Ubuntu vulnerabilities
We track 5 vulnerabilities in Ubuntu products across 5 products. 5 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on November 4, 2026.
Latest Ubuntu vulnerabilities
- 7.7 High severity
APT: UNIX Hard Link
On Debian, Ubuntu, and derivative Linux distributions, an on-path attacker who can manipulate the HTTP traffic (including a malicious mirror or proxy) between an APT client and an archive server triggered by a package install can trick the client into installi
- 7.5 High severity
openssh: Use of Uninitialized Resource
Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions. This vulnerability affects the GSSAPI patches added by various Linux distributions and does not affect the OpenSSH upstream project itself. The usage of sshpkt_disconnect() on a
- 8.8 High severity
edk2: Active Debug Code
The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous vers
- 7.5 High severity
Ubuntu package linux-bluefield: Inefficient Regular Expression Complexity
Running DDoS on tcp port 22 will trigger a kernel crash. This issue is introduced by the backport of a commit regarding nft_lookup without the subsequent fixes that were introduced after this commit. The resolution of this CVE introduces those commits to the l
- 7.8 High severity
Linux Kernel Privilege Escalation Exploited
The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along with a patch carried