unratedQCS priority 70/100Ubuntu

USN-8715-2: Linux kernel (AWS FIPS) vulnerabilities

Several security vulnerabilities were found and fixed in the Linux kernel used by Ubuntu, including one where WiFi mesh networks could be attacked by someone nearby injecting malicious packets. These issues might allow attackers to compromise the security of the system. Users should update their Linux kernel packages and reboot their machines to apply these fixes.

Published 18/9/2026, 8:38:57 amVerified 20/9/2026, 1:01:04 amRevision 1

Ubuntu unrated network security advisory visual

VendorUbuntu

Severityunrated

CVSSNot supplied

ExploitationThe advisory does not specify whether these vulnerabilities are currently exploited in the wild, but notes attackers could possibly compromise the system using these issues.

ProductsUbuntu

CVE identifiersCVE-2020-24588, CVE-2025-27558, CVE-2021-47378, CVE-2026-23392, CVE-2026-31405, CVE-2026-31414, CVE-2026-31448, CVE-2026-31657, CVE-2026-31668, CVE-2026-43071, CVE-2026-43198, CVE-2026-43493, CVE-2026-43499, CVE-2026-46266, CVE-2026-46331, CVE-2026-52914, CVE-2026-52924, CVE-2026-52931, CVE-2026-52955, CVE-2026-52958, CVE-2026-52982, CVE-2026-52986, CVE-2026-52989, CVE-2026-52993, CVE-2026-52999, CVE-2026-53002, CVE-2026-53006, CVE-2026-53043, CVE-2026-53045, CVE-2026-53088, CVE-2026-53176, CVE-2026-53212, CVE-2026-53224, CVE-2026-53225, CVE-2026-53228, CVE-2026-53246, CVE-2026-53309, CVE-2026-53359

In plain language

What this advisory means

Technical explanation

How the issue affects the environment

The Linux kernel's WiFi implementation in mesh networks did not securely handle aggregated frames due to an incorrect patch for CVE-2020-24588, leading to CVE-2025-27558. This flaw allows a physically proximate attacker to inject packets into the network. Additionally, a broad range of vulnerabilities affecting multiple kernel subsystems—including x86 architecture, cryptographic APIs, network drivers, file system drivers, and various network protocols such as IPv4, IPv6, TCP, SCTP, and meshing protocols like B.A.T.M.A.N.—were identified. Exploitation of these flaws could lead to system compromise. The update includes corrections across these subsystems, notably in the Linux kernel packages distributed for AWS FIPS-enabled Ubuntu systems.

Operational impact

Why teams should care

Organizations using affected Ubuntu Linux kernels, especially those running on AWS with FIPS certification, face risks including unauthorized packet injection in WiFi mesh networks and potential system compromise through kernel vulnerabilities. This could lead to data breaches, service disruptions, and non-compliance with security standards. Timely updates are essential to mitigate these risks and maintain operational security.

Immediate action

Update the system's Linux kernel packages to the fixed versions listed and reboot the computer to apply all security changes. Recompile and reinstall third party kernel modules if applicable due to ABI changes.

Affected and fixed releases

Affected versionsConfirm in the official vendor advisory

Fixed versionslinux-image-5.4.0-1163-aws-fips version 5.4.0-1163.174+fips1, linux-image-aws-fips version 5.4.0.1163.110, linux-image-aws-fips-5.4 version 5.4.0.1163.110

Temporary risk reduction

The official source does not specify any workaround. The recommended approach is to apply the updated kernel packages and reboot.

Evidence and validation checklist

Ubuntu Security Notice USN-8715-2 detailing the vulnerabilities and updates
Description of CVE-2025-27558 related to improper WiFi mesh frame handling
List of subsystems affected, including network protocols and drivers
Instructions to update kernel packages and reboot to apply fixes

Authoritative reference

Ubuntu Security Notices

QCS detected and normalized this record from the official source. Vendor guidance remains authoritative.

Open source