Ubuntu 26.04 LTS Linux-Azure Critical Kernel Flaws USN-8461-1

Several security issues were fixed in the Linux kernel.

Software Description:

- linux-azure: Linux kernel for Microsoft Azure Cloud systems

Details:

It was discovered that the Linux kernel did not properly handle shared page

fragments during socket buffer operations, collectively known as Dirty

Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the

RxRPC networking subsystem when processing paged fragments. A local

attacker could use this to escalate privileges, or possibly escape a

container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP

subsystem in the Linux kernel when handling socket buffer fragments. This

flaw is known as Fragnesia. A local attacker could use this to escalate

privileges, or possibly escape a container. (CVE-2026-43503,

CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of

the Linux kernel when privileged processes are...