O Ubuntu publicou o aviso de segurança USN-8725-1, sobre vulnerabilidades no kernel Linux. O aviso reúne as falhas corrigidas e as versões de pacote correspondentes em cada release, e todas as entradas de pacote trazem a mesma indicação de acesso: "access": "Ubuntu Pro / ESM (see official notice)".

Vulnerabilidades

As falhas identificadas no aviso são:

  • "CVE-2022-50401",
  • "CVE-2026-43071",
  • "CVE-2026-52914",
  • "CVE-2026-53002",
  • "CVE-2026-53043",
  • "CVE-2026-53045",
  • "CVE-2026-53224",
  • "CVE-2026-53309"

Pacotes corrigidos

Release Pacote Versão corrigida
"release": "16.04 LTS xenial", "package": "linux-image-4.4.0-1128-fips", "version": "4.4.0-1128.135",
"release": "16.04 LTS xenial", "package": "linux-image-4.4.0-1159-kvm", "version": "4.4.0-1159.170",
"release": "16.04 LTS xenial", "package": "linux-image-4.4.0-287-generic", "version": "4.4.0-287.321",
"release": "16.04 LTS xenial", "package": "linux-image-4.4.0-287-lowlatency", "version": "4.4.0-287.321",
"release": "16.04 LTS xenial", "package": "linux-image-fips", "version": "4.4.0.1128.130",
"release": "16.04 LTS xenial", "package": "linux-image-generic", "version": "4.4.0.287.293",
"release": "16.04 LTS xenial", "package": "linux-image-generic-lts-xenial", "version": "4.4.0.287.293",
"release": "16.04 LTS xenial", "package": "linux-image-kvm", "version": "4.4.0.1159.156",
"release": "16.04 LTS xenial", "package": "linux-image-lowlatency", "version": "4.4.0.287.293",
"release": "16.04 LTS xenial", "package": "linux-image-lowlatency-lts-xenial", "version": "4.4.0.287.293",
"release": "16.04 LTS xenial", "package": "linux-image-virtual", "version": "4.4.0.287.293",
"release": "16.04 LTS xenial", "package": "linux-image-virtual-lts-xenial", "version": "4.4.0.287.293",
"release": "14.04 LTS trusty", "package": "linux-image-4.4.0-1158-aws", "version": "4.4.0-1158.164",
"release": "14.04 LTS trusty", "package": "linux-image-4.4.0-287-generic", "version": "4.4.0-287.321~14.04.1",
"release": "14.04 LTS trusty", "package": "linux-image-4.4.0-287-lowlatency", "version": "4.4.0-287.321~14.04.1",
"release": "14.04 LTS trusty", "package": "linux-image-aws", "version": "4.4.0.1158.155",
"release": "14.04 LTS trusty", "package": "linux-image-generic-lts-xenial", "version": "4.4.0.287.321~14.04.1",
"release": "14.04 LTS trusty", "package": "linux-image-lowlatency-lts-xenial", "version": "4.4.0.287.321~14.04.1",
"release": "14.04 LTS trusty", "package": "linux-image-virtual-lts-xenial", "version": "4.4.0.287.321~14.04.1",

Dados do aviso

  • Projeto: "project": "ubuntu",
  • Evento: "event": "security",
  • Identificador: "identifier": "USN-8725-1",
  • Versão: "version": null,
  • Data de anúncio: "announcementDate": "2026-09-04 17:51:55+00",
  • Fonte oficial: "officialSource": "https://ubuntu.com/security/notices/USN-8725-1",
  • Estrutura do registro: {, "cves": [, "fixedPackages": [, ],, },, }
  • Nota do aviso: "editorialLimits": "Use only these verified fields. No inferred features, upgrade commands, affected-version ranges or support deadlines. A release announcement does not establish distribution package availability. For security fixes preserve the exact distribution, package version and Pro/ESM access requirements; CVEs do not imply every listed release is affected by every issue."