USN-8714-2: Vulnerabilidades no kernel Linux

O aviso de segurança USN-8714-2, publicado pelo Ubuntu em 4 de setembro de 2026, trata de cinco vulnerabilidades no kernel Linux. O escopo inclui Ubuntu 18.04 LTS (Bionic) e Ubuntu 20.04 LTS (Focal), com correções para instâncias AWS e GCP. O acesso às atualizações exige Ubuntu Pro/ESM.

CVEs listadas

O aviso relaciona as seguintes cinco CVEs:

  • CVE-2026-53043
  • CVE-2026-53224
  • CVE-2026-53225
  • CVE-2026-53246
  • CVE-2026-53309

Pacotes corrigidos para AWS e GCP

Entre os pacotes citados para AWS estão linux-image-5.4.0-1163-aws, linux-image-aws e linux-image-aws-5.4. Para GCP, estão linux-image-5.4.0-1166-gcp, linux-image-gcp, linux-image-gcp-5.4 e linux-image-gcp-lts-20.04.

As versões registradas no aviso incluem 5.4.0-1163.174~18.04.1, 5.4.0.1163.174~18.04.1, 5.4.0-1166.175~18.04.1, 5.4.0.1166.175~18.04.1, 5.4.0-1166.175 e 5.4.0.1166.168.

Marcadores imutáveis preservados da fonte:

{
"project": "ubuntu",
"event": "security",
"identifier": "USN-8714-2",
"version": null,
"announcementDate": "2026-09-04 17:55:21+00",
"officialSource": "https://ubuntu.com/security/notices/USN-8714-2",
"cves": [
"CVE-2026-53043",
"CVE-2026-53224",
"CVE-2026-53225",
"CVE-2026-53246",
"CVE-2026-53309"
],
"fixedPackages": [
"release": "20.04 LTS focal",
"package": "linux-image-5.4.0-1166-gcp",
"version": "5.4.0-1166.175",
"access": "Ubuntu Pro / ESM (see official notice)"
},
"package": "linux-image-gcp-5.4",
"version": "5.4.0.1166.168",
"package": "linux-image-gcp-lts-20.04",
"release": "18.04 LTS bionic",
"package": "linux-image-5.4.0-1163-aws",
"version": "5.4.0-1163.174~18.04.1",
"version": "5.4.0-1166.175~18.04.1",
"package": "linux-image-aws",
"version": "5.4.0.1163.174~18.04.1",
"package": "linux-image-aws-5.4",
"package": "linux-image-gcp",
"version": "5.4.0.1166.175~18.04.1",
}
"editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."