1.0 Introduction
Recently, Canonical has released security updates to address multiple vulnerabilities in the Linux kernel for Ubuntu.
2.0 Impact
CVE-2026-53266 allows a local attacker on a system configured with specific bridge netfilter rules to improperly modify underlying memory pages during an ARP sender hardware address rewrite. This could lead to unintended system behaviour, a denial of service, or potentially local privilege escalation. Other vulnerabilities in the bulletin may allow cross-site scripting, denial of service, elevation of privilege, security restriction bypass, sensitive information disclosure, remote code execution, data manipulation and spoofing. This may lead to execution of arbitrary code, unauthorised access to sensitive information and system compromise.
3.0 Affected Products
- Ubuntu 14.04 LTS, 16.04 LTS, 18.04 LTS, 20.04 LTS, 22.04 LTS, 24.04 LTS and 26.04 LTS
4.0 Recommendation
CyberSecurity
Malaysia encourages users and administrators to review the following Ubuntu
security notices and apply the necessary updates. Users are advised to install
the kernel updates for their Ubuntu release and reboot the system so that the
new kernel takes effect. Systems that use bridge netfilter rules should be
prioritised because of the exploited flaw.
Kindly refer to the following URL:
Generally, we advise users to be
updated with the latest security announcements by the vendor and follow best
practice security policies to determine which updates should be applied.
For further enquiries, please contact Cyber999
Incident Response Centre through the following channels:
E-mail: cyber999[at]cybersecurity.my
Phone: 1-300-88-2999 (monitored during business hours)
Mobile: +60 19 2665850 (24x7 call incident reporting)
Business Hours: Mon - Fri 08:30 -17:30 MYT
Web: https://www.cybersecurity.my
5.0 References