USN-8149-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8149-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8149-1
Upstream
Related
Published
2026-04-02T18:31:30Z
Modified
2026-04-07T12:14:31.011488308Z
Summary
linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17, linux-hwe-6.17, linux-realtime vulnerabilities
Details

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Netfilter; - Network traffic control; (CVE-2026-23060, CVE-2026-23074, CVE-2026-23111)

References

Affected packages

Ubuntu:24.04:LTS
linux-aws-6.17

Package

Name
linux-aws-6.17
Purl
pkg:deb/ubuntu/linux-aws-6.17@6.17.0-1010.10~24.04.1?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1010.10~24.04.1

Affected versions

6.*
6.17.0-1005.5~24.04.2
6.17.0-1007.7~24.04.1
6.17.0-1009.9~24.04.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-aws-6.17-cloud-tools-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-aws-6.17-headers-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-aws-6.17-tools-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-buildinfo-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-buildinfo-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-cloud-tools-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-cloud-tools-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-headers-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-headers-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-image-unsigned-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-image-unsigned-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-extra-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-extra-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-tools-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-tools-6.17.0-1010-aws-64k"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"
linux-gcp-6.17

Package

Name
linux-gcp-6.17
Purl
pkg:deb/ubuntu/linux-gcp-6.17@6.17.0-1010.10~24.04.1?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1010.10~24.04.1

Affected versions

6.*
6.17.0-1004.4~24.04.3
6.17.0-1008.8~24.04.1
6.17.0-1009.9~24.04.3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-buildinfo-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-buildinfo-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-gcp-6.17-headers-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-gcp-6.17-tools-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-headers-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-headers-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-image-unsigned-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-image-unsigned-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-lib-rust-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-extra-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-modules-extra-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-tools-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10~24.04.1",
            "binary_name": "linux-tools-6.17.0-1010-gcp-64k"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"
cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:24.04:LTS"
}
linux-hwe-6.17

Package

Name
linux-hwe-6.17
Purl
pkg:deb/ubuntu/linux-hwe-6.17@6.17.0-20.20~24.04.1?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-20.20~24.04.1

Affected versions

6.*
6.17.0-14.14~24.04.1
6.17.0-19.19~24.04.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-buildinfo-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-buildinfo-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-cloud-tools-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-headers-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-headers-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-hwe-6.17-cloud-tools-6.17.0-20"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-hwe-6.17-headers-6.17.0-20"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-hwe-6.17-tools-6.17.0-20"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-image-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-image-unsigned-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-image-unsigned-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-lib-rust-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-extra-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-ipu6-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-ipu7-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-iwlwifi-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-usbio-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-modules-vision-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-tools-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20~24.04.1",
            "binary_name": "linux-tools-6.17.0-20-generic-64k"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"
Ubuntu:25.10
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux@6.17.0-20.20?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-20.20

Affected versions

6.*
6.14.0-15.15
6.15.0-3.3
6.15.0-4.4
6.16.0-13.13
6.16.0-16.16
6.17.0-3.3
6.17.0-4.4
6.17.0-5.5
6.17.0-6.6
6.17.0-7.7
6.17.0-8.8
6.17.0-12.12
6.17.0-14.14
6.17.0-19.19

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "7.7.0+6.17.0-20.20",
            "binary_name": "bpftool"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-bpf-dev"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-buildinfo-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-buildinfo-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-cloud-tools-6.17.0-20"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-cloud-tools-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-cloud-tools-common"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-headers-6.17.0-20"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-headers-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-headers-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-image-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-image-unsigned-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-image-unsigned-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-lib-rust-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-libc-dev"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-ipu6-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-ipu7-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-iwlwifi-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-usbio-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-modules-vision-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-perf"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-source-6.17.0"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-tools-6.17.0-20"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-tools-6.17.0-20-generic"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-tools-6.17.0-20-generic-64k"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-tools-common"
        },
        {
            "binary_version": "6.17.0-20.20",
            "binary_name": "linux-tools-host"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:25.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws@6.17.0-1010.10?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1010.10

Affected versions

6.*
6.14.0-1005.5
6.14.0-1007.7+25.10.2
6.16.0-1001.1
6.17.0-1001.1
6.17.0-1002.2
6.17.0-1003.3
6.17.0-1004.4
6.17.0-1005.5
6.17.0-1006.6
6.17.0-1007.7
6.17.0-1009.9

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-aws-cloud-tools-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-aws-headers-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-aws-tools-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-buildinfo-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-buildinfo-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-cloud-tools-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-cloud-tools-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-headers-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-headers-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-image-unsigned-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-image-unsigned-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-modules-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-modules-6.17.0-1010-aws-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-tools-6.17.0-1010-aws"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-tools-6.17.0-1010-aws-64k"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:25.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp@6.17.0-1010.10?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1010.10

Affected versions

6.*
6.14.0-1006.6
6.14.0-1009.9+25.10.1
6.16.0-1001.1
6.17.0-1001.1
6.17.0-1002.2
6.17.0-1003.3
6.17.0-1004.4
6.17.0-1005.5
6.17.0-1006.6
6.17.0-1007.7
6.17.0-1009.9

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-buildinfo-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-buildinfo-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-gcp-headers-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-gcp-tools-6.17.0-1010"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-headers-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-headers-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-image-unsigned-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-image-unsigned-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-modules-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-modules-6.17.0-1010-gcp-64k"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-tools-6.17.0-1010-gcp"
        },
        {
            "binary_version": "6.17.0-1010.10",
            "binary_name": "linux-tools-6.17.0-1010-gcp-64k"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:25.10"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime@6.17.0-1009.10?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1009.10

Affected versions

6.*
6.14.0-1002.2
6.17.0-1001.2
6.17.0-1002.3
6.17.0-1003.4
6.17.0-1004.5
6.17.0-1005.6
6.17.0-1006.7
6.17.0-1008.9

Ecosystem specific 

{
    "binaries": [
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-buildinfo-6.17.0-1009-realtime"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-cloud-tools-6.17.0-1009-realtime"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-headers-6.17.0-1009-realtime"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-image-unsigned-6.17.0-1009-realtime"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-modules-6.17.0-1009-realtime"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-modules-iwlwifi-6.17.0-1009-realtime"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-realtime-cloud-tools-6.17.0-1009"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-realtime-headers-6.17.0-1009"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-realtime-tools-6.17.0-1009"
        },
        {
            "binary_version": "6.17.0-1009.10",
            "binary_name": "linux-tools-6.17.0-1009-realtime"
        }
    ],
    "availability": "No subscription required"
}

Database specific

cves_map 
{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "id": "CVE-2026-23060",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23074",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23111",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ]
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8149-1.json"