Loading story…
Ubuntu published security notices addressing Linux kernel vulnerabilities affecting multiple supported releases, and the Canadian Centre for Cyber Security highlighted the advisories in alert AV26-686. The notices apply to Ubuntu 18.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS, indicating that several generations of desktop and server deployments require attention.
The Cyber Centre urged administrators and users to review the linked Ubuntu Security Notices and install the required updates to remediate the flaws. The advisory points organizations to Ubuntu's official security notice portal for release-specific patches and mitigation details, underscoring the need to prioritize kernel updates across affected systems.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Between July 6 and 12, 2026, Ubuntu published security notices addressing Linux kernel vulnerabilities affecting supported Ubuntu releases including 18.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ubuntu published multiple security notices to fix **Linux kernel vulnerabilities** affecting a broad range of releases, including Ubuntu `14.04 LTS`, `16.04 LTS`, `18.04 LTS`, `20.04 LTS`, `22.04 LTS`, `24.04 LTS`, and `25.10`. The Canadian Centre for Cyber Security highlighted the advisories in notices `AV26-264` and `AV26-296`, covering Ubuntu security updates released over consecutive weekly periods. The Cyber Centre urged users and administrators to review the referenced Ubuntu Security Notices and apply the required updates to affected systems. The advisories describe defensive patching activity for kernel flaws across supported Ubuntu versions and do not report a named threat actor, ransomware operation, or confirmed active exploitation campaign.
Jul 2, 2026
The Linux kernel project published an unusually large batch of **440 vulnerability advisories** over a two-day period, covering flaws across subsystems including DRM/AMDGPU, KVM, RDMA, Bluetooth, Wi‑Fi, SMB, Btrfs, ext4, SPI, media, IPMI, and networking. The disclosures describe memory-safety bugs, race conditions, information leaks, bounds-check failures, integer overflows, `NULL` dereferences, out-of-bounds reads, and use-after-free conditions, with reporting highlighting `ksmbd`, TIPC, and KVM/SEV as areas of potentially higher risk. Most issues were reported after fixes were available or already merged into stable kernel branches, though many advisories had not yet received CVSS scores. Ubuntu subsequently published security notices to address Linux kernel vulnerabilities across multiple supported releases, and the Canadian Centre for Cyber Security issued advisory **AV26-717** urging organizations to review the notices and apply updates. The affected Ubuntu versions listed were **14.04 LTS, 16.04 LTS, 20.04 LTS, 24.04 LTS, and 25.10**, underscoring the broad downstream impact of the kernel disclosure wave and the need for administrators to prioritize distribution-provided kernel patches, especially in environments exposing SMB services, TIPC, or SEV-enabled KVM systems.
Jul 26, 2026
The Canadian Centre for Cyber Security issued multiple advisories urging organizations to apply vendor patches released between **February 16–22, 2026**, including updates addressing **Linux kernel vulnerabilities** impacting **Ubuntu** (16.04 LTS through 25.10) and **Red Hat** platforms (including *RHEL* and related offerings). The advisories emphasize routine but potentially high-impact exposure from unpatched kernel flaws across widely deployed enterprise and server environments, and direct administrators to review upstream vendor notices and deploy the corresponding updates. Separate Cyber Centre advisories also flagged patch requirements outside the Linux kernel: Microsoft released an update for **Microsoft Edge Stable** to remediate vulnerabilities in versions prior to `145.0.3800.70`, IBM published security advisories covering multiple products (including *Aspera Enterprise WebApps*, *Cloud Pak System*, *Storage Defender*, and others), and CISA issued ICS advisories for vulnerabilities across several industrial and IoT/OT products (including **Delta Electronics**, **GE Vernova**, **Honeywell CCTV**, **Siemens Simcenter**, and others) with recommended mitigations and updates where available. A Linux 7.0 release-candidate feature article is not a security advisory and does not materially relate to the patch/vulnerability notices in the other items.
Jun 29, 2026