Security Advisory Desk
unratedQCS priority 70/100Ubuntu

USN-8548-2: Linux kernel vulnerabilities

A flaw called Fragnesia was found in the Linux kernel's network security handling, allowing a local attacker to gain higher system access or break out of a container. Additionally, multiple other security issues affecting various parts of the Linux kernel were discovered, potentially allowing attackers to compromise the system. Ubuntu has released updates fixing these issues.

Published 13/8/2026, 9:12:03 pmVerified 14/8/2026, 12:06:56 amRevision 1
Ubuntu unrated network security advisory visual

In plain language

What this advisory means

A flaw called Fragnesia was found in the Linux kernel's network security handling, allowing a local attacker to gain higher system access or break out of a container. Additionally, multiple other security issues affecting various parts of the Linux kernel were discovered, potentially allowing attackers to compromise the system. Ubuntu has released updates fixing these issues.

Technical explanation

How the issue affects the environment

The Linux kernel's XFRM ESP-in-TCP subsystem contained a logic flaw in processing socket buffer fragments, designated CVE-2026-43503 and known as Fragnesia. This flaw enables a local attacker to escalate privileges or escape container isolation. Besides Fragnesia, numerous vulnerabilities were identified across subsystems including SCSI, thermal drivers, USB over IP, file systems (Ext4, NFS server, SMB), tracing infrastructure, B.A.T.M.A.N. protocol, Ceph core library, DCCP protocol, IPv4 and IPv6 networking, Netfilter, RxRPC sockets, and X.25 network layer. These issues could allow an attacker to compromise system integrity. The Ubuntu security update addresses the flaws by updating the Linux kernel and its components.

Operational impact

Why teams should care

If unaddressed, these vulnerabilities could allow local attackers to gain unauthorized elevated access or disrupt system operations, potentially leading to data breaches, service interruptions, or container escapes on Ubuntu systems. Organizations running vulnerable Linux kernels may face increased risk and should apply updates promptly to maintain system security and integrity.

Immediate action

Apply the Ubuntu security updates that include fixed Linux kernel packages. After updating the kernel packages, reboot the system to ensure all fixes take effect. Note that the kernel update involves an ABI change, so any third-party kernel modules must be recompiled and reinstalled.

Affected and fixed releases

Affected versionsConfirm in the official vendor advisory
Fixed versionsConfirm in the official vendor advisory

Temporary risk reduction

No separate workaround was supplied in the source feed. Use the official vendor advisory before changing production controls.

Evidence and validation checklist

  • Logic flaw in XFRM ESP-in-TCP subsystem allowing privilege escalation or container escape (CVE-2026-43503).
  • Multiple vulnerabilities across networking, filesystem, driver, and protocol subsystems.
  • Update fixes provided by Ubuntu via Linux kernel package upgrades.
  • Requirement to reboot after updates and recompile third-party kernel modules due to ABI changes.

Authoritative reference

Ubuntu Security Notices

QCS detected and normalized this record from the official source. Vendor guidance remains authoritative.

Open source