CVE-2026-23209 · cross-distro fix matrix

CVE-2026-23209: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo

Affects 2 Linux releases across 50 (distro × package) combinations. First disclosed: 2026-04-17.

Fix per ecosystem

Each block below is a distro release where CVE-2026-23209 has a known fix. Run the listed command on that distro to remediate.

Ubuntu noble

Source: Ubuntu USN

linux-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime

linux-buildinfo-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-2042-raspi-realtime

linux-headers-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-headers-6.8.0-2042-raspi-realtime

linux-headers-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime

linux-headers-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime-6.8

linux-image-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-image-6.8.0-2042-raspi-realtime

linux-image-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-image-raspi-realtime

linux-image-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-image-raspi-realtime-6.8

linux-modules-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-modules-6.8.0-2042-raspi-realtime

linux-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime-6.8

linux-raspi-realtime-headers-6.8.0-2042→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime-headers-6.8.0-2042

linux-raspi-realtime-tools-6.8.0-2042→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime-tools-6.8.0-2042

linux-tools-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-tools-6.8.0-2042-raspi-realtime

linux-tools-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-tools-raspi-realtime

linux-tools-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-tools-raspi-realtime-6.8

Ubuntu jammy

Source: Ubuntu USN

linux-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-fips
```
linux-gcp-fips→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-gcp-fips
```
linux-buildinfo-5.15.0-1105-gcp-fips→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-buildinfo-5.15.0-1105-gcp-fips
```
linux-buildinfo-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-buildinfo-5.15.0-176-fips
```
linux-cloud-tools-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-5.15.0-176-fips
```

linux-cloud-tools-fips→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-cloud-tools-fips

linux-cloud-tools-fips-5.15→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-cloud-tools-fips-5.15

linux-fips→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-fips

linux-fips-5.15→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-fips-5.15

linux-fips-cloud-tools-5.15.0-176→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-fips-cloud-tools-5.15.0-176
```
linux-fips-headers-5.15.0-176→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-fips-headers-5.15.0-176
```
linux-fips-tools-5.15.0-176→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-fips-tools-5.15.0-176
```

linux-gcp-fips→ fixed in5.15.0.1105.95USN-8180-2

sudo apt-get install --only-upgrade -y linux-gcp-fips

linux-gcp-fips-5.15→ fixed in5.15.0.1105.95USN-8180-2

sudo apt-get install --only-upgrade -y linux-gcp-fips-5.15

linux-gcp-fips-headers-5.15.0-1105→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-gcp-fips-headers-5.15.0-1105
```
linux-gcp-fips-tools-5.15.0-1105→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-gcp-fips-tools-5.15.0-1105
```
linux-headers-5.15.0-1105-gcp-fips→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-headers-5.15.0-1105-gcp-fips
```
linux-headers-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-headers-5.15.0-176-fips
```

linux-headers-fips→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-headers-fips

linux-headers-fips-5.15→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-headers-fips-5.15

linux-headers-gcp-fips→ fixed in5.15.0.1105.95USN-8180-2

sudo apt-get install --only-upgrade -y linux-headers-gcp-fips

linux-headers-gcp-fips-5.15→ fixed in5.15.0.1105.95USN-8180-2

sudo apt-get install --only-upgrade -y linux-headers-gcp-fips-5.15

linux-image-5.15.0-1105-gcp-fips→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-5.15.0-1105-gcp-fips
```
linux-image-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-5.15.0-176-fips
```

linux-image-fips→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-image-fips

linux-image-fips-5.15→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-image-fips-5.15

linux-image-gcp-fips→ fixed in5.15.0.1105.95USN-8180-2

sudo apt-get install --only-upgrade -y linux-image-gcp-fips

linux-image-gcp-fips-5.15→ fixed in5.15.0.1105.95USN-8180-2

sudo apt-get install --only-upgrade -y linux-image-gcp-fips-5.15

linux-image-hmac-5.15.0-1105-gcp-fips→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-hmac-5.15.0-1105-gcp-fips
```
linux-image-hmac-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-hmac-5.15.0-176-fips
```
linux-image-uc-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-uc-5.15.0-176-fips
```

linux-image-uc-fips→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-image-uc-fips

linux-image-uc-fips-5.15→ fixed in5.15.0.176.102USN-8180-2

sudo apt-get install --only-upgrade -y linux-image-uc-fips-5.15

linux-image-unsigned-5.15.0-1105-gcp-fips→ fixed in5.15.0-1105.114+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-unsigned-5.15.0-1105-gcp-fips
```
linux-image-unsigned-5.15.0-176-fips→ fixed in5.15.0-176.186+fips1USN-8180-2
```
sudo apt-get install --only-upgrade -y linux-image-unsigned-5.15.0-176-fips
```

Are YOU affected by CVE-2026-23209?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan View on NVD

Continuous monitoring beats manual checking

CVE-2026-23209dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.

See StackPatch ($99 lifetime)