Loading story…
Canonical released Ubuntu 24.04.5 LTS, refreshed installation media for the Noble Numbat long-term-support release that incorporates accumulated security updates and fixes for high-severity defects. The update reduces the number of patches required after fresh installations; existing Ubuntu 24.04 systems receive the same fixes through standard software updates or supported upgrade paths.
The point release also updates nine Ubuntu flavors, including Kubuntu, Xubuntu, Ubuntu MATE, Ubuntu Studio, and Edubuntu. Administrators needing CVE- or bug-level compliance evidence should consult Canonical's detailed release notes, as the primary announcement does not enumerate affected vulnerabilities; Ubuntu Desktop, Server, Cloud, and Core retain five years of support from the original 24.04 LTS release, while flavors have three years.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
Canonical released Ubuntu 24.04.5 LTS installation media for Noble Numbat, bundling security updates, stability fixes, and fixes for high-severity bugs. Nine additional Ubuntu flavors, including Kubuntu, Xubuntu, Ubuntu MATE, Ubuntu Studio, and Edubuntu, were also updated to 24.04.5.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
4 references tracked. Mallory keeps watching after this page renders.
cryptika.com
Open sourcecybersecuritynews.com
Open sourcehelpnetsecurity.com
Open sourcelists.ubuntu.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ubuntu published multiple security notices to fix **Linux kernel vulnerabilities** affecting a broad range of releases, including Ubuntu `14.04 LTS`, `16.04 LTS`, `18.04 LTS`, `20.04 LTS`, `22.04 LTS`, `24.04 LTS`, and `25.10`. The Canadian Centre for Cyber Security highlighted the advisories in notices `AV26-264` and `AV26-296`, covering Ubuntu security updates released over consecutive weekly periods. The Cyber Centre urged users and administrators to review the referenced Ubuntu Security Notices and apply the required updates to affected systems. The advisories describe defensive patching activity for kernel flaws across supported Ubuntu versions and do not report a named threat actor, ransomware operation, or confirmed active exploitation campaign.
Jul 2, 2026
Ubuntu published security notices addressing **Linux kernel vulnerabilities** affecting multiple supported releases, and the Canadian Centre for Cyber Security highlighted the advisories in alert `AV26-686`. The notices apply to **Ubuntu 18.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS**, indicating that several generations of desktop and server deployments require attention. The Cyber Centre urged administrators and users to review the linked **Ubuntu Security Notices** and install the required updates to remediate the flaws. The advisory points organizations to Ubuntu's official security notice portal for release-specific patches and mitigation details, underscoring the need to prioritize kernel updates across affected systems.
Jul 13, 2026
The Linux kernel project published an unusually large batch of **440 vulnerability advisories** over a two-day period, covering flaws across subsystems including DRM/AMDGPU, KVM, RDMA, Bluetooth, Wi‑Fi, SMB, Btrfs, ext4, SPI, media, IPMI, and networking. The disclosures describe memory-safety bugs, race conditions, information leaks, bounds-check failures, integer overflows, `NULL` dereferences, out-of-bounds reads, and use-after-free conditions, with reporting highlighting `ksmbd`, TIPC, and KVM/SEV as areas of potentially higher risk. Most issues were reported after fixes were available or already merged into stable kernel branches, though many advisories had not yet received CVSS scores. Ubuntu subsequently published security notices to address Linux kernel vulnerabilities across multiple supported releases, and the Canadian Centre for Cyber Security issued advisory **AV26-717** urging organizations to review the notices and apply updates. The affected Ubuntu versions listed were **14.04 LTS, 16.04 LTS, 20.04 LTS, 24.04 LTS, and 25.10**, underscoring the broad downstream impact of the kernel disclosure wave and the need for administrators to prioritize distribution-provided kernel patches, especially in environments exposing SMB services, TIPC, or SEV-enabled KVM systems.
Jul 27, 2026