--- title: "CVE-2026-89762\n | Ubuntu" description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/CVE-2026-89762?format=md keywords: index, follow --- # CVE-2026-89762 Publication date 14 September 2026 Last updated 14 September 2026 --- Ubuntu priority **Medium** [Why this priority?](https://ubuntu.com/security/cves/about#priority ) Toggle side navigation ## Description In the Linux kernel, the following vulnerability has been resolved: apparmor: fix cred UAF caused by begin\_current\_label\_crit\_section() AppArmor's begin\_current\_label\_crit\_section() is a scary function called from lots of LSM hooks (in particular VFS/socket-related ones) that checks if the label referenced by the current creds is marked FLAG\_STALE, and if so, attempts to use aa\_replace\_current\_label() to replace the creds with an updated version that uses a new label. The first problem with this is that it would directly lead to UAF of `struct cred` if anything in the kernel takes a pointer to the current creds and accesses these past a security hook invocation that replaces creds, like so: ``` const struct cred \*cred = current\_cred(); alloc\_file\_pseudo(...); uid\_t uid = cred->euid; ``` I don't know if anything in the kernel actually does this, but I think it is very surprising that this pattern could lead to UAF. The second problem is that things go wrong when aa\_replace\_current\_label() runs with overridden credentials. aa\_replace\_current\_label() bails out if `current\_cred() != current\_real\_cred()` (mirroring the check in proc\_pid\_attr\_write()), but this check can't actually reliably detect overridden credentials because the overridden creds can be the same as the objective creds. So in approximately the following scenario, things go wrong: 1. task begins with (as both objective and subjective creds), with refcount=2 2. task grabs an extra reference on for overriding 3. task calls override\_creds(), which returns a pointer to the old subjective creds () 4. task enters AppArmor LSM hook 5. AppArmor checks that objective/subjective creds are equal 6. AppArmor replaces both cred pointers with and drops 2 refs on 7. task leaves AppArmor LSM hook 8. task calls revert\_creds() 9. now task->cred is while task->real\_cred is , but the task\_struct logically holds two references to 10. another task drops the extra reference on that was used for overriding, refcount drops to 0 11. now task->real\_cred points to freed creds At this point, any access to current\_cred() will be UAF. I have a test case where I run aa-disable on a profile while a process using that profile is blocked on splice() from a FUSE passthrough file into a full pipe; after the profile update, the pipe becomes empty, splice() resumes, the credentials go out of sync, and a subsequent getuid() syscall results in a KASAN UAF splat. To fix this, instead of directly replacing creds, do it via task\_work that will run at the end of the current syscall. (The point in time at which the cred replacement happens should have no correctness impact; it is just a performance optimization to avoid unnecessarily touching the refcount of the new label.) Note that AppArmor still performs direct cred replacements in the sb\_pivotroot LSM hook after this change, and that direct cred replacements can still happen in VFS ->write() callbacks via proc\_pid\_attr\_write(). There are two options for what to do with aa\_dup\_task\_ctx(): Either explicitly reset new->label\_replacement\_pending after the entire aa\_task\_ctx has been copied, or switch to manually copying members over. I am switching to manually copying members over because that should make bugs more obvious. ## Status Show unmaintained releases | Package | Ubuntu Release | Status | | --- | --- | --- | | linux | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Needs evaluation | | 16.04 LTS xenial | Needs evaluation | | 14.04 LTS trusty | Needs evaluation | | linux-hwe | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored replaced by linux-hwe-5.4 | | 16.04 LTS xenial | Needs evaluation | | linux-hwe-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-hwe-5.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-hwe-5.11 | | linux-hwe-5.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-hwe-5.13 | | linux-hwe-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-hwe-5.15 | | linux-hwe-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-hwe-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-hwe-6.2 | | linux-hwe-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-hwe-6.5 | | linux-hwe-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-hwe-6.8 | | linux-hwe-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-hwe-6.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored superseded by linux-hwe-6.14 | | 22.04 LTS jammy | Not in release | | linux-hwe-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-hwe-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-hwe-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-hwe-edge | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-hwe-5.4 | | 16.04 LTS xenial | Ignored superseded by linux-hwe | | linux-lts-xenial | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 14.04 LTS trusty | Needs evaluation | | linux-kvm | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Needs evaluation | | 16.04 LTS xenial | Needs evaluation | | linux-allwinner-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored end of kernel support | | linux-aws | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Needs evaluation | | 16.04 LTS xenial | Needs evaluation | | 14.04 LTS trusty | Needs evaluation | | linux-aws-5.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-aws-5.3 | | linux-aws-5.3 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-aws-5.4 | | linux-aws-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-aws-5.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-aws-5.11 | | linux-aws-5.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-aws-5.13 | | linux-aws-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-aws-5.15 | | linux-aws-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-aws-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-aws-6.2 | | linux-aws-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-aws-6.5 | | linux-aws-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-aws-6.8 | | linux-aws-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-aws-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-aws-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-aws-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-aws-hwe | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 16.04 LTS xenial | Needs evaluation | | linux-azure | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Ignored superseded by linux-azure-5.3 | | 16.04 LTS xenial | Needs evaluation | | 14.04 LTS trusty | Needs evaluation | | linux-azure-4.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-azure-5.3 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-azure-5.4 | | linux-azure-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-azure-5.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-azure-5.11 | | linux-azure-5.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-azure-5.13 | | linux-azure-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-azure-5.15 | | linux-azure-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-azure-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-azure-6.2 | | linux-azure-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-azure-6.5 | | linux-azure-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-azure-6.8 | | linux-azure-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-azure-6.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored superseded by linux-azure-6.14 | | 22.04 LTS jammy | Not in release | | linux-azure-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-fde | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Ignored superseded by linux-azure-fde-5.15 | | linux-azure-fde-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-azure-fde-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-azure-fde-6.2 | | linux-azure-fde-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored replaced by linux-azure-6.5 | | linux-azure-fde-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-azure-fde-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-fde-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-fde-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-nvidia | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-azure-nvidia-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-bluefield | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-azure-edge | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-azure-5.3 | | linux-fips | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal FIPS | Needs evaluation | | 18.04 LTS bionic FIPS | Needs evaluation | | 16.04 LTS xenial FIPS | Needs evaluation | | linux-aws-fips | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal FIPS | Needs evaluation | | 18.04 LTS bionic FIPS | Needs evaluation | | linux-azure-fips | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal FIPS | Needs evaluation | | 18.04 LTS bionic FIPS | Needs evaluation | | linux-gcp-fips | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal FIPS | Needs evaluation | | 18.04 LTS bionic FIPS | Needs evaluation | | linux-gcp | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Ignored superseded by linux-gcp-5.3 | | 16.04 LTS xenial | Needs evaluation | | linux-gcp-4.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-gcp-5.3 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-gcp-5.4 | | linux-gcp-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-gcp-5.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-gcp-5.11 | | linux-gcp-5.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-gcp-5.13 | | linux-gcp-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-gcp-5.15 | | linux-gcp-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-gcp-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-gcp-6.2 | | linux-gcp-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-gcp-6.5 | | linux-gcp-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-gcp-6.8 | | linux-gcp-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-gcp-6.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored superseded by linux-gcp-6.14 | | 22.04 LTS jammy | Not in release | | linux-gcp-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-gcp-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-gcp-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-gke | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Ignored end of kernel support | | linux-gke-4.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-gke-5.0 | | linux-gke-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored end of kernel support | | linux-gke-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored end of kernel support | | linux-gkeop | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Ignored end of kernel support | | linux-gkeop-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored end of kernel support | | linux-gkeop-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored end of kernel support | | linux-ibm | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | linux-ibm-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-ibm-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-ibm-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-intel-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored end of kernel support | | linux-intel-iotg | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-intel-iotg-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-iot | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-intel-iot-realtime | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy Real-time | Needs evaluation | | linux-lowlatency | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | linux-lowlatency-hwe-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-lowlatency-hwe-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-lowlatency-hwe-6.2 | | linux-lowlatency-hwe-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-lowlatency-hwe-6.5 | | linux-lowlatency-hwe-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-lowlatency-hwe-6.8 | | linux-lowlatency-hwe-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-lowlatency-hwe-6.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored replaced by linux-hwe-6.14 | | 22.04 LTS jammy | Not in release | | linux-nvidia | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | linux-nvidia-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-nvidia-6.5 | | linux-nvidia-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-nvidia-6.8 | | linux-nvidia-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-nvidia-6.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored end of kernel support | | 22.04 LTS jammy | Not in release | | linux-nvidia-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-nvidia-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-nvidia-bos | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | linux-nvidia-lowlatency | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-nvidia-tegra | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | linux-nvidia-tegra-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-nvidia-tegra-igx | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-oracle | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | 18.04 LTS bionic | Needs evaluation | | 16.04 LTS xenial | Needs evaluation | | linux-oracle-5.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-oracle-5.3 | | linux-oracle-5.3 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored superseded by linux-oracle-5.4 | | linux-oracle-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-oracle-5.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-oracle-5.11 | | linux-oracle-5.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-oracle-5.13 | | linux-oracle-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-oracle-5.15 | | linux-oracle-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-oracle-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-oracle-6.8 | | linux-oracle-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-oracle-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-oracle-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-oracle-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-oem | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Ignored replaced by linux-hwe-5.4 | | linux-oem-5.6 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-oem-5.10 | | linux-oem-5.10 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-oem-5.13 | | linux-oem-5.13 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-oem-5.14 | | linux-oem-5.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored replaced by linux-hwe-5.15 | | linux-oem-5.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-oem-6.1 | | linux-oem-6.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-oem-6.1 | | linux-oem-6.1 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-oem-6.5 | | linux-oem-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-oem-6.8 | | linux-oem-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored superseded by linux-oem-6.14 | | 22.04 LTS jammy | Not in release | | linux-oem-6.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored superseded by linux-oem-6.14 | | 22.04 LTS jammy | Not in release | | linux-oem-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-oem-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-oem-7.0 | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | linux-raspi | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | linux-raspi2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored replaced by linux-raspi | | linux-raspi-5.4 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 18.04 LTS bionic | Needs evaluation | | linux-raspi-realtime | 26.04 LTS resolute | Not in release | | 24.04 LTS noble Real-time | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-realtime | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble Real-time | Needs evaluation | | 22.04 LTS jammy Real-time | Needs evaluation | | linux-realtime-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | linux-realtime-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | linux-riscv | 26.04 LTS resolute | Needs evaluation | | 24.04 LTS noble | Ignored replaced by linux-riscv-6.14 | | 22.04 LTS jammy | Ignored end of kernel support | | 20.04 LTS focal | Ignored superseded by linux-riscv-5.8 | | linux-riscv-5.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-riscv-5.11 | | linux-riscv-5.11 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Ignored superseded by linux-riscv-5.13 | | linux-riscv-5.15 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | | 20.04 LTS focal | Needs evaluation | | linux-riscv-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored end of kernel support | | linux-riscv-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-riscv-6.8 | | linux-riscv-6.8 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | linux-riscv-6.14 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Ignored superseded by linux-riscv-6.17 | | 22.04 LTS jammy | Not in release | | linux-riscv-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-riscv-7.0 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-starfive-5.19 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored end of kernel support | | linux-starfive-6.2 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored superseded by linux-starfive-6.5 | | linux-starfive-6.5 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Ignored end of kernel support | | linux-xilinx | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Needs evaluation | | 22.04 LTS jammy | Not in release | | linux-xilinx-zynqmp | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Needs evaluation | | 20.04 LTS focal | Needs evaluation | | linux-realtime-6.17 | 26.04 LTS resolute | Not in release | | 24.04 LTS noble | Not in release | | 22.04 LTS jammy | Not in release | --- * [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) * [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses) * [Patch details](https://ubuntu.com/security/CVE-2026-89762?format=md#patch-details) ### Patch details For informational purposes only. We recommend not to cherry-pick updates. [How can I get the fixes?](https://ubuntu.com/security/cves/about#security) | Package | Patch details | | --- | --- | | linux | * Introduced by [c75afcd](https://git.kernel.org/linus/c75afcd153f6147d3b094f45a1d87e5df7f4f053), fixed by [3f4ae5f](https://git.kernel.org/linus/3f4ae5fab613dca01d6a2a8210dd832e009fcf47) | ## References * [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-89762) * [NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-89762) * [Launchpad](https://launchpad.net/bugs/cve/CVE-2026-89762) * [Debian](https://security-tracker.debian.org/tracker/CVE-2026-89762) ### Other references * * * * * *