Back Linuxsecurity

Ubuntu 24.04 has a serious authentication bypass flaw in USN-8832

Linuxsecurity •LinuxSecurity Advisories • September 29, 2026

CISA confirms exploitation of a Linux firewall flaw. Check if your systems need the fix. ×

Booth could allow unintended access to network services. Software Description: - booth: Cluster Ticket Manager Details: It was discovered that Booth did not properly validate message authentication codes under certain circumstances. A remote attacker could possibly use this issue to bypass authentication.

Booth could allow unintended access to network services.

Software Description:

- booth: Cluster Ticket Manager

It was discovered that Booth did not properly validate message

authentication codes under certain circumstances. A remote attacker

could possibly use this issue to bypass authentication.

The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS booth 1.1-1ubuntu4+esm1 Available with Ubuntu Pro Ubuntu 22.04 LTS booth 1.0-237-gdd88847-4ubuntu2.2+esm1 Available with Ubuntu Pro Ubuntu 20.04 LTS booth 1.0-174-gce9f821-1ubuntu0.2+esm1 Available with Ubuntu Pro Ubuntu 18.04 LTS booth 1.0-6ubuntu1+esm1 Available with Ubuntu Pro After a standard system update you need to restart Booth to make all the necessary changes.

Ubuntu Security Notice USN-8832-1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Authentication Bypass Vulnerability in Ubuntu's Booth Component A serious authentication bypass vulnerability has been discovered in the Booth component of Ubuntu, affecting versions 18.04, 20.04, 22.04, and 24.04 LTS. The flaw arises from improper validation of message authentication codes, potentially allowing remote attackers to bypass authentication and gain unintended access to network services. CISA has confirmed the exploitation of this flaw, prompting urgent advisories for system updates. Users are advised to update their systems to the specified package versions to mitigate the risk. Affected users should restart Booth after applying the updates to ensure all changes take effect. Ubuntu Pro users have access to long-term security coverage for the affected packages. The vulnerability is cataloged under USN-8832-1, with specific package versions provided for each Ubuntu LTS release. Immediate action is recommended to prevent unauthorized access. 2 sources 73

Extracted Entities

Ubuntu 24.04 has a serious authentication bypass flaw in USN-8832

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)