# Multiple Linux kernel flaws in Ubuntu affect privilege escalation

Published: 2026-09-11 · Severity: routine
Canonical: https://vorant.io/reports/74589b61-29dd-5c97-b248-e481f986b0ee/multiple-linux-kernel-flaws-in-ubuntu-affect-privilege-escalation

> Multiple vulnerabilities in Ubuntu Linux kernel enable privilege escalation, denial of service, and data integrity attacks across versions 14.04 through 26.04.

CERT-FR has released a security advisory covering multiple vulnerabilities in the Linux kernel across multiple Ubuntu releases, including ESM (Extended Security Maintenance) versions 14.04, 16.04, 18.04, 20.04 and current LTS releases 22.04, 24.04, and 26.04 LTS. The vulnerabilities enable attackers to achieve privilege escalation, trigger remote denial of service conditions, and compromise data integrity. Ubuntu has published eight separate security bulletins (USN-8714-2, USN-8725-1 through USN-8730-1, and USN-8748-1) dated September 2026 addressing these kernel issues. Organizations running Ubuntu systems should prioritize applying kernel updates from the referenced security notices to mitigate these risks.

## Mentioned in this report

- Vulnerabilities: CVE-2022-50401, CVE-2025-10263, CVE-2025-54518, CVE-2025-71289, CVE-2026-23469, CVE-2026-31420, CVE-2026-31486, CVE-2026-31560, CVE-2026-43071, CVE-2026-43490, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496, CVE-2026-43497, CVE-2026-43498, CVE-2026-43502, CVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45837, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-46104, CVE-2026-46105, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46109, CVE-2026-46110, CVE-2026-46111, CVE-2026-46112

Source reporting: https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-1162

---

This is the free public brief from Vorant Threat Intelligence. When citing, attribute "Vorant" and link https://vorant.io/reports/74589b61-29dd-5c97-b248-e481f986b0ee/multiple-linux-kernel-flaws-in-ubuntu-affect-privilege-escalation.
In the app the same report carries its extracted indicators, its detections (Splunk SPL already written, plus Elastic and Microsoft KQL where they apply), live profiles of the actors and CVEs it names, and the vendor research on the same campaign. Slack alerts fire on the vendors, sectors and countries a reader follows. A new account starts with three days of all of it, no card: https://vorant.io/signup