# Multiple Ubuntu Linux kernel vulnerabilities patched

Published: 2026-08-14 · Severity: high
Canonical: https://vorant.io/reports/6a0a339a-d251-5ae6-8950-33f7fdbfd13f/multiple-ubuntu-linux-kernel-vulnerabilities-patched
Vorant's rating weighs the evidence in the report: confirmed exploitation, victims claimed, CVSS and EPSS, and how many sources agree. It rates the report, not your assets.

> Multiple Linux kernel vulnerabilities affecting Ubuntu 14.04 ESM through 26.04 LTS enable privilege escalation and remote denial of service.

Source: cert.ssi.gouv.fr — https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1027

## What to check

- Applies to: The 39 CVEs named below. Whether you run an affected version is not assessed: check the versions the source lists.
- Exploitation: A public exploit is recorded for CVE-2026-43284 (weaponized); no exploitation in the wild is recorded.

CERT-FR has published an advisory on multiple vulnerabilities discovered in the Linux kernel used by Ubuntu. The affected versions span from Ubuntu 14.04 ESM through the latest Ubuntu 26.04 LTS release. The vulnerabilities permit attackers to achieve privilege escalation, trigger remote denial of service conditions, and exploit unspecified security issues. Ubuntu has released coordinated security updates across ten distinct USN bulletins issued on 12-13 August 2026, addressing the kernel flaws across the supported release lifecycle. Defenders running any affected Ubuntu version should prioritize applying the available kernel patches, which are detailed in the Ubuntu Security Notices referenced in the advisory documentation.

## Mentioned in this report

- Vulnerabilities: CVE-2021-47117, CVE-2021-47202, CVE-2021-47354, CVE-2021-47378, CVE-2023-52646, CVE-2024-38612, CVE-2024-56643, CVE-2025-27558, CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31405, CVE-2026-31414, CVE-2026-31448, CVE-2026-31501, CVE-2026-31589, CVE-2026-31607, CVE-2026-31633, CVE-2026-31636, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668, CVE-2026-31682, CVE-2026-31685, CVE-2026-31705, CVE-2026-43011, CVE-2026-43037, CVE-2026-43038, CVE-2026-43083, CVE-2026-43197, CVE-2026-43198, CVE-2026-43284 (weaponized), CVE-2026-43378, CVE-2026-43379, CVE-2026-43383, CVE-2026-43407, CVE-2026-43414

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1027

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/6a0a339a-d251-5ae6-8950-33f7fdbfd13f/multiple-ubuntu-linux-kernel-vulnerabilities-patched.
In the app the same report carries live profiles of the CVEs it names. The paid plans add the security research and news reporting the free tier leaves out. Slack alerts on the vendors, sectors and countries a reader follows come with the paid plans too. A new account starts with a three-day trial, no card: https://vorant.io/signup