Changeflow GovPing Data Privacy & Cybersecurity Ubuntu Linux Kernel Vulnerabilities Identified ...
Priority review Notice Added Final

Ubuntu Linux Kernel Vulnerabilities Identified by CERT-FR

Favicon for www.cert.ssi.gouv.fr CERT-FR Security Advisories
Published March 20th, 2026
Detected March 20th, 2026
Email

Summary

CERT-FR has issued a notice regarding multiple vulnerabilities discovered in the Linux kernel used by Ubuntu. These vulnerabilities could allow attackers to gain elevated privileges, compromise data confidentiality, and impact data integrity. Users are advised to consult Ubuntu's security bulletins for patch information.

View original document View source feed page

What changed

CERT-FR, the French national cybersecurity agency, has issued an advisory (CERTFR-2026-AVI-0331) detailing multiple vulnerabilities found in the Linux kernel across various Ubuntu versions, including Ubuntu 18.04 ESM, 20.04 ESM, 22.04 LTS, 24.04 LTS, and 25.10. The advisory highlights that some of these vulnerabilities can be exploited by attackers to achieve privilege escalation, compromise data confidentiality, and affect data integrity.

Affected users and IT security professionals must refer to the specific Ubuntu Security Notices (USNs) referenced in the advisory for detailed information on the vulnerabilities and to apply the necessary patches. Prompt application of these updates is crucial to mitigate the risks of data breaches, unauthorized access, and denial-of-service conditions.

What to do next

  1. Review Ubuntu Security Notices (USN-8094-1 through USN-8107-1) for specific vulnerabilities.
  2. Apply relevant security patches provided by Ubuntu to affected systems.
  3. Monitor for further advisories from CERT-FR and Ubuntu regarding kernel security.

Source document (simplified)

Premier Ministre S.G.D.S.N

Agence nationale
de la sécurité des
systèmes d'information

Paris, le 20 mars 2026 N° CERTFR-2026-AVI-0331 Affaire suivie par: CERT-FR

Avis du CERT-FR

Objet: Multiples vulnérabilités dans le noyau Linux d'Ubuntu

Gestion du document

| Référence | CERTFR-2026-AVI-0331 |
| Titre | Multiples vulnérabilités dans le noyau Linux d'Ubuntu |
| Date de la première version | 20 mars 2026 |
| Date de la dernière version | 20 mars 2026 |
| Source(s) | Bulletin de sécurité Ubuntu USN-8094-1 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8095-1 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8095-2 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8096-1 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8096-2 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8098-1 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8100-1 du 16 mars 2026
Bulletin de sécurité Ubuntu USN-8094-2 du 17 mars 2026
Bulletin de sécurité Ubuntu USN-8095-3 du 17 mars 2026
Bulletin de sécurité Ubuntu USN-8096-3 du 17 mars 2026
Bulletin de sécurité Ubuntu USN-8096-4 du 17 mars 2026
Bulletin de sécurité Ubuntu USN-8098-2 du 17 mars 2026
Bulletin de sécurité Ubuntu USN-8098-3 du 18 mars 2026
Bulletin de sécurité Ubuntu USN-8107-1 du 18 mars 2026 |
Une gestion de version détaillée se trouve à la fin de ce document.

Risques

  • Atteinte à l'intégrité des données
  • Atteinte à la confidentialité des données
  • Contournement de la politique de sécurité
  • Déni de service
  • Non spécifié par l'éditeur
  • Élévation de privilèges

Systèmes affectés

  • Ubuntu 18.04 ESM
  • Ubuntu 20.04 ESM
  • Ubuntu 22.04 LTS
  • Ubuntu 24.04 LTS
  • Ubuntu 25.10

Résumé

De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Documentation

Gestion détaillée du document

  1. le 20 mars 2026 Version initiale

Named provisions

Risques Systèmes affectés Résumé Solutions Documentation

Related changes

Favicon for www.cert.ssi.gouv.fr VMware Products Vulnerabilities Advisory
Priority review Mar 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr IBM Products Vulnerabilities
Priority review Mar 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for www.cert.ssi.gouv.fr Multiple vulnerabilities in Elastic products
Priority review Mar 20, 2026 • CERT-FR Security Advisories • Data Privacy & Cybersecurity
Favicon for changeflow.com Bluefin Payment Systems Vaultless Tokenization and Encryption System
Routine Mar 23, 2026 • ChangeBridge: EPO Bulletin - Business Methods (G06Q) • Banking & Finance
Favicon for changeflow.com USPTO Patent Application for Digital Identification Creation and Use
Routine Mar 23, 2026 • ChangeBridge: Patent Apps - Business Methods (G06Q) • Banking & Finance
Favicon for changeflow.com USPTO Machine Learning DNS Monitoring Patent Application
Routine Mar 23, 2026 • ChangeBridge: Patent Apps - Business Methods (G06Q) • Banking & Finance

Source

Favicon for www.cert.ssi.gouv.fr
CERT-FR Security Advisories cert.ssi.gouv.fr/avis
Data Privacy & Cybersecurity
Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
CERT-FR
Published
March 20th, 2026
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
CERTFR-2026-AVI-0331

Who this affects

Industry sector
5112 Software & Technology
Activity scope
Vulnerability Management System Patching
Geographic scope
France FR

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Vulnerability Management Operating System Security

Browse Categories

Agriculture & Food Safety 61 Banking & Finance 228 Consumer Protection 40 Courts & Legal 312 Data Privacy & Cybersecurity 62 Defense & National Security 48 Education 20 Energy 104 Environment 83 Government & Legislation 258 Healthcare 131 Housing 15 Immigration 9 Insurance 55 Labor & Employment 110 Legal & Courts 1 Pharma & Drug Safety 95 Securities & Markets 77 Tax 62 Telecom & Technology 46 Trade & Sanctions 124 Transportation 56

Get Data Privacy & Cybersecurity alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when CERT-FR Security Advisories publishes new changes.

Free. Unsubscribe anytime.