Loading story…
Canonical is replacing Ubuntu's separate four-week Stable Release Update and two-week security-update schedules with overlapping two-week kernel release cycles, delivering a new kernel release each week. Each cycle spends its first week on package preparation, builds, smoke testing, and publication to the -proposed archive; certification, integration, and regression testing occur during the second week before general availability.
The change responds to a growing volume of Linux kernel CVEs, including vulnerabilities identified through AI-assisted bug discovery and expanded upstream CVE assignment. Organizations that need patches sooner can deploy weekly -proposed release candidates, but must accept that Canonical certification is incomplete and assume more regression-testing responsibility. Canonical also plans to publish safe workarounds within 24–48 hours of public disclosure when fixes are unavailable, or provide hardening guidance where no workaround exists.
See real exploitation activity before you spend the cycle.
1 event from the most recent confirmed update back to the earliest known activity.
Canonical announced it is replacing separate four-week regular and two-week security Ubuntu kernel SRU schedules with overlapping two-week cycles, resulting in weekly kernel releases. The process publishes release candidates to the -proposed pocket after first-week preparation and testing, followed by certification, integration, and regression testing before standard release.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Linux kernel project published an unusually large batch of **440 vulnerability advisories** over a two-day period, covering flaws across subsystems including DRM/AMDGPU, KVM, RDMA, Bluetooth, Wi‑Fi, SMB, Btrfs, ext4, SPI, media, IPMI, and networking. The disclosures describe memory-safety bugs, race conditions, information leaks, bounds-check failures, integer overflows, `NULL` dereferences, out-of-bounds reads, and use-after-free conditions, with reporting highlighting `ksmbd`, TIPC, and KVM/SEV as areas of potentially higher risk. Most issues were reported after fixes were available or already merged into stable kernel branches, though many advisories had not yet received CVSS scores. Ubuntu subsequently published security notices to address Linux kernel vulnerabilities across multiple supported releases, and the Canadian Centre for Cyber Security issued advisory **AV26-717** urging organizations to review the notices and apply updates. The affected Ubuntu versions listed were **14.04 LTS, 16.04 LTS, 20.04 LTS, 24.04 LTS, and 25.10**, underscoring the broad downstream impact of the kernel disclosure wave and the need for administrators to prioritize distribution-provided kernel patches, especially in environments exposing SMB services, TIPC, or SEV-enabled KVM systems.
Jul 27, 2026
Ubuntu published multiple security notices to fix **Linux kernel vulnerabilities** affecting a broad range of releases, including Ubuntu `14.04 LTS`, `16.04 LTS`, `18.04 LTS`, `20.04 LTS`, `22.04 LTS`, `24.04 LTS`, and `25.10`. The Canadian Centre for Cyber Security highlighted the advisories in notices `AV26-264` and `AV26-296`, covering Ubuntu security updates released over consecutive weekly periods. The Cyber Centre urged users and administrators to review the referenced Ubuntu Security Notices and apply the required updates to affected systems. The advisories describe defensive patching activity for kernel flaws across supported Ubuntu versions and do not report a named threat actor, ransomware operation, or confirmed active exploitation campaign.
Jul 2, 2026
Ubuntu published security notices addressing **Linux kernel vulnerabilities** affecting multiple supported releases, and the Canadian Centre for Cyber Security highlighted the advisories in alert `AV26-686`. The notices apply to **Ubuntu 18.04 LTS, 22.04 LTS, 24.04 LTS, 25.10, and 26.04 LTS**, indicating that several generations of desktop and server deployments require attention. The Cyber Centre urged administrators and users to review the linked **Ubuntu Security Notices** and install the required updates to remediate the flaws. The advisory points organizations to Ubuntu's official security notice portal for release-specific patches and mitigation details, underscoring the need to prioritize kernel updates across affected systems.
Jul 13, 2026