Changeflow GovPing Data Privacy & Cybersecurity Multiple Ubuntu Linux Kernel Vulnerabilities In...
Priority review Notice Added Final

Multiple Ubuntu Linux Kernel Vulnerabilities Including Privilege Escalation Risk

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published
Detected
Email

Summary

CERT-FR published advisory CERTFR-2026-AVI-0495 on 24 April 2026 alerting to multiple vulnerabilities in the Ubuntu Linux kernel. Affected versions include Ubuntu 18.04 ESM, 20.04 ESM, 22.04 LTS, 24.04 LTS, and 25.10. The vulnerabilities expose systems to data integrity breaches, confidentiality breaches, denial of service, and privilege escalation attacks. The advisory consolidates 10 Ubuntu security bulletins (USN-8098-10 through USN-8204-1) covering 67 CVE references spanning 2021-2025.

“De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.”

— CERT-FR , verbatim from source
Why this matters

Organizations running Ubuntu servers or endpoints should prioritize reviewing their kernel versions against the affected releases (18.04 ESM, 20.04 ESM, 22.04 LTS, 24.04 LTS, 25.10) and cross-reference against the 67 CVE identifiers listed in the advisory to determine exposure. IT security teams should verify whether vendor patches from the referenced Ubuntu security notices (USN-8098-10 through USN-8204-1) have been applied, particularly for systems handling sensitive data or operating with elevated privileges where privilege escalation exploitation would be most damaging.

AI-drafted from the source document, validated against GovPing's analyst note standards . For the primary regulatory language, read the source document .
Published by CERT-FR on cert.ssi.gouv.fr . Detected, standardized, and enriched by GovPing. Review our methodology and editorial standards .

About this source

CERT-FR is the French government's national cybersecurity incident response team, run by the ANSSI. Their advisory feed publishes vulnerability disclosures, active exploitation warnings, and emergency patching guidance for software in widespread enterprise use: browsers, hypervisors, ERP systems, network equipment, file transfer products. Around 180 advisories a month. The advisories are written in French but cover the same vulnerability universe as CISA, NCSC-UK, BSI's CERT-Bund, and JPCERT, often hours earlier on European-headquartered vendors. Watch this if you patch enterprise software, run a SOC, write detection content, or track Schneider, Dassault, OVH, Atos, or any French-vendor advisory faster than English-language sources will surface it. GovPing publishes each advisory with the affected vendor, severity, and CERT-FR link.

View original document View source feed page

What changed

CERT-FR issued a consolidated security advisory covering multiple vulnerabilities discovered in the Ubuntu Linux kernel across five Ubuntu versions (18.04 ESM through 25.10). The vulnerabilities originate from ten separate Ubuntu security bulletins published between 20-24 April 2026, collectively addressing 67 CVE identifiers. The primary risks include privilege escalation (allowing attackers to gain elevated system access), data confidentiality breaches, data integrity compromise, and denial of service conditions.

Organizations running affected Ubuntu systems should treat this advisory as requiring immediate technical review. System administrators should consult the referenced Ubuntu security notices to identify specific patch availability and apply vendor-provided kernel updates. The advisory does not mandate specific remediation timelines but identifies that unpatched systems face active exploitation risk for privilege escalation attacks.

Archived snapshot

Apr 24, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 24 avril 2026 N° CERTFR-2026-AVI-0495 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans le noyau Linux d'Ubuntu

Gestion du document

| Référence | CERTFR-2026-AVI-0495 |
| Titre | Multiples vulnérabilités dans le noyau Linux d'Ubuntu |
| Date de la première version | 24 avril 2026 |
| Date de la dernière version | 24 avril 2026 |
| Source(s) | Bulletin de sécurité Ubuntu USN-8098-10 du 20 avril 2026
Bulletin de sécurité Ubuntu USN-8200-1 du 22 avril 2026
Bulletin de sécurité Ubuntu USN-8200-2 du 22 avril 2026
Bulletin de sécurité Ubuntu USN-8201-1 du 22 avril 2026
Bulletin de sécurité Ubuntu USN-8179-3 du 23 avril 2026
Bulletin de sécurité Ubuntu USN-8180-3 du 23 avril 2026
Bulletin de sécurité Ubuntu USN-8180-4 du 23 avril 2026
Bulletin de sécurité Ubuntu USN-8183-2 du 23 avril 2026
Bulletin de sécurité Ubuntu USN-8203-1 du 23 avril 2026
Bulletin de sécurité Ubuntu USN-8204-1 du 23 avril 2026
Bulletin de sécurité Ubuntu USN-8180-5 du 24 avril 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Atteinte à l'intégrité des données
  • Atteinte à la confidentialité des données
  • Déni de service
  • Non spécifié par l'éditeur
  • Élévation de privilèges

Systèmes affectés

  • Ubuntu 18.04 ESM
  • Ubuntu 20.04 ESM
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS
  • Ubuntu 25.10

Résumé

De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 24 avril 2026 Version initiale

Related changes

Favicon for www.cert.ssi.gouv.fr CERT-FR Advisory: Multiple SUSE Linux Kernel Vulnerabilities
Priority review Apr 24, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Spring Boot, 8 CVEs Identified
Urgent Apr 24, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple Vulnerabilities in Red Hat Linux Kernel Affecting Enterprise Products
Priority review Apr 24, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-FR Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-FR.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-FR
Published
April 24th, 2026
Instrument
Notice
Branch
Executive
Source language
fr
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Government agencies Technology companies
Industry sector
5112 Software & Technology
Activity scope
Vulnerability disclosure Kernel patch management
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Data Privacy Information Security

Browse Categories

Agriculture & Food Safety 84 AI Regulation 3 Banking & Finance 499 Consumer Protection 141 Courts & Legal 635 Data Privacy & Cybersecurity 150 Defense & National Security 52 Education 64 Energy 138 Environment 170 Gaming 2 Government & Legislation 522 Healthcare 15 Healthcare & Life Sciences 401 Immigration 11 Insurance 90 Labor & Employment 193 Pharma & Drug Safety 21 Professional Licensing 6 Real Estate & Housing 76 Securities & Markets 175 Tax 116 Telecom & Technology 56 Trade & Sanctions 169 Transportation 129

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!