USN-8659-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-8659-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-8659-1
Upstream
Related
Published
2026-08-20T22:13:42Z
Modified
2026-08-21T05:44:35Z
Summary
linux, linux-aws, linux-aws-7.0, linux-ibm, linux-oem-7.0, linux-raspi, linux-realtime vulnerability
Details

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystems:

  • Open vSwitch;
References

Affected packages

Ubuntu:24.04:LTS
linux-aws-7.0

Package

Name
linux-aws-7.0
Purl
pkg:deb/ubuntu/linux-aws-7.0?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-1011.11~24.04.1

Affected versions

7.*
7.0.0-1007.7~24.04.2
7.0.0-1009.9~24.04.1
7.0.0-1010.10~24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-7.0-cloud-tools-7.0.0-1011",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-aws-7.0-headers-7.0.0-1011",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-aws-7.0-tools-7.0.0-1011",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-headers-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-headers-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-modules-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-modules-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-tools-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11~24.04.1"
        },
        {
            "binary_name": "linux-tools-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11~24.04.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:24.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"
Ubuntu:26.04:LTS
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-30.30

Affected versions

6.*
6.17.0-5.5
6.17.0-6.6
6.17.0-8.8
6.18.0-8.8
6.18.0-9.9
6.19.0-3.3
6.19.0-5.5
6.19.0-6.6
6.19.0-9.9
7.*
7.0.0-7.7
7.0.0-10.10
7.0.0-12.12
7.0.0-13.13
7.0.0-14.14
7.0.0-15.15
7.0.0-22.22
7.0.0-27.27
7.0.0-28.28
7.0.0-29.29

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "bpftool",
            "binary_version": "7.7.0+7.0.0-30.30"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-30-generic-64k",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-30",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-headers-7.0.0-30",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-headers-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-headers-7.0.0-30-generic-64k",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-image-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-30-generic-64k",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-lib-rust-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-modules-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-modules-7.0.0-30-generic-64k",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-perf",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-source-7.0.0",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-tools-7.0.0-30",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-tools-7.0.0-30-generic",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-tools-7.0.0-30-generic-64k",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-tools-common",
            "binary_version": "7.0.0-30.30"
        },
        {
            "binary_name": "linux-tools-host",
            "binary_version": "7.0.0-30.30"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-1011.11

Affected versions

6.*
6.17.0-1002.2
6.17.0-1003.3
6.19.0-1002.2
6.19.0-1003.3
7.*
7.0.0-1001.1
7.0.0-1003.3
7.0.0-1004.4
7.0.0-1006.6
7.0.0-1008.8
7.0.0-1009.9
7.0.0-1010.10

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-cloud-tools-7.0.0-1011",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-aws-headers-7.0.0-1011",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-aws-tools-7.0.0-1011",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-headers-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-headers-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-modules-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-modules-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-tools-7.0.0-1011-aws",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-tools-7.0.0-1011-aws-64k",
            "binary_version": "7.0.0-1011.11"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"
linux-ibm

Package

Name
linux-ibm
Purl
pkg:deb/ubuntu/linux-ibm?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-1012.12

Affected versions

6.*
6.19.0-1002.2
6.19.0-1003.3
7.*
7.0.0-1002.2
7.0.0-1004.4
7.0.0-1005.5
7.0.0-1007.7
7.0.0-1009.9
7.0.0-1010.10
7.0.0-1011.11

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-7.0.0-1012-ibm",
            "binary_version": "7.0.0-1012.12"
        },
        {
            "binary_name": "linux-headers-7.0.0-1012-ibm",
            "binary_version": "7.0.0-1012.12"
        },
        {
            "binary_name": "linux-ibm-headers-7.0.0-1012",
            "binary_version": "7.0.0-1012.12"
        },
        {
            "binary_name": "linux-ibm-tools-7.0.0-1012",
            "binary_version": "7.0.0-1012.12"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1012-ibm",
            "binary_version": "7.0.0-1012.12"
        },
        {
            "binary_name": "linux-modules-7.0.0-1012-ibm",
            "binary_version": "7.0.0-1012.12"
        },
        {
            "binary_name": "linux-tools-7.0.0-1012-ibm",
            "binary_version": "7.0.0-1012.12"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"
linux-oem-7.0

Package

Name
linux-oem-7.0
Purl
pkg:deb/ubuntu/linux-oem-7.0?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-1011.11

Affected versions

7.*
7.0.0-1005.5
7.0.0-1008.8
7.0.0-1009.9
7.0.0-1010.10

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-7.0.0-1011-oem",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-headers-7.0.0-1011-oem",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1011-oem",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-modules-7.0.0-1011-oem",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-oem-7.0-headers-7.0.0-1011",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-oem-7.0-tools-7.0.0-1011",
            "binary_version": "7.0.0-1011.11"
        },
        {
            "binary_name": "linux-tools-7.0.0-1011-oem",
            "binary_version": "7.0.0-1011.11"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"
linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-1017.17

Affected versions

6.*
6.17.0-1003.3
7.*
7.0.0-1004.4
7.0.0-1008.8
7.0.0-1009.9
7.0.0-1010.10
7.0.0-1011.11
7.0.0-1014.14
7.0.0-1015.15
7.0.0-1016.16

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-7.0.0-1017-raspi",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-1017-raspi-realtime",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-headers-7.0.0-1017-raspi",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-headers-7.0.0-1017-raspi-realtime",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-image-7.0.0-1017-raspi",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-image-7.0.0-1017-raspi-realtime",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-modules-7.0.0-1017-raspi",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-modules-7.0.0-1017-raspi-realtime",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-raspi-headers-7.0.0-1017",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-raspi-tools-7.0.0-1017",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-tools-7.0.0-1017-raspi",
            "binary_version": "7.0.0-1017.17"
        },
        {
            "binary_name": "linux-tools-7.0.0-1017-raspi-realtime",
            "binary_version": "7.0.0-1017.17"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=resolute

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-30.30.1

Affected versions

6.*
6.17.0-1001.2
7.*
7.0.0-10.10.3
7.0.0-12.12.1
7.0.0-14.14.1
7.0.0-22.22.1
7.0.0-27.27.1
7.0.0-28.28.1
7.0.0-29.29.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-7.0.0-30-realtime",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-buildinfo-7.0.0-30-realtime-64k",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-30-realtime",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-headers-7.0.0-30-realtime",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-headers-7.0.0-30-realtime-64k",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-30-realtime",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-30-realtime-64k",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-modules-7.0.0-30-realtime",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-modules-7.0.0-30-realtime-64k",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-7.0.0-30",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-realtime-headers-7.0.0-30",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-realtime-tools-7.0.0-30",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-tools-7.0.0-30-realtime",
            "binary_version": "7.0.0-30.30.1"
        },
        {
            "binary_name": "linux-tools-7.0.0-30-realtime-64k",
            "binary_version": "7.0.0-30.30.1"
        }
    ]
}

Database specific

cves_map 
{
    "cves": [
        {
            "id": "CVE-2026-64531",
            "severity": [
                {
                    "score": "CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
                    "type": "CVSS_V4"
                },
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        }
    ],
    "ecosystem": "Ubuntu:26.04:LTS"
}
source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8659-1.json"