They haven't patched pwnescape either, which is like 15+ days old - allows for KVM breakout.

https://ubuntu.com/security/CVE-2026-99999