Canonical’s Ubuntu security tracker, updated November 7, 2026, marks the standard linux package for Ubuntu 26.10 fixed in 7.3.0-10.10. Four other package-and-release rows reported as in progress on November 4 still had that status in the later update: standard linux for Ubuntu 22.04, 24.04 and 26.04, plus linux-kvm for Ubuntu 22.04.
Check the exact Ubuntu kernel package flavor and release. One row’s fixed status does not tell you the status of another.
Kernel flavor changes the recorded status
Canonical tracks kernel package flavors separately, so a release number alone does not tell you every kernel’s status. These selected rows from the November 7 tracker show how the entries differ:
| Ubuntu release | Kernel package | Status in the November 7 tracker | Target or fixed build |
| 22.04 LTS | linux | Vulnerable, work in progress | Target: 5.15.0-203.213 |
| 24.04 LTS | linux | Vulnerable, work in progress | Target: 6.8.0-149.149 |
| 26.04 LTS | linux | Vulnerable, work in progress | Target: 7.0.0-43.43 |
| 26.10 | linux | Fixed | 7.3.0-10.10 |
| 22.04 LTS | linux-kvm | Vulnerable, work in progress | Target: 5.15.0-1112.117 |
| 22.04 LTS | linux-azure | Fixed | 5.15.0-1125.134 |
| 22.04 LTS | linux-aws | Vulnerable, work in progress | Target: 5.15.0-1120.127 |
| 22.04 LTS | linux-hwe-6.8 | Vulnerable, work in progress | Target: 6.8.0-149.149~22.04.1 |
The contrast between Ubuntu 22.04’s Azure and AWS rows makes the practical point: even two cloud-kernel packages for the same release can have different recorded states. Match the tracker entry to the package flavor on the system you’re checking; Canonical lists additional flavors beyond these examples.
PwnEscape affects kernel-level IPv4 processing
Canonical describes CVE-2026-99999, also known as PwnEscape, as an IPv4 checksum-processing flaw. Bad checksum metadata reaching the IPv4 stack can cause skb_checksum_help to corrupt the network header. The affected processing is in the host’s Linux kernel, so updating a virtual machine’s guest operating system does not update the host kernel.
Canonical assigns the issue Ubuntu priority Medium. Its tracker also lists a CVSS 3.1 score of 9.3, Critical, and a CVSS 4.0 score of 6.9, Medium. Those labels belong to separate scoring fields and versions.
