Ten major Linux distributions, including Ubuntu, have released critical security advisories, focusing on kernel patches to address vulnerabilities related to WiFi mesh injection and AMD Zen 2 cache isolation. Significant updates were made to various infrastructure tools like curl, Podman, and BIND to fix authentication bypasses and cache exhaustion exploits, while runtime layers saw important CVEs addressed, particularly with MySQL 8.4 and language runtimes like PHP and Python. Ubuntu's extensive kernel updates span releases from 14.04 to 26.04, necessitating reboots, and PostgreSQL also received crucial updates to rectify multiple longstanding vulnerabilities. Other distributions like Fedora, Debian, and Oracle Linux have similarly pushed critical patches, emphasizing the need for users to manage their patching promptly to maintain system security

Linux Security Roundup: Kernel Patches, Runtime CVEs, and a MySQL 8.4 Rebase

Ten major Linux distributions shipped critical security advisories today, with Ubuntu leading a massive kernel sweep across every LTS release to patch WiFi mesh injection and AMD Zen 2 cache isolation flaws. Infrastructure tooling also took a hit, as curl, Podman, and BIND received fixes for authentication bypasses, container escape vectors, and cache exhaustion exploits. The runtime layer saw equally heavy CVE counts, featuring a MySQL 8.4 rebase, PHP 8.4 and Python 3.13 hardening against SQLi and tarfile bypasses, and parallel patches for .NET and Go ecosystems. 

Linux Security Roundup: Kernel Patches, Runtime CVEs, and a MySQL 8.4 Rebase @ Linux Compatible