Ubuntu · versions
Ubuntu 24.04 LTS security vulnerabilities
Ubuntu 24.04 LTS is an Ubuntu release pocket. Package CVEs are usually fixed by security pocket updates, not by reinstalling the whole distro.
Evidence status
16 version-linked advisories are attributed in this catalog (16 from version tokens). Zero matches is never proof Ubuntu 24.04 LTS is secure. Coverage can lag vendor disclosure. Always verify the original advisory.
Version overview
- Ubuntu 24.04 LTS package vulnerabilities appear through Ubuntu / Canonical advisories and the merged CVE catalog.
- Apply `ubuntu-security` updates for the packages you actually install; release name alone does not equal patched.
Security advisories for Ubuntu 24.04 LTS
Confirmed catalog rows attributed to this version series via affected ranges, advisory text, or CVE-linked fix commits on 24.04.
Token-matched catalog rows
- Unknownrabbitmq-server vulnerabilitiesOpen the advisoryOct 15, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- Unknownpyjwt vulnerabilitiesOpen the advisoryOct 13, 2026
- Medium5.5Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly sleep while holding a spinlock in notification handling code.Check if you run itEPSS 0.10%May 28, 2026
- High7.8Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which can potentially incorrectly compute the size of an internal buffer, leading to a heap memory out-of…Check if you run itEPSS 0.15%May 28, 2026
- Medium5.5Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly validate the size of an internal structure, leading to an out-of-bounds read in notific…Check if you run itEPSS 0.15%May 28, 2026
- High7.8Ubuntu Linux 6.8 contains AppArmor SAUCE patches which fail to acquire a lock when modifying a linked list.Check if you run itEPSS 0.17%May 28, 2026
- Low3.3Ubuntu Linux 6.8, 7.17 and 7.0 contain AppArmor SAUCE patches which can, under certain circumstances, use an uninitialized variable in notification handling code.Check if you run itEPSS 0.13%May 28, 2026
- Low3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches which fail to validate invalid sizes of the name field in AppAmor notification responses.Check if you run itEPSS 0.13%May 28, 2026
- Medium6.1Ubuntu Linux 6.8, 6.17 and 7.0 contain AppArmor SAUCE patches which incorrectly attempt to free a pointer which was not previously kmalloc()d, while at the same time l…Check if you run itEPSS 0.13%May 28, 2026
- Low3.3Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a possible NULL pointer dereference in the handling of AppArmor notifications.Check if you run itEPSS 0.13%May 28, 2026
- Medium5.5Ubuntu Linux 6.8, 6.17 and 7.0 contain SAUCE patches with a memory leak in the handling of big responses to AppArmor notifications.Check if you run itEPSS 0.13%May 28, 2026
- Low2.7In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting.Check if you run itEPSS 0.31%Apr 9, 2026
- Low2.7In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting.Check if you run itEPSS 0.28%Apr 9, 2026
- High7.8Local privilege escalation in snapd on Linux allows local attackers to get root privilege by re-creating snap's private /tmp directory when systemd-tmpfiles is configu…Check if you run itEPSS 0.47%Mar 17, 2026
- High8.2Vulnerability in the OpenSSH GSSAPI delta included in various Linux distributions.Check if you run itEPSS 1.30%Mar 12, 2026
Patch information
Public, disclosed Community fix commits attributed to 24.04. Proprietary Enterprise diffs are never shown.
No public disclosed fix commits for 24.04 are listed yet. Use the CVE version checker when you have a concrete SHA or package version.
Disclosed public references on file for 24.04: 0.
Security changes & hardening
Follow the Ubuntu security updates timeline for confirmed fixes, dependency remediations, and hardening events. Ordinary bugfixes are excluded from that timeline.
How to identify your installed revision
- `lsb_release -a` or `/etc/os-release` for the suite.
- `apt-cache policy <package>` for the installed package version and pocket.
- Map CVE → package → fixed version from the Ubuntu security tracker or USN before declaring remediated.
Security checker
Check a CVE against the exact version string you run — ranges are evaluated from catalog metadata.
Monitoring
Watch the Ubuntu stack for newly ingested advisories. Alerts follow your account package — they do not invent exploitability for Ubuntu 24.04 LTS.
Broader Ubuntu catalog
221 recordsOther recent Ubuntu findings that are not tied to Ubuntu 24.04 LTS. Use each CVE’s version checker before you treat one as in range.
- Unknownrabbitmq-server vulnerabilitiesOpen the advisoryOct 15, 2026
- UnknownCVE-2025-38724 is listed by USN-8922-2: Linux kernel (Azure) vulnerabilities.Check if you run itEPSS 0.39%Oct 15, 2026
- Medium5.3kin-openapi is a Go project for handling OpenAPI files.Check if you run itEPSS 0.52%Oct 15, 2026
- Unknowncurl vulnerabilitiesOpen the advisoryOct 14, 2026
- UnknownCVE-2026-94266 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-92391 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-92389 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-92388 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-87864 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-87863 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-87862 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026
- UnknownCVE-2026-86414 is listed by USN-8932-1: curl vulnerabilities.Open the advisoryOct 14, 2026