Back Linuxsecurity

Ubuntu 20.04 LTS Go Networking Critical DoS Vulnerabilities USN-8089

Linuxsecurity •LinuxSecurity Advisories • April 1, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: Several security issues were fixed in Go Networking Software Description: - golang-golang-x-net-dev: Supplementary Go networking development files Details: USN-8089-1 fixed vulnerabilities in Go Networking. This update provides the corresponding update to code vendored in golang-golang-x-net-dev. Original advisory details: Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and Kaan Onarlioglu discovered that servers using Go Networking could hang during shutdown if preempted by a fatal error. An attacker could possibly use this to cause a denial of service. This issue only affected Ubuntu 22.04 LTS. (CVE-2022-27664) Arpad Ryszka and Jakob Ackermann discovered that a maliciously crafted stream could cause excessive CPU usage in Go Networking's HPACK decoder. An

The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS golang-go.net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2 Available with Ubuntu Pro golang-golang-x-net-dev 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 18.04 LTS golang-go.net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2 Available with Ubuntu Pro golang-golang-x-net-dev 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2 Available with Ubuntu Pro Ubuntu 16.04 LTS golang-go.net-dev 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2 Available with Ubuntu Pro golang-golang-x-net-dev 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes.

CVE-2021-33194, CVE-2022-27664, CVE-2022-41723, CVE-2023-3978, CVE-2025-22872, CVE-2025-47911, CVE-2025-58190

CVE-2021-33194, CVE-2022-27664, CVE-2022-41723, CVE-2023-3978,

CVE-2025-22872, CVE-2025-47911, CVE-2025-58190

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Go Networking Vulnerabilities Affect Multiple Ubuntu Releases Recent updates have addressed critical vulnerabilities in Go Networking affecting multiple Ubuntu versions, including 20.04 LTS, 18.04 LTS, and 16.04 LTS. The vulnerabilities, identified as CVE-2022-27664 and CVE-2022-41723, could lead to denial of service attacks, with potential for servers to hang during shutdown or experience excessive CPU usage. The issues were discovered by researchers Bahruz Jabiyev, Tommaso Innocenti, and others. The vulnerabilities primarily impact Ubuntu 22.04 LTS but have implications for older versions as well. Users are advised to update their systems to mitigate these risks. The updates are available through Ubuntu Pro. The vulnerabilities were published in 2022 and 2023, highlighting ongoing security concerns in Go Networking. 4 sources 71

Extracted Entities

Ubuntu 20.04 LTS Go Networking Critical DoS Vulnerabilities USN-8089

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (7)

Domains (1)