Ubuntu · versions
Ubuntu 22.04 LTS security vulnerabilities
Ubuntu 22.04 LTS is an Ubuntu release pocket. Package CVEs are usually fixed by security pocket updates, not by reinstalling the whole distro.
Evidence status
5 version-linked advisories are attributed in this catalog (5 from version tokens). Zero matches is never proof Ubuntu 22.04 LTS is secure. Coverage can lag vendor disclosure. Always verify the original advisory.
Version overview
- Ubuntu 22.04 LTS package vulnerabilities appear through Ubuntu / Canonical advisories and the merged CVE catalog.
- Apply `ubuntu-security` updates for the packages you actually install; release name alone does not equal patched.
Security advisories for Ubuntu 22.04 LTS
Confirmed catalog rows attributed to this version series via affected ranges, advisory text, or CVE-linked fix commits on 22.04.
Token-matched catalog rows
- Unknownrabbitmq-server vulnerabilitiesOpen the advisoryOct 15, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- Unknownpyjwt vulnerabilitiesOpen the advisoryOct 13, 2026
- High7.8Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configu…Check if you run itEPSS 0.47%Mar 17, 2026
- High8.2Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Check if you run itEPSS 1.30%Mar 12, 2026
Patch information
Public, disclosed Community fix commits attributed to 22.04. Proprietary Enterprise diffs are never shown.
No public disclosed fix commits for 22.04 are listed yet. Use the CVE version checker when you have a concrete SHA or package version.
Disclosed public references on file for 22.04: 0.
Security changes & hardening
Follow the Ubuntu security updates timeline for confirmed fixes, dependency remediations, and hardening events. Ordinary bugfixes are excluded from that timeline.
How to identify your installed revision
- `lsb_release -a` or `/etc/os-release` for the suite.
- `apt-cache policy <package>` for the installed package version and pocket.
- Map CVE → package → fixed version from the Ubuntu security tracker or USN before declaring remediated.
Security checker
Check a CVE against the exact version string you run — ranges are evaluated from catalog metadata.
Monitoring
Watch the Ubuntu stack for newly ingested advisories. Alerts follow your account package — they do not invent exploitability for Ubuntu 22.04 LTS.
Broader Ubuntu catalog
221 recordsOther recent Ubuntu findings that are not tied to Ubuntu 22.04 LTS. Use each CVE’s version checker before you treat one as in range.
- Unknownrabbitmq-server vulnerabilitiesOpen the advisoryOct 15, 2026
- UnknownCVE-2025-38724 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.Check if you run itEPSS 0.39%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.52%Oct 15, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownCVE-2026-94266 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-92391 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-92389 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-92388 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-87864 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-87863 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-87862 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-86414 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026