.8.1-1018.19~22.04.1

6.8.1-1019.20~22.04.1

6.8.1-1020.21~22.04.1

6.8.1-1021.22~22.04.1

6.8.1-1022.23~22.04.1

6.8.1-1023.24~22.04.1

6.8.1-1024.25~22.04.1

6.8.1-1025.26~22.04.1

6.8.1-1026.27~22.04.1

6.8.1-1030.31~22.04.1

6.8.1-1031.32~22.04.1

6.8.1-1034.35~22.04.1

6.8.1-1035.36~22.04.1

6.8.1-1036.37~22.04.1

6.8.1-1037.38~22.04.1

6.8.1-1038.39~22.04.1

6.8.1-1039.40~22.04.1

6.8.1-1040.41~22.04.1

6.8.1-1041.42~22.04.1

6.8.1-1042.43~22.04.1

6.8.1-1045.46~22.04.1

6.8.1-1046.47~22.04.2

6.8.1-1047.48~22.04.1

6.8.1-1048.49~22.04.1

6.8.1-1051.52~22.04.1

6.8.1-1052.53~22.04.1

6.8.1-1055.56~22.04.1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-realtime-6.8-cloud-tools-6.8.1-1056",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-realtime-6.8-headers-6.8.1-1056",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-realtime-6.8-tools-6.8.1-1056",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57~22.04.2"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

Ubuntu:Pro:Realtime:24.04:LTS

linux-raspi-realtime

Package

Name: linux-raspi-realtime
Purl: pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-2050.52

Affected versions

6.*

6.7.0-2001.1

6.8.0-2001.1

6.8.0-2002.2

6.8.0-2004.4

6.8.0-2005.5

6.8.0-2006.6

6.8.0-2007.7

6.8.0-2008.8

6.8.0-2009.9

6.8.0-2010.10

6.8.0-2011.11

6.8.0-2012.12

6.8.0-2013.14

6.8.0-2014.15

6.8.0-2015.16

6.8.0-2016.17

6.8.0-2017.18

6.8.0-2018.19

6.8.0-2019.20

6.8.0-2022.23

6.8.0-2023.24

6.8.0-2024.25

6.8.0-2025.26

6.8.0-2026.27

6.8.0-2028.29

6.8.0-2029.30

6.8.0-2030.31

6.8.0-2031.32

6.8.0-2032.33

6.8.0-2033.34

6.8.0-2034.35

6.8.0-2035.36

6.8.0-2036.37

6.8.0-2037.38

6.8.0-2038.39

6.8.0-2040.41

6.8.0-2041.42

6.8.0-2042.43

6.8.0-2043.44

6.8.0-2045.46

6.8.0-2046.47

6.8.0-2049.50

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2050-raspi-realtime",
            "binary_version":  "6.8.0-2050.52"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2050-raspi-realtime",
            "binary_version":  "6.8.0-2050.52"
        },
        {
            "binary_name":  "linux-image-6.8.0-2050-raspi-realtime",
            "binary_version":  "6.8.0-2050.52"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2050-raspi-realtime",
            "binary_version":  "6.8.0-2050.52"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2050",
            "binary_version":  "6.8.0-2050.52"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2050",
            "binary_version":  "6.8.0-2050.52"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2050-raspi-realtime",
            "binary_version":  "6.8.0-2050.52"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.1-1056.57

Affected versions

6.*

6.8.0-1008.19

6.8.1-1001.1

6.8.1-1002.2

6.8.1-1003.3

6.8.1-1004.4

6.8.1-1005.5

6.8.1-1006.6

6.8.1-1007.7

6.8.1-1008.8

6.8.1-1009.9

6.8.1-1010.10

6.8.1-1011.11

6.8.1-1012.12

6.8.1-1013.14

6.8.1-1014.15

6.8.1-1015.16

6.8.1-1016.17

6.8.1-1017.18

6.8.1-1018.19

6.8.1-1019.20

6.8.1-1020.21

6.8.1-1021.22

6.8.1-1022.23

6.8.1-1023.24

6.8.1-1024.25

6.8.1-1025.26

6.8.1-1026.27

6.8.1-1030.31

6.8.1-1031.32

6.8.1-1033.34

6.8.1-1034.35

6.8.1-1035.36

6.8.1-1036.37

6.8.1-1037.38

6.8.1-1038.39

6.8.1-1039.40

6.8.1-1040.41

6.8.1-1041.42

6.8.1-1042.43

6.8.1-1045.46

6.8.1-1046.47

6.8.1-1047.48

6.8.1-1048.49

6.8.1-1051.52

6.8.1-1052.53

6.8.1-1055.56

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.8.1-1056",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-realtime-headers-6.8.1-1056",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-realtime-tools-6.8.1-1056",
            "binary_version":  "6.8.1-1056.57"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1056-realtime",
            "binary_version":  "6.8.1-1056.57"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime-6.14

Package

Name: linux-realtime-6.14
Purl: pkg:deb/ubuntu/linux-realtime-6.14?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.14.0-1003.3~24.04.3

6.14.0-1010.10~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

6.14.0-1015.15~24.04.1

6.14.0-1016.16~24.04.1

6.14.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-cloud-tools-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-headers-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-tools-6.14.0-1017",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1017-realtime",
            "binary_version":  "6.14.0-1017.17~24.04.1"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"

linux-realtime-6.17

Package

Name: linux-realtime-6.17
Purl: pkg:deb/ubuntu/linux-realtime-6.17?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1004.5~24.04.2

6.17.0-1006.7~24.04.1

6.17.0-1008.9~24.04.1

6.17.0-1009.10~24.04.1

6.17.0-1010.11~24.04.1

6.17.0-1011.12~24.04.1

6.17.0-1013.15~24.04.1

6.17.0-1014.16~24.04.1

6.17.0-1017.19~24.04.1

6.17.0-1018.20~24.04.1

6.17.0-1019.22

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-modules-extra-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-realtime-6.17-cloud-tools-6.17.0-1019",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-realtime-6.17-headers-6.17.0-1019",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-realtime-6.17-tools-6.17.0-1019",
            "binary_version":  "6.17.0-1019.22"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1019-realtime",
            "binary_version":  "6.17.0-1019.22"
        }
    ],
    "priority_reason":  "The NULL tpg_nexus state is produced exclusively by privileged administrative configfs operations (unlinking all LUNs so tpg_port_count reaches 0, then writing \"NULL\" to the nexus attribute of a root-owned configfs tree mountable only with CAP_SYS_ADMIN in the initial namespace), an event the USB-host attacker can neither invoke nor influence. Any purely local exploitation path therefore requires uid 0 / CAP_SYS_ADMIN to both configure the f_tcm gadget and tear down the nexus."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-43424.json"