[USN-8623-1] Linux kernel (NVIDIA) vulnerabilities
[USN-8622-1] Linux kernel (NVIDIA) vulnerabilities
[USN-8615-1] Linux kernel vulnerabilities
[USN-8616-1] Linux kernel (IBM) vulnerabilities
[USN-8620-2] Linux kernel (Azure FIPS) vulnerabilities
[USN-8547-2] Linux kernel (Azure FIPS) vulnerabilities
[USN-8615-2] Linux kernel (Raspberry Pi) vulnerabilities
[USN-8617-1] Linux kernel (KVM) vulnerabilities
[USN-8623-1] Linux kernel (NVIDIA) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8623-1
July 29, 2026
linux-nvidia-6.17 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-nvidia-6.17: Linux kernel for NVIDIA systems
Details:
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Arm Firmware Framework for ARMv8-A(FFA);
(CVE-2026-53354, CVE-2026-64520)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
linux-image-6.17.0-1029-nvidia 6.17.0-1029.29
linux-image-6.17.0-1029-nvidia-64k 6.17.0-1029.29
linux-image-nvidia-6.17 6.17.0-1029.29
linux-image-nvidia-64k-6.17 6.17.0-1029.29
linux-image-nvidia-64k-hwe-24.04 6.17.0-1029.29
linux-image-nvidia-hwe-24.04 6.17.0-1029.29
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8623-1
CVE-2026-53354, CVE-2026-64520
Package Information:
https://launchpad.net/ubuntu/+source/linux-nvidia-6.17/6.17.0-1029.29
[USN-8622-1] Linux kernel (NVIDIA) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8622-1
July 29, 2026
linux-nvidia, linux-nvidia-7.0 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-nvidia: Linux kernel for NVIDIA systems
- linux-nvidia-7.0: Linux kernel for NVIDIA systems
Details:
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Arm Firmware Framework for ARMv8-A(FFA);
(CVE-2026-53354, CVE-2026-64520)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 26.04 LTS
linux-image-7.0.0-1015-nvidia 7.0.0-1015.15
linux-image-7.0.0-1015-nvidia-64k 7.0.0-1015.15
linux-image-nvidia 7.0.0-1015.15
linux-image-nvidia-64k 7.0.0-1015.15
linux-image-nvidia-64k-7.0 7.0.0-1015.15
linux-image-nvidia-7.0 7.0.0-1015.15
Ubuntu 24.04 LTS
linux-image-7.0.0-1015-nvidia 7.0.0-1015.15~24.04.1
linux-image-7.0.0-1015-nvidia-64k 7.0.0-1015.15~24.04.1
linux-image-nvidia-64k-7.0 7.0.0-1015.15~24.04.1
linux-image-nvidia-7.0 7.0.0-1015.15~24.04.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8622-1
CVE-2026-53354, CVE-2026-64520
Package Information:
https://launchpad.net/ubuntu/+source/linux-nvidia/7.0.0-1015.15
https://launchpad.net/ubuntu/+source/linux-nvidia-7.0/7.0.0-1015.15~24.04.1
[USN-8615-1] Linux kernel vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8615-1
July 28, 2026
linux, linux-aws, linux-aws-5.4, linux-aws-fips, linux-azure,
linux-azure-5.4, linux-azure-fips, linux-bluefield, linux-fips, linux-gcp,
linux-gcp-5.4, linux-gcp-fips, linux-hwe-5.4, linux-iot, linux-oracle,
linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS
- linux-azure: Linux kernel for Microsoft Azure Cloud systems
- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS
- linux-bluefield: Linux kernel for NVIDIA BlueField platforms
- linux-fips: Linux kernel with FIPS
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS
- linux-iot: Linux kernel for IoT platforms
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-xilinx-zynqmp: Linux kernel for Xilinx ZynqMP processors
- linux-aws-5.4: Linux kernel for Amazon Web Services (AWS) systems
- linux-azure-5.4: Linux kernel for Microsoft Azure cloud systems
- linux-gcp-5.4: Linux kernel for Google Cloud Platform (GCP) systems
- linux-hwe-5.4: Linux hardware enablement (HWE) kernel
- linux-oracle-5.4: Linux kernel for Oracle Cloud systems
Details:
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- STMicroelectronics network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- Network file system (NFS) server daemon;
- SMB network file system;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RxRPC session sockets;
- X.25 network layer;
(CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418,
CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31659,
CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037,
CVE-2026-43038, CVE-2026-43117, CVE-2026-43383, CVE-2026-43407,
CVE-2026-43414, CVE-2026-45988, CVE-2026-46043, CVE-2026-46119,
CVE-2026-46135, CVE-2026-46243)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
linux-image-5.4.0-1065-iot 5.4.0-1065.68
Available with Ubuntu Pro
linux-image-5.4.0-1079-xilinx-zynqmp 5.4.0-1079.83
Available with Ubuntu Pro
linux-image-5.4.0-1120-bluefield 5.4.0-1120.127
Available with Ubuntu Pro
linux-image-5.4.0-1135-fips 5.4.0-1135.145
Available with Ubuntu Pro
linux-image-5.4.0-1159-oracle 5.4.0-1159.169
Available with Ubuntu Pro
linux-image-5.4.0-1161-aws 5.4.0-1161.172
Available with Ubuntu Pro
linux-image-5.4.0-1161-aws-fips 5.4.0-1161.172+fips1
Available with Ubuntu Pro
linux-image-5.4.0-1164-gcp 5.4.0-1164.173
Available with Ubuntu Pro
linux-image-5.4.0-1164-gcp-fips 5.4.0-1164.173+fips1
Available with Ubuntu Pro
linux-image-5.4.0-1166-azure 5.4.0-1166.172
Available with Ubuntu Pro
linux-image-5.4.0-1166-azure-fips 5.4.0-1166.172+fips1
Available with Ubuntu Pro
linux-image-5.4.0-233-generic 5.4.0-233.253
Available with Ubuntu Pro
linux-image-5.4.0-233-generic-lpae 5.4.0-233.253
Available with Ubuntu Pro
linux-image-5.4.0-233-lowlatency 5.4.0-233.253
Available with Ubuntu Pro
linux-image-aws-5.4 5.4.0.1161.159
Available with Ubuntu Pro
linux-image-aws-fips 5.4.0.1161.108
Available with Ubuntu Pro
linux-image-aws-fips-5.4 5.4.0.1161.108
Available with Ubuntu Pro
linux-image-aws-lts-20.04 5.4.0.1161.159
Available with Ubuntu Pro
linux-image-azure-5.4 5.4.0.1166.158
Available with Ubuntu Pro
linux-image-azure-fips 5.4.0.1166.102
Available with Ubuntu Pro
linux-image-azure-fips-5.4 5.4.0.1166.102
Available with Ubuntu Pro
linux-image-azure-lts-20.04 5.4.0.1166.158
Available with Ubuntu Pro
linux-image-bluefield 5.4.0.1120.116
Available with Ubuntu Pro
linux-image-bluefield-5.4 5.4.0.1120.116
Available with Ubuntu Pro
linux-image-fips 5.4.0.1135.132
Available with Ubuntu Pro
linux-image-fips-5.4 5.4.0.1135.132
Available with Ubuntu Pro
linux-image-gcp-5.4 5.4.0.1164.166
Available with Ubuntu Pro
linux-image-gcp-fips 5.4.0.1164.106
Available with Ubuntu Pro
linux-image-gcp-fips-5.4 5.4.0.1164.106
Available with Ubuntu Pro
linux-image-gcp-lts-20.04 5.4.0.1164.166
Available with Ubuntu Pro
linux-image-generic 5.4.0.233.225
Available with Ubuntu Pro
linux-image-generic-5.4 5.4.0.233.225
Available with Ubuntu Pro
linux-image-generic-lpae 5.4.0.233.225
Available with Ubuntu Pro
linux-image-generic-lpae-5.4 5.4.0.233.225
Available with Ubuntu Pro
linux-image-lowlatency 5.4.0.233.225
Available with Ubuntu Pro
linux-image-lowlatency-5.4 5.4.0.233.225
Available with Ubuntu Pro
linux-image-oem 5.4.0.233.225
Available with Ubuntu Pro
linux-image-oem-osp1 5.4.0.233.225
Available with Ubuntu Pro
linux-image-oracle-5.4 5.4.0.1159.153
Available with Ubuntu Pro
linux-image-oracle-lts-20.04 5.4.0.1159.153
Available with Ubuntu Pro
linux-image-virtual 5.4.0.233.225
Available with Ubuntu Pro
linux-image-virtual-5.4 5.4.0.233.225
Available with Ubuntu Pro
linux-image-xilinx-zynqmp 5.4.0.1079.79
Available with Ubuntu Pro
linux-image-xilinx-zynqmp-5.4 5.4.0.1079.79
Available with Ubuntu Pro
Ubuntu 18.04 LTS
linux-image-5.4.0-1159-oracle 5.4.0-1159.169~18.04.1
Available with Ubuntu Pro
linux-image-5.4.0-1161-aws 5.4.0-1161.172~18.04.1
Available with Ubuntu Pro
linux-image-5.4.0-1164-gcp 5.4.0-1164.173~18.04.1
Available with Ubuntu Pro
linux-image-5.4.0-1166-azure 5.4.0-1166.172~18.04.1
Available with Ubuntu Pro
linux-image-5.4.0-233-generic 5.4.0-233.253~18.04.1
Available with Ubuntu Pro
linux-image-5.4.0-233-lowlatency 5.4.0-233.253~18.04.1
Available with Ubuntu Pro
linux-image-aws 5.4.0.1161.172~18.04.1
Available with Ubuntu Pro
linux-image-aws-5.4 5.4.0.1161.172~18.04.1
Available with Ubuntu Pro
linux-image-azure 5.4.0.1166.172~18.04.1
Available with Ubuntu Pro
linux-image-azure-5.4 5.4.0.1166.172~18.04.1
Available with Ubuntu Pro
linux-image-gcp 5.4.0.1164.173~18.04.1
Available with Ubuntu Pro
linux-image-gcp-5.4 5.4.0.1164.173~18.04.1
Available with Ubuntu Pro
linux-image-generic-5.4 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-generic-hwe-18.04 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-lowlatency-5.4 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-lowlatency-hwe-18.04 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-oem 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-oem-osp1 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-oracle 5.4.0.1159.169~18.04.1
Available with Ubuntu Pro
linux-image-oracle-5.4 5.4.0.1159.169~18.04.1
Available with Ubuntu Pro
linux-image-snapdragon-5.4 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-snapdragon-hwe-18.04 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-virtual-5.4 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
linux-image-virtual-hwe-18.04 5.4.0.233.253~18.04.1
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8615-1
CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418,
CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31659,
CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037,
CVE-2026-43038, CVE-2026-43117, CVE-2026-43383, CVE-2026-43407,
CVE-2026-43414, CVE-2026-43503, CVE-2026-45988, CVE-2026-46043,
CVE-2026-46119, CVE-2026-46135, CVE-2026-46243
[USN-8616-1] Linux kernel (IBM) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8616-1
July 28, 2026
linux-ibm, linux-ibm-5.4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-ibm: Linux kernel for IBM cloud systems
- linux-ibm-5.4: Linux kernel for IBM cloud systems
Details:
It was discovered that the Linux kernel did not properly handle shared page
fragments during socket buffer operations, collectively known as Dirty
Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the
RxRPC networking subsystem when processing paged fragments. A local
attacker could use this to escalate privileges, or possibly escape a
container. (CVE-2026-43284, CVE-2026-43500)
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- STMicroelectronics network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- Network file system (NFS) server daemon;
- SMB network file system;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RDS protocol;
- RxRPC session sockets;
- X.25 network layer;
(CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418,
CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31659,
CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037,
CVE-2026-43038, CVE-2026-43117, CVE-2026-43383, CVE-2026-43407,
CVE-2026-43414, CVE-2026-43494, CVE-2026-45988, CVE-2026-46043,
CVE-2026-46119, CVE-2026-46135, CVE-2026-46243)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
linux-image-5.4.0-1107-ibm 5.4.0-1107.112
Available with Ubuntu Pro
linux-image-ibm-5.4 5.4.0.1107.136
Available with Ubuntu Pro
linux-image-ibm-lts-20.04 5.4.0.1107.136
Available with Ubuntu Pro
Ubuntu 18.04 LTS
linux-image-5.4.0-1107-ibm 5.4.0-1107.112~18.04.1
Available with Ubuntu Pro
linux-image-ibm 5.4.0.1107.112~18.04.1
Available with Ubuntu Pro
linux-image-ibm-5.4 5.4.0.1107.112~18.04.1
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8616-1
CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418,
CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31659,
CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037,
CVE-2026-43038, CVE-2026-43117, CVE-2026-43284, CVE-2026-43383,
CVE-2026-43407, CVE-2026-43414, CVE-2026-43494, CVE-2026-43500,
CVE-2026-43503, CVE-2026-45988, CVE-2026-46043, CVE-2026-46119,
CVE-2026-46135, CVE-2026-46243
[USN-8620-2] Linux kernel (Azure FIPS) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8620-2
July 29, 2026
linux-azure-fips vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS
Details:
Maxim Suhanov discovered that the NTFS file system implementation in the
Linux kernel did not properly validate file name length in certain
situations, leading to an out-of-bounds read. An attacker could use this to
construct a malicious NTFS image that, when mounted and operated on, could
expose sensitive information (kernel memory). (CVE-2023-45896)
It was discovered that some AMD processors did not properly clear data in
the floating point divider unit during speculative execution. A local
attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate
shared resources in the operation cache. A local attacker could possibly
use this issue to corrupt instructions executed at a higher privilege
level, resulting in privilege escalation. (CVE-2025-54518)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- PowerPC architecture;
- S390 architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Power management core;
- DRBD Distributed Replicated Block Device drivers;
- RNBD block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- TPM device driver;
- Clocksource drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- CPU idle management framework;
- Hardware crypto device drivers;
- DMA engine subsystem;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device (Miscellaneous) drivers;
- IOMMU subsystem;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- MediaTek SMI driver;
- NVIDIA Tegra memory controller driver;
- Multifunction device drivers;
- IBM Advanced System Management driver;
- MMC subsystem;
- MTD block device drivers;
- Network drivers;
- Ethernet bonding driver;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- STMicroelectronics network drivers;
- MediaTek network drivers;
- Near Field Communication (NFC) drivers;
- NTB driver;
- NVDIMM (Non-Volatile Memory Device) drivers;
- NVME drivers;
- PCI subsystem;
- Pin controllers subsystem;
- x86 platform drivers;
- Broadcom BCM2835 power domain driver;
- Power supply drivers;
- RapidIO drivers;
- Remote Processor subsystem;
- RPMSG subsystem;
- SCSI subsystem;
- Freescale SoC drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Greybus lights staging drivers;
- Media staging drivers;
- Realtek RTL8723BS SDIO drivers;
- SM750 framebuffer staging driver;
- TCM subsystem;
- TTY drivers;
- UFS subsystem;
- Cadence USB3 driver;
- USB Device Class drivers;
- ULPI bus;
- USB core drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Mustek MDC800 USB digital camera driver;
- USB YUREX driver;
- Renesas USBHS Controller drivers;
- Framebuffer layer;
- Xen hypervisor drivers;
- File systems infrastructure;
- BTRFS file system;
- Ceph distributed file system;
- EROFS file system;
- Ext4 file system;
- F2FS file system;
- FAT file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS+ file system;
- JFS file system;
- Network file system (NFS) server daemon;
- NILFS2 file system;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- Proc file system;
- Pstore file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system;
- XFS file system;
- Audit subsystem;
- RAS (Reliability, Availability, Serviceability) subsystem;
- Software nodes and device properties;
- Memory Management;
- KVM subsystem;
- Memory management;
- PPP protocol drivers and compressors;
- Linux Security Modules (LSM) Framework;
- Network traffic control;
- Bluetooth subsystem;
- MAC80211 subsystem;
- Netfilter;
- IP tunnels definitions;
- Tracing infrastructure;
- User-space API (UAPI);
- io_uring subsystem;
- BPF subsystem;
- Control group (cgroup);
- Kernel fork() syscall;
- Kernel futex primitives;
- Kernel kexec() syscall;
- Kernel module support;
- Scheduler infrastructure;
- Cryptographic library;
- KASAN memory debugging framework;
- Asynchronous Transfer Mode (ATM) subsystem;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- CAIF protocol;
- CAN network layer;
- Ceph Core library;
- Networking core;
- Distributed Switch Architecture;
- IPv4 networking;
- IPv6 networking;
- XFRM subsystem;
- L2TP protocol;
- Management Component Transport Protocol (MCTP);
- Multipath TCP;
- NCSI (Network Controller Sideband Interface) driver;
- NFC subsystem;
- Open vSwitch;
- Phonet protocol;
- Qualcomm IPC Router (QRTR);
- RDS protocol;
- RF switch subsystem;
- Rose network layer;
- RxRPC session sockets;
- SCTP protocol;
- SMC sockets;
- Stream parser;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Unix domain sockets;
- VMware vSockets driver;
- Wireless networking;
- X.25 network layer;
- eXpress Data Path;
- AppArmor security module;
- Simplified Mandatory Access Control Kernel framework;
- ALSA framework;
- FireWire sound drivers;
- HD-audio driver;
- AudioScience HPI driver;
- Creative Sound Blaster X-Fi driver;
- AMD SoC Alsa drivers;
- SoC audio core drivers;
- STI ASoC drivers;
- USB sound devices;
(CVE-2022-49803, CVE-2022-49961, CVE-2022-50073, CVE-2022-50116,
CVE-2022-50552, CVE-2023-52682, CVE-2023-52737, CVE-2023-53545,
CVE-2023-53596, CVE-2023-53629, CVE-2024-27389, CVE-2024-35865,
CVE-2024-36898, CVE-2024-36922, CVE-2024-41079, CVE-2024-46715,
CVE-2024-46770, CVE-2024-47809, CVE-2024-50012, CVE-2024-53221,
CVE-2024-56557, CVE-2024-56584, CVE-2024-56657, CVE-2024-56719,
CVE-2024-56727, CVE-2025-21712, CVE-2025-21739, CVE-2025-21863,
CVE-2025-22107, CVE-2025-23141, CVE-2025-37786, CVE-2025-38006,
CVE-2025-38105, CVE-2025-38192, CVE-2025-38250, CVE-2025-38562,
CVE-2025-38626, CVE-2025-38659, CVE-2025-38710, CVE-2025-39748,
CVE-2025-39764, CVE-2025-40005, CVE-2025-40016, CVE-2025-40103,
CVE-2025-40323, CVE-2025-68206, CVE-2025-68239, CVE-2025-68256,
CVE-2025-68307, CVE-2025-68358, CVE-2025-71150, CVE-2025-71161,
CVE-2025-71221, CVE-2025-71232, CVE-2025-71233, CVE-2025-71235,
CVE-2025-71236, CVE-2025-71237, CVE-2025-71238, CVE-2025-71239,
CVE-2025-71265, CVE-2025-71266, CVE-2025-71267, CVE-2025-71274,
CVE-2025-71287, CVE-2025-71292, CVE-2025-71304, CVE-2026-23031,
CVE-2026-23066, CVE-2026-23100, CVE-2026-23113, CVE-2026-23141,
CVE-2026-23157, CVE-2026-23169, CVE-2026-23204, CVE-2026-23220,
CVE-2026-23221, CVE-2026-23222, CVE-2026-23227, CVE-2026-23228,
CVE-2026-23229, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236,
CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242,
CVE-2026-23243, CVE-2026-23253, CVE-2026-23266, CVE-2026-23270,
CVE-2026-23277, CVE-2026-23279, CVE-2026-23281, CVE-2026-23286,
CVE-2026-23289, CVE-2026-23290, CVE-2026-23291, CVE-2026-23293,
CVE-2026-23296, CVE-2026-23298, CVE-2026-23300, CVE-2026-23303,
CVE-2026-23304, CVE-2026-23307, CVE-2026-23312, CVE-2026-23318,
CVE-2026-23324, CVE-2026-23335, CVE-2026-23336, CVE-2026-23339,
CVE-2026-23340, CVE-2026-23352, CVE-2026-23356, CVE-2026-23357,
CVE-2026-23359, CVE-2026-23362, CVE-2026-23365, CVE-2026-23367,
CVE-2026-23368, CVE-2026-23370, CVE-2026-23372, CVE-2026-23379,
CVE-2026-23381, CVE-2026-23382, CVE-2026-23388, CVE-2026-23391,
CVE-2026-23392, CVE-2026-23395, CVE-2026-23396, CVE-2026-23397,
CVE-2026-23398, CVE-2026-23399, CVE-2026-23401, CVE-2026-23420,
CVE-2026-23434, CVE-2026-23438, CVE-2026-23439, CVE-2026-23442,
CVE-2026-23444, CVE-2026-23446, CVE-2026-23452, CVE-2026-23454,
CVE-2026-23456, CVE-2026-23457, CVE-2026-23458, CVE-2026-23460,
CVE-2026-23462, CVE-2026-23463, CVE-2026-23474, CVE-2026-31393,
CVE-2026-31396, CVE-2026-31399, CVE-2026-31400, CVE-2026-31405,
CVE-2026-31407, CVE-2026-31408, CVE-2026-31409, CVE-2026-31411,
CVE-2026-31415, CVE-2026-31416, CVE-2026-31417, CVE-2026-31421,
CVE-2026-31422, CVE-2026-31423, CVE-2026-31424, CVE-2026-31425,
CVE-2026-31427, CVE-2026-31428, CVE-2026-31433, CVE-2026-31446,
CVE-2026-31447, CVE-2026-31450, CVE-2026-31452, CVE-2026-31454,
CVE-2026-31455, CVE-2026-31464, CVE-2026-31466, CVE-2026-31467,
CVE-2026-31469, CVE-2026-31473, CVE-2026-31476, CVE-2026-31480,
CVE-2026-31483, CVE-2026-31485, CVE-2026-31489, CVE-2026-31494,
CVE-2026-31495, CVE-2026-31497, CVE-2026-31498, CVE-2026-31507,
CVE-2026-31508, CVE-2026-31509, CVE-2026-31510, CVE-2026-31512,
CVE-2026-31515, CVE-2026-31518, CVE-2026-31521, CVE-2026-31522,
CVE-2026-31523, CVE-2026-31524, CVE-2026-31532, CVE-2026-31540,
CVE-2026-31545, CVE-2026-31546, CVE-2026-31549, CVE-2026-31550,
CVE-2026-31551, CVE-2026-31552, CVE-2026-31555, CVE-2026-31565,
CVE-2026-31570, CVE-2026-31576, CVE-2026-31577, CVE-2026-31578,
CVE-2026-31580, CVE-2026-31581, CVE-2026-31583, CVE-2026-31585,
CVE-2026-31586, CVE-2026-31588, CVE-2026-31590, CVE-2026-31594,
CVE-2026-31596, CVE-2026-31597, CVE-2026-31598, CVE-2026-31599,
CVE-2026-31602, CVE-2026-31603, CVE-2026-31605, CVE-2026-31615,
CVE-2026-31616, CVE-2026-31617, CVE-2026-31618, CVE-2026-31619,
CVE-2026-31622, CVE-2026-31623, CVE-2026-31624, CVE-2026-31625,
CVE-2026-31626, CVE-2026-31627, CVE-2026-31628, CVE-2026-31629,
CVE-2026-31630, CVE-2026-31634, CVE-2026-31642, CVE-2026-31651,
CVE-2026-31656, CVE-2026-31658, CVE-2026-31660, CVE-2026-31661,
CVE-2026-31662, CVE-2026-31664, CVE-2026-31665, CVE-2026-31667,
CVE-2026-31670, CVE-2026-31671, CVE-2026-31672, CVE-2026-31673,
CVE-2026-31674, CVE-2026-31676, CVE-2026-31679, CVE-2026-31680,
CVE-2026-31681, CVE-2026-31683, CVE-2026-31684, CVE-2026-31686,
CVE-2026-31687, CVE-2026-31694, CVE-2026-31695, CVE-2026-31696,
CVE-2026-31697, CVE-2026-31698, CVE-2026-31699, CVE-2026-31701,
CVE-2026-31716, CVE-2026-31720, CVE-2026-31721, CVE-2026-31726,
CVE-2026-31728, CVE-2026-31737, CVE-2026-31738, CVE-2026-31747,
CVE-2026-31748, CVE-2026-31749, CVE-2026-31751, CVE-2026-31752,
CVE-2026-31754, CVE-2026-31755, CVE-2026-31756, CVE-2026-31758,
CVE-2026-31759, CVE-2026-31761, CVE-2026-31762, CVE-2026-31763,
CVE-2026-31770, CVE-2026-31773, CVE-2026-31778, CVE-2026-31780,
CVE-2026-31781, CVE-2026-31788, CVE-2026-43014, CVE-2026-43015,
CVE-2026-43020, CVE-2026-43024, CVE-2026-43026, CVE-2026-43027,
CVE-2026-43028, CVE-2026-43030, CVE-2026-43032, CVE-2026-43035,
CVE-2026-43040, CVE-2026-43041, CVE-2026-43043, CVE-2026-43046,
CVE-2026-43047, CVE-2026-43050, CVE-2026-43051, CVE-2026-43052,
CVE-2026-43054, CVE-2026-43058, CVE-2026-43060, CVE-2026-43061,
CVE-2026-43062, CVE-2026-43065, CVE-2026-43066, CVE-2026-43068,
CVE-2026-43069, CVE-2026-43074, CVE-2026-43075, CVE-2026-43076,
CVE-2026-43079, CVE-2026-43080, CVE-2026-43085, CVE-2026-43089,
CVE-2026-43093, CVE-2026-43098, CVE-2026-43099, CVE-2026-43103,
CVE-2026-43104, CVE-2026-43105, CVE-2026-43110, CVE-2026-43111,
CVE-2026-43112, CVE-2026-43113, CVE-2026-43123, CVE-2026-43124,
CVE-2026-43130, CVE-2026-43132, CVE-2026-43133, CVE-2026-43134,
CVE-2026-43135, CVE-2026-43136, CVE-2026-43139, CVE-2026-43140,
CVE-2026-43141, CVE-2026-43145, CVE-2026-43147, CVE-2026-43148,
CVE-2026-43149, CVE-2026-43152, CVE-2026-43156, CVE-2026-43158,
CVE-2026-43159, CVE-2026-43163, CVE-2026-43168, CVE-2026-43171,
CVE-2026-43180, CVE-2026-43182, CVE-2026-43183, CVE-2026-43184,
CVE-2026-43187, CVE-2026-43190, CVE-2026-43194, CVE-2026-43196,
CVE-2026-43200, CVE-2026-43202, CVE-2026-43203, CVE-2026-43205,
CVE-2026-43206, CVE-2026-43207, CVE-2026-43209, CVE-2026-43211,
CVE-2026-43218, CVE-2026-43223, CVE-2026-43225, CVE-2026-43226,
CVE-2026-43227, CVE-2026-43230, CVE-2026-43231, CVE-2026-43232,
CVE-2026-43233, CVE-2026-43236, CVE-2026-43241, CVE-2026-43242,
CVE-2026-43246, CVE-2026-43251, CVE-2026-43255, CVE-2026-43257,
CVE-2026-43261, CVE-2026-43262, CVE-2026-43264, CVE-2026-43266,
CVE-2026-43268, CVE-2026-43269, CVE-2026-43270, CVE-2026-43273,
CVE-2026-43275, CVE-2026-43277, CVE-2026-43279, CVE-2026-43281,
CVE-2026-43283, CVE-2026-43287, CVE-2026-43289, CVE-2026-43291,
CVE-2026-43295, CVE-2026-43296, CVE-2026-43302, CVE-2026-43312,
CVE-2026-43313, CVE-2026-43314, CVE-2026-43315, CVE-2026-43316,
CVE-2026-43324, CVE-2026-43327, CVE-2026-43328, CVE-2026-43329,
CVE-2026-43333, CVE-2026-43334, CVE-2026-43336, CVE-2026-43339,
CVE-2026-43340, CVE-2026-43342, CVE-2026-43343, CVE-2026-43357,
CVE-2026-43363, CVE-2026-43365, CVE-2026-43370, CVE-2026-43373,
CVE-2026-43380, CVE-2026-43381, CVE-2026-43382, CVE-2026-43386,
CVE-2026-43387, CVE-2026-43405, CVE-2026-43411, CVE-2026-43420,
CVE-2026-43425, CVE-2026-43426, CVE-2026-43427, CVE-2026-43428,
CVE-2026-43429, CVE-2026-43430, CVE-2026-43432, CVE-2026-43439,
CVE-2026-43445, CVE-2026-43449, CVE-2026-43450, CVE-2026-43451,
CVE-2026-43452, CVE-2026-43453, CVE-2026-43458, CVE-2026-43459,
CVE-2026-43466, CVE-2026-43469, CVE-2026-43472, CVE-2026-43473,
CVE-2026-43475, CVE-2026-43476, CVE-2026-43480, CVE-2026-43484,
CVE-2026-43496, CVE-2026-43497, CVE-2026-43502, CVE-2026-45834,
CVE-2026-45835, CVE-2026-45836, CVE-2026-45838, CVE-2026-45839,
CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843,
CVE-2026-45844, CVE-2026-45846, CVE-2026-45847, CVE-2026-45848,
CVE-2026-45852, CVE-2026-45856, CVE-2026-45857, CVE-2026-45860,
CVE-2026-45862, CVE-2026-45864, CVE-2026-45866, CVE-2026-45867,
CVE-2026-45868, CVE-2026-45869, CVE-2026-45870, CVE-2026-45871,
CVE-2026-45873, CVE-2026-45875, CVE-2026-45879, CVE-2026-45883,
CVE-2026-45885, CVE-2026-45890, CVE-2026-45891, CVE-2026-45899,
CVE-2026-45902, CVE-2026-45904, CVE-2026-45911, CVE-2026-45912,
CVE-2026-45915, CVE-2026-45916, CVE-2026-45919, CVE-2026-45920,
CVE-2026-45924, CVE-2026-45935, CVE-2026-45936, CVE-2026-45941,
CVE-2026-45946, CVE-2026-45948, CVE-2026-45954, CVE-2026-45956,
CVE-2026-45958, CVE-2026-45960, CVE-2026-45964, CVE-2026-45965,
CVE-2026-45968, CVE-2026-45969, CVE-2026-45970, CVE-2026-45974,
CVE-2026-45978, CVE-2026-45983, CVE-2026-45984, CVE-2026-45985,
CVE-2026-45986, CVE-2026-45987, CVE-2026-45994, CVE-2026-46002,
CVE-2026-46004, CVE-2026-46006, CVE-2026-46009, CVE-2026-46015,
CVE-2026-46018, CVE-2026-46019, CVE-2026-46022, CVE-2026-46023,
CVE-2026-46024, CVE-2026-46027, CVE-2026-46033, CVE-2026-46037,
CVE-2026-46040, CVE-2026-46044, CVE-2026-46046, CVE-2026-46047,
CVE-2026-46049, CVE-2026-46050, CVE-2026-46051, CVE-2026-46053,
CVE-2026-46062, CVE-2026-46064, CVE-2026-46070, CVE-2026-46072,
CVE-2026-46077, CVE-2026-46080, CVE-2026-46082, CVE-2026-46088,
CVE-2026-46098, CVE-2026-46099, CVE-2026-46101, CVE-2026-46102,
CVE-2026-46107, CVE-2026-46108, CVE-2026-46112, CVE-2026-46120,
CVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46127,
CVE-2026-46128, CVE-2026-46132, CVE-2026-46133, CVE-2026-46137,
CVE-2026-46146, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151,
CVE-2026-46161, CVE-2026-46163, CVE-2026-46167, CVE-2026-46168,
CVE-2026-46172, CVE-2026-46174, CVE-2026-46177, CVE-2026-46178,
CVE-2026-46184, CVE-2026-46186, CVE-2026-46187, CVE-2026-46189,
CVE-2026-46197, CVE-2026-46198, CVE-2026-46205, CVE-2026-46206,
CVE-2026-46209, CVE-2026-46212, CVE-2026-46214, CVE-2026-46219,
CVE-2026-46220, CVE-2026-46227, CVE-2026-46230, CVE-2026-46231,
CVE-2026-46233, CVE-2026-46234, CVE-2026-46236, CVE-2026-46238,
CVE-2026-46249, CVE-2026-46250, CVE-2026-46253, CVE-2026-46259,
CVE-2026-46267, CVE-2026-46270, CVE-2026-46273, CVE-2026-46274,
CVE-2026-46275, CVE-2026-46285, CVE-2026-46294, CVE-2026-46301,
CVE-2026-46303, CVE-2026-46304, CVE-2026-46307, CVE-2026-46319,
CVE-2026-46328, CVE-2026-52911, CVE-2026-52912, CVE-2026-52914,
CVE-2026-52915, CVE-2026-52916, CVE-2026-52919, CVE-2026-52920,
CVE-2026-52921, CVE-2026-52922, CVE-2026-52925, CVE-2026-52926,
CVE-2026-52931, CVE-2026-52954, CVE-2026-52955, CVE-2026-52957,
CVE-2026-52958, CVE-2026-52962, CVE-2026-52963, CVE-2026-52969,
CVE-2026-52970, CVE-2026-52982, CVE-2026-52984, CVE-2026-52985,
CVE-2026-52986, CVE-2026-52992, CVE-2026-52993, CVE-2026-52995,
CVE-2026-52998, CVE-2026-52999, CVE-2026-53001, CVE-2026-53002,
CVE-2026-53003, CVE-2026-53004, CVE-2026-53006, CVE-2026-53011,
CVE-2026-53012, CVE-2026-53016, CVE-2026-53021, CVE-2026-53022,
CVE-2026-53023, CVE-2026-53037, CVE-2026-53039, CVE-2026-53040,
CVE-2026-53041, CVE-2026-53043, CVE-2026-53045, CVE-2026-53046,
CVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050,
CVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062,
CVE-2026-53064, CVE-2026-53065, CVE-2026-53068, CVE-2026-53069,
CVE-2026-53071, CVE-2026-53072, CVE-2026-53073, CVE-2026-53074,
CVE-2026-53075, CVE-2026-53077, CVE-2026-53082, CVE-2026-53088,
CVE-2026-53093, CVE-2026-53096, CVE-2026-53112, CVE-2026-53128,
CVE-2026-53130, CVE-2026-53287, CVE-2026-53291, CVE-2026-53294,
CVE-2026-53295, CVE-2026-53296, CVE-2026-53304, CVE-2026-53306,
CVE-2026-53309, CVE-2026-53320, CVE-2026-53369, CVE-2026-53379,
CVE-2026-63860, CVE-2026-63865, CVE-2026-64018, CVE-2026-64032,
CVE-2026-64033, CVE-2026-64034, CVE-2026-64039, CVE-2026-64046,
CVE-2026-64047, CVE-2026-64055, CVE-2026-64056, CVE-2026-64083,
CVE-2026-64084, CVE-2026-64085, CVE-2026-64086, CVE-2026-64087,
CVE-2026-64088, CVE-2026-64089, CVE-2026-64096, CVE-2026-64102,
CVE-2026-64103, CVE-2026-64113, CVE-2026-64114, CVE-2026-64115,
CVE-2026-64125, CVE-2026-64133, CVE-2026-64135, CVE-2026-64153,
CVE-2026-64155, CVE-2026-64164, CVE-2026-64165, CVE-2026-64166,
CVE-2026-64168, CVE-2026-64173, CVE-2026-64174, CVE-2026-64177,
CVE-2026-64178, CVE-2026-64179, CVE-2026-64185, CVE-2026-64218,
CVE-2026-64219, CVE-2026-64220, CVE-2026-64221)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS
linux-image-5.15.0-1117-azure-fips 5.15.0-1117.126+fips1
Available with Ubuntu Pro
linux-image-azure-fips 5.15.0.1117.102
Available with Ubuntu Pro
linux-image-azure-fips-5.15 5.15.0.1117.102
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8620-2
https://ubuntu.com/security/notices/USN-8620-1
CVE-2022-49803, CVE-2022-49961, CVE-2022-50073, CVE-2022-50116,
CVE-2022-50552, CVE-2023-45896, CVE-2023-52682, CVE-2023-52737,
CVE-2023-53545, CVE-2023-53596, CVE-2023-53629, CVE-2024-27389,
CVE-2024-35865, CVE-2024-36898, CVE-2024-36922, CVE-2024-41079,
CVE-2024-46715, CVE-2024-46770, CVE-2024-47809, CVE-2024-50012,
CVE-2024-53221, CVE-2024-56557, CVE-2024-56584, CVE-2024-56657,
CVE-2024-56719, CVE-2024-56727, CVE-2025-21712, CVE-2025-21739,
CVE-2025-21863, CVE-2025-22107, CVE-2025-23141, CVE-2025-37786,
CVE-2025-38006, CVE-2025-38105, CVE-2025-38192, CVE-2025-38250,
CVE-2025-38562, CVE-2025-38626, CVE-2025-38659, CVE-2025-38710,
CVE-2025-39748, CVE-2025-39764, CVE-2025-40005, CVE-2025-40016,
CVE-2025-40103, CVE-2025-40323, CVE-2025-54505, CVE-2025-54518,
CVE-2025-68206, CVE-2025-68239, CVE-2025-68256, CVE-2025-68307,
CVE-2025-68358, CVE-2025-71150, CVE-2025-71161, CVE-2025-71221,
CVE-2025-71232, CVE-2025-71233, CVE-2025-71235, CVE-2025-71236,
CVE-2025-71237, CVE-2025-71238, CVE-2025-71239, CVE-2025-71265,
CVE-2025-71266, CVE-2025-71267, CVE-2025-71274, CVE-2025-71287,
CVE-2025-71292, CVE-2025-71304, CVE-2026-23031, CVE-2026-23066,
CVE-2026-23100, CVE-2026-23113, CVE-2026-23141, CVE-2026-23157,
CVE-2026-23169, CVE-2026-23204, CVE-2026-23220, CVE-2026-23221,
CVE-2026-23222, CVE-2026-23227, CVE-2026-23228, CVE-2026-23229,
CVE-2026-23234, CVE-2026-23235, CVE-2026-23236, CVE-2026-23237,
CVE-2026-23238, CVE-2026-23241, CVE-2026-23242, CVE-2026-23243,
CVE-2026-23253, CVE-2026-23266, CVE-2026-23270, CVE-2026-23277,
CVE-2026-23279, CVE-2026-23281, CVE-2026-23286, CVE-2026-23289,
CVE-2026-23290, CVE-2026-23291, CVE-2026-23293, CVE-2026-23296,
CVE-2026-23298, CVE-2026-23300, CVE-2026-23303, CVE-2026-23304,
CVE-2026-23307, CVE-2026-23312, CVE-2026-23318, CVE-2026-23324,
CVE-2026-23335, CVE-2026-23336, CVE-2026-23339, CVE-2026-23340,
CVE-2026-23352, CVE-2026-23356, CVE-2026-23357, CVE-2026-23359,
CVE-2026-23362, CVE-2026-23365, CVE-2026-23367, CVE-2026-23368,
CVE-2026-23370, CVE-2026-23372, CVE-2026-23379, CVE-2026-23381,
CVE-2026-23382, CVE-2026-23388, CVE-2026-23391, CVE-2026-23392,
CVE-2026-23395, CVE-2026-23396, CVE-2026-23397, CVE-2026-23398,
CVE-2026-23399, CVE-2026-23401, CVE-2026-23420, CVE-2026-23434,
CVE-2026-23438, CVE-2026-23439, CVE-2026-23442, CVE-2026-23444,
CVE-2026-23446, CVE-2026-23452, CVE-2026-23454, CVE-2026-23456,
CVE-2026-23457, CVE-2026-23458, CVE-2026-23460, CVE-2026-23462,
CVE-2026-23463, CVE-2026-23474, CVE-2026-31393, CVE-2026-31396,
CVE-2026-31399, CVE-2026-31400, CVE-2026-31405, CVE-2026-31407,
CVE-2026-31408, CVE-2026-31409, CVE-2026-31411, CVE-2026-31415,
CVE-2026-31416, CVE-2026-31417, CVE-2026-31421, CVE-2026-31422,
CVE-2026-31423, CVE-2026-31424, CVE-2026-31425, CVE-2026-31427,
CVE-2026-31428, CVE-2026-31433, CVE-2026-31446, CVE-2026-31447,
CVE-2026-31450, CVE-2026-31452, CVE-2026-31454, CVE-2026-31455,
CVE-2026-31464, CVE-2026-31466, CVE-2026-31467, CVE-2026-31469,
CVE-2026-31473, CVE-2026-31476, CVE-2026-31480, CVE-2026-31483,
CVE-2026-31485, CVE-2026-31489, CVE-2026-31494, CVE-2026-31495,
CVE-2026-31497, CVE-2026-31498, CVE-2026-31507, CVE-2026-31508,
CVE-2026-31509, CVE-2026-31510, CVE-2026-31512, CVE-2026-31515,
CVE-2026-31518, CVE-2026-31521, CVE-2026-31522, CVE-2026-31523,
CVE-2026-31524, CVE-2026-31532, CVE-2026-31540, CVE-2026-31545,
CVE-2026-31546, CVE-2026-31549, CVE-2026-31550, CVE-2026-31551,
CVE-2026-31552, CVE-2026-31555, CVE-2026-31565, CVE-2026-31570,
CVE-2026-31576, CVE-2026-31577, CVE-2026-31578, CVE-2026-31580,
CVE-2026-31581, CVE-2026-31583, CVE-2026-31585, CVE-2026-31586,
CVE-2026-31588, CVE-2026-31590, CVE-2026-31594, CVE-2026-31596,
CVE-2026-31597, CVE-2026-31598, CVE-2026-31599, CVE-2026-31602,
CVE-2026-31603, CVE-2026-31605, CVE-2026-31615, CVE-2026-31616,
CVE-2026-31617, CVE-2026-31618, CVE-2026-31619, CVE-2026-31622,
CVE-2026-31623, CVE-2026-31624, CVE-2026-31625, CVE-2026-31626,
CVE-2026-31627, CVE-2026-31628, CVE-2026-31629, CVE-2026-31630,
CVE-2026-31634, CVE-2026-31642, CVE-2026-31651, CVE-2026-31656,
CVE-2026-31658, CVE-2026-31660, CVE-2026-31661, CVE-2026-31662,
CVE-2026-31664, CVE-2026-31665, CVE-2026-31667, CVE-2026-31670,
CVE-2026-31671, CVE-2026-31672, CVE-2026-31673, CVE-2026-31674,
CVE-2026-31676, CVE-2026-31679, CVE-2026-31680, CVE-2026-31681,
CVE-2026-31683, CVE-2026-31684, CVE-2026-31686, CVE-2026-31687,
CVE-2026-31694, CVE-2026-31695, CVE-2026-31696, CVE-2026-31697,
CVE-2026-31698, CVE-2026-31699, CVE-2026-31701, CVE-2026-31716,
CVE-2026-31720, CVE-2026-31721, CVE-2026-31726, CVE-2026-31728,
CVE-2026-31737, CVE-2026-31738, CVE-2026-31747, CVE-2026-31748,
CVE-2026-31749, CVE-2026-31751, CVE-2026-31752, CVE-2026-31754,
CVE-2026-31755, CVE-2026-31756, CVE-2026-31758, CVE-2026-31759,
CVE-2026-31761, CVE-2026-31762, CVE-2026-31763, CVE-2026-31770,
CVE-2026-31773, CVE-2026-31778, CVE-2026-31780, CVE-2026-31781,
CVE-2026-31788, CVE-2026-43014, CVE-2026-43015, CVE-2026-43020,
CVE-2026-43024, CVE-2026-43026, CVE-2026-43027, CVE-2026-43028,
CVE-2026-43030, CVE-2026-43032, CVE-2026-43035, CVE-2026-43040,
CVE-2026-43041, CVE-2026-43043, CVE-2026-43046, CVE-2026-43047,
CVE-2026-43050, CVE-2026-43051, CVE-2026-43052, CVE-2026-43054,
CVE-2026-43058, CVE-2026-43060, CVE-2026-43061, CVE-2026-43062,
CVE-2026-43065, CVE-2026-43066, CVE-2026-43068, CVE-2026-43069,
CVE-2026-43074, CVE-2026-43075, CVE-2026-43076, CVE-2026-43079,
CVE-2026-43080, CVE-2026-43085, CVE-2026-43089, CVE-2026-43093,
CVE-2026-43098, CVE-2026-43099, CVE-2026-43103, CVE-2026-43104,
CVE-2026-43105, CVE-2026-43110, CVE-2026-43111, CVE-2026-43112,
CVE-2026-43113, CVE-2026-43123, CVE-2026-43124, CVE-2026-43130,
CVE-2026-43132, CVE-2026-43133, CVE-2026-43134, CVE-2026-43135,
CVE-2026-43136, CVE-2026-43139, CVE-2026-43140, CVE-2026-43141,
CVE-2026-43145, CVE-2026-43147, CVE-2026-43148, CVE-2026-43149,
CVE-2026-43152, CVE-2026-43156, CVE-2026-43158, CVE-2026-43159,
CVE-2026-43163, CVE-2026-43168, CVE-2026-43171, CVE-2026-43180,
CVE-2026-43182, CVE-2026-43183, CVE-2026-43184, CVE-2026-43187,
CVE-2026-43190, CVE-2026-43194, CVE-2026-43196, CVE-2026-43200,
CVE-2026-43202, CVE-2026-43203, CVE-2026-43205, CVE-2026-43206,
CVE-2026-43207, CVE-2026-43209, CVE-2026-43211, CVE-2026-43218,
CVE-2026-43223, CVE-2026-43225, CVE-2026-43226, CVE-2026-43227,
CVE-2026-43230, CVE-2026-43231, CVE-2026-43232, CVE-2026-43233,
CVE-2026-43236, CVE-2026-43241, CVE-2026-43242, CVE-2026-43246,
CVE-2026-43251, CVE-2026-43255, CVE-2026-43257, CVE-2026-43261,
CVE-2026-43262, CVE-2026-43264, CVE-2026-43266, CVE-2026-43268,
CVE-2026-43269, CVE-2026-43270, CVE-2026-43273, CVE-2026-43275,
CVE-2026-43277, CVE-2026-43279, CVE-2026-43281, CVE-2026-43283,
CVE-2026-43287, CVE-2026-43289, CVE-2026-43291, CVE-2026-43295,
CVE-2026-43296, CVE-2026-43302, CVE-2026-43312, CVE-2026-43313,
CVE-2026-43314, CVE-2026-43315, CVE-2026-43316, CVE-2026-43324,
CVE-2026-43327, CVE-2026-43328, CVE-2026-43329, CVE-2026-43333,
CVE-2026-43334, CVE-2026-43336, CVE-2026-43339, CVE-2026-43340,
CVE-2026-43342, CVE-2026-43343, CVE-2026-43357, CVE-2026-43363,
CVE-2026-43365, CVE-2026-43370, CVE-2026-43373, CVE-2026-43380,
CVE-2026-43381, CVE-2026-43382, CVE-2026-43386, CVE-2026-43387,
CVE-2026-43405, CVE-2026-43411, CVE-2026-43420, CVE-2026-43425,
CVE-2026-43426, CVE-2026-43427, CVE-2026-43428, CVE-2026-43429,
CVE-2026-43430, CVE-2026-43432, CVE-2026-43439, CVE-2026-43445,
CVE-2026-43449, CVE-2026-43450, CVE-2026-43451, CVE-2026-43452,
CVE-2026-43453, CVE-2026-43458, CVE-2026-43459, CVE-2026-43466,
CVE-2026-43469, CVE-2026-43472, CVE-2026-43473, CVE-2026-43475,
CVE-2026-43476, CVE-2026-43480, CVE-2026-43484, CVE-2026-43496,
CVE-2026-43497, CVE-2026-43502, CVE-2026-45834, CVE-2026-45835,
CVE-2026-45836, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840,
CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844,
CVE-2026-45846, CVE-2026-45847, CVE-2026-45848, CVE-2026-45852,
CVE-2026-45856, CVE-2026-45857, CVE-2026-45860, CVE-2026-45862,
CVE-2026-45864, CVE-2026-45866, CVE-2026-45867, CVE-2026-45868,
CVE-2026-45869, CVE-2026-45870, CVE-2026-45871, CVE-2026-45873,
CVE-2026-45875, CVE-2026-45879, CVE-2026-45883, CVE-2026-45885,
CVE-2026-45890, CVE-2026-45891, CVE-2026-45899, CVE-2026-45902,
CVE-2026-45904, CVE-2026-45911, CVE-2026-45912, CVE-2026-45915,
CVE-2026-45916, CVE-2026-45919, CVE-2026-45920, CVE-2026-45924,
CVE-2026-45935, CVE-2026-45936, CVE-2026-45941, CVE-2026-45946,
CVE-2026-45948, CVE-2026-45954, CVE-2026-45956, CVE-2026-45958,
CVE-2026-45960, CVE-2026-45964, CVE-2026-45965, CVE-2026-45968,
CVE-2026-45969, CVE-2026-45970, CVE-2026-45974, CVE-2026-45978,
CVE-2026-45983, CVE-2026-45984, CVE-2026-45985, CVE-2026-45986,
CVE-2026-45987, CVE-2026-45994, CVE-2026-46002, CVE-2026-46004,
CVE-2026-46006, CVE-2026-46009, CVE-2026-46015, CVE-2026-46018,
CVE-2026-46019, CVE-2026-46022, CVE-2026-46023, CVE-2026-46024,
CVE-2026-46027, CVE-2026-46033, CVE-2026-46037, CVE-2026-46040,
CVE-2026-46044, CVE-2026-46046, CVE-2026-46047, CVE-2026-46049,
CVE-2026-46050, CVE-2026-46051, CVE-2026-46053, CVE-2026-46062,
CVE-2026-46064, CVE-2026-46070, CVE-2026-46072, CVE-2026-46077,
CVE-2026-46080, CVE-2026-46082, CVE-2026-46088, CVE-2026-46098,
CVE-2026-46099, CVE-2026-46101, CVE-2026-46102, CVE-2026-46107,
CVE-2026-46108, CVE-2026-46112, CVE-2026-46120, CVE-2026-46122,
CVE-2026-46123, CVE-2026-46124, CVE-2026-46127, CVE-2026-46128,
CVE-2026-46132, CVE-2026-46133, CVE-2026-46137, CVE-2026-46146,
CVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46161,
CVE-2026-46163, CVE-2026-46167, CVE-2026-46168, CVE-2026-46172,
CVE-2026-46174, CVE-2026-46177, CVE-2026-46178, CVE-2026-46184,
CVE-2026-46186, CVE-2026-46187, CVE-2026-46189, CVE-2026-46197,
CVE-2026-46198, CVE-2026-46205, CVE-2026-46206, CVE-2026-46209,
CVE-2026-46212, CVE-2026-46214, CVE-2026-46219, CVE-2026-46220,
CVE-2026-46227, CVE-2026-46230, CVE-2026-46231, CVE-2026-46233,
CVE-2026-46234, CVE-2026-46236, CVE-2026-46238, CVE-2026-46249,
CVE-2026-46250, CVE-2026-46253, CVE-2026-46259, CVE-2026-46267,
CVE-2026-46270, CVE-2026-46273, CVE-2026-46274, CVE-2026-46275,
CVE-2026-46285, CVE-2026-46294, CVE-2026-46301, CVE-2026-46303,
CVE-2026-46304, CVE-2026-46307, CVE-2026-46319, CVE-2026-46328,
CVE-2026-52911, CVE-2026-52912, CVE-2026-52914, CVE-2026-52915,
CVE-2026-52916, CVE-2026-52919, CVE-2026-52920, CVE-2026-52921,
CVE-2026-52922, CVE-2026-52925, CVE-2026-52926, CVE-2026-52931,
CVE-2026-52954, CVE-2026-52955, CVE-2026-52957, CVE-2026-52958,
CVE-2026-52962, CVE-2026-52963, CVE-2026-52969, CVE-2026-52970,
CVE-2026-52982, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986,
CVE-2026-52992, CVE-2026-52993, CVE-2026-52995, CVE-2026-52998,
CVE-2026-52999, CVE-2026-53001, CVE-2026-53002, CVE-2026-53003,
CVE-2026-53004, CVE-2026-53006, CVE-2026-53011, CVE-2026-53012,
CVE-2026-53016, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023,
CVE-2026-53037, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041,
CVE-2026-53043, CVE-2026-53045, CVE-2026-53046, CVE-2026-53047,
CVE-2026-53048, CVE-2026-53049, CVE-2026-53050, CVE-2026-53059,
CVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53064,
CVE-2026-53065, CVE-2026-53068, CVE-2026-53069, CVE-2026-53071,
CVE-2026-53072, CVE-2026-53073, CVE-2026-53074, CVE-2026-53075,
CVE-2026-53077, CVE-2026-53082, CVE-2026-53088, CVE-2026-53093,
CVE-2026-53096, CVE-2026-53112, CVE-2026-53128, CVE-2026-53130,
CVE-2026-53287, CVE-2026-53291, CVE-2026-53294, CVE-2026-53295,
CVE-2026-53296, CVE-2026-53304, CVE-2026-53306, CVE-2026-53309,
CVE-2026-53320, CVE-2026-53369, CVE-2026-53379, CVE-2026-63860,
CVE-2026-63865, CVE-2026-64018, CVE-2026-64032, CVE-2026-64033,
CVE-2026-64034, CVE-2026-64039, CVE-2026-64046, CVE-2026-64047,
CVE-2026-64055, CVE-2026-64056, CVE-2026-64083, CVE-2026-64084,
CVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088,
CVE-2026-64089, CVE-2026-64096, CVE-2026-64102, CVE-2026-64103,
CVE-2026-64113, CVE-2026-64114, CVE-2026-64115, CVE-2026-64125,
CVE-2026-64133, CVE-2026-64135, CVE-2026-64153, CVE-2026-64155,
CVE-2026-64164, CVE-2026-64165, CVE-2026-64166, CVE-2026-64168,
CVE-2026-64173, CVE-2026-64174, CVE-2026-64177, CVE-2026-64178,
CVE-2026-64179, CVE-2026-64185, CVE-2026-64218, CVE-2026-64219,
CVE-2026-64220, CVE-2026-64221
Package Information:
https://launchpad.net/ubuntu/+source/linux-azure-fips/5.15.0-1117.126+fips1
[USN-8547-2] Linux kernel (Azure FIPS) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8547-2
July 28, 2026
linux-azure-fips vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS
Details:
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- RISC-V architecture;
- Cryptographic API;
- InfiniBand drivers;
- IOMMU subsystem;
- Network drivers;
- STMicroelectronics network drivers;
- NVME drivers;
- x86 platform drivers;
- SCSI subsystem;
- SPI subsystem;
- TCM subsystem;
- USB over IP driver;
- File systems infrastructure;
- HFS+ file system;
- Network file system (NFS) server daemon;
- SMB network file system;
- IPv6 networking;
- Tracing infrastructure;
- Timer subsystem;
- B.A.T.M.A.N. meshing protocol;
- Bluetooth subsystem;
- Ethernet bridge;
- Ceph Core library;
- IPv4 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- RxRPC session sockets;
- SMC sockets;
- Sun RPC protocol;
- X.25 network layer;
- AMD SoC Alsa drivers;
- KVM subsystem;
(CVE-2022-48816, CVE-2023-53673, CVE-2025-37778, CVE-2025-37822,
CVE-2025-37924, CVE-2025-38201, CVE-2025-40082, CVE-2025-68214,
CVE-2025-68263, CVE-2025-71089, CVE-2025-71220, CVE-2025-71222,
CVE-2025-71224, CVE-2026-23176, CVE-2026-23180, CVE-2026-23182,
CVE-2026-23190, CVE-2026-23193, CVE-2026-23198, CVE-2026-23202,
CVE-2026-23206, CVE-2026-23216, CVE-2026-23256, CVE-2026-23257,
CVE-2026-23258, CVE-2026-23262, CVE-2026-23272, CVE-2026-23278,
CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402,
CVE-2026-31418, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,
CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668,
CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-43011,
CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114,
CVE-2026-43117, CVE-2026-43185, CVE-2026-43186, CVE-2026-43304,
CVE-2026-43341, CVE-2026-43383, CVE-2026-43406, CVE-2026-43407,
CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45988,
CVE-2026-46043, CVE-2026-46119, CVE-2026-46135, CVE-2026-46195,
CVE-2026-46243)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 22.04 LTS
linux-image-5.15.0-1116-azure-fips 5.15.0-1116.125+fips1
Available with Ubuntu Pro
linux-image-azure-fips 5.15.0.1116.101
Available with Ubuntu Pro
linux-image-azure-fips-5.15 5.15.0.1116.101
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8547-2
https://ubuntu.com/security/notices/USN-8547-1
CVE-2022-48816, CVE-2023-53673, CVE-2025-37778, CVE-2025-37822,
CVE-2025-37924, CVE-2025-38201, CVE-2025-40082, CVE-2025-68214,
CVE-2025-68263, CVE-2025-71089, CVE-2025-71220, CVE-2025-71222,
CVE-2025-71224, CVE-2026-23176, CVE-2026-23180, CVE-2026-23182,
CVE-2026-23190, CVE-2026-23193, CVE-2026-23198, CVE-2026-23202,
CVE-2026-23206, CVE-2026-23216, CVE-2026-23256, CVE-2026-23257,
CVE-2026-23258, CVE-2026-23262, CVE-2026-23272, CVE-2026-23278,
CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402,
CVE-2026-31418, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,
CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668,
CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-43011,
CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114,
CVE-2026-43117, CVE-2026-43185, CVE-2026-43186, CVE-2026-43304,
CVE-2026-43341, CVE-2026-43383, CVE-2026-43406, CVE-2026-43407,
CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45988,
CVE-2026-46043, CVE-2026-46119, CVE-2026-46135, CVE-2026-46195,
CVE-2026-46243
Package Information:
https://launchpad.net/ubuntu/+source/linux-azure-fips/5.15.0-1116.125+fips1
[USN-8615-2] Linux kernel (Raspberry Pi) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8615-2
July 29, 2026
linux-raspi, linux-raspi-5.4 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-raspi: Linux kernel for Raspberry Pi systems
- linux-raspi-5.4: Linux kernel for Raspberry Pi systems
Details:
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- STMicroelectronics network drivers;
- NVME drivers;
- SCSI subsystem;
- USB over IP driver;
- Network file system (NFS) server daemon;
- SMB network file system;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RxRPC session sockets;
- X.25 network layer;
(CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418,
CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31659,
CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037,
CVE-2026-43038, CVE-2026-43117, CVE-2026-43383, CVE-2026-43407,
CVE-2026-43414, CVE-2026-45988, CVE-2026-46043, CVE-2026-46119,
CVE-2026-46135, CVE-2026-46243)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
linux-image-5.4.0-1144-raspi 5.4.0-1144.157
Available with Ubuntu Pro
linux-image-raspi 5.4.0.1144.175
Available with Ubuntu Pro
linux-image-raspi-5.4 5.4.0.1144.175
Available with Ubuntu Pro
linux-image-raspi2 5.4.0.1144.175
Available with Ubuntu Pro
Ubuntu 18.04 LTS
linux-image-5.4.0-1144-raspi 5.4.0-1144.157~18.04.1
Available with Ubuntu Pro
linux-image-raspi-5.4 5.4.0.1144.157~18.04.1
Available with Ubuntu Pro
linux-image-raspi-hwe-18.04 5.4.0.1144.157~18.04.1
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8615-2
https://ubuntu.com/security/notices/USN-8615-1
CVE-2026-23272, CVE-2026-23455, CVE-2026-31402, CVE-2026-31418,
CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31659,
CVE-2026-31682, CVE-2026-31685, CVE-2026-43011, CVE-2026-43037,
CVE-2026-43038, CVE-2026-43117, CVE-2026-43383, CVE-2026-43407,
CVE-2026-43414, CVE-2026-43503, CVE-2026-45988, CVE-2026-46043,
CVE-2026-46119, CVE-2026-46135, CVE-2026-46243
[USN-8617-1] Linux kernel (KVM) vulnerabilities
==========================================================================
Ubuntu Security Notice USN-8617-1
July 28, 2026
linux-kvm vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 20.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-kvm: Linux kernel for cloud environments
Details:
It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- InfiniBand drivers;
- STMicroelectronics network drivers;
- SCSI subsystem;
- USB over IP driver;
- SMB network file system;
- Tracing infrastructure;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Ceph Core library;
- IPv4 networking;
- IPv6 networking;
- Netfilter;
- RxRPC session sockets;
- X.25 network layer;
(CVE-2026-23272, CVE-2026-23455, CVE-2026-31418, CVE-2026-31607,
CVE-2026-31637, CVE-2026-31649, CVE-2026-31659, CVE-2026-31682,
CVE-2026-31685, CVE-2026-43011, CVE-2026-43038, CVE-2026-43117,
CVE-2026-43383, CVE-2026-43407, CVE-2026-43414, CVE-2026-46043,
CVE-2026-46243)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 20.04 LTS
linux-image-5.4.0-1148-kvm 5.4.0-1148.157
Available with Ubuntu Pro
linux-image-kvm 5.4.0.1148.144
Available with Ubuntu Pro
linux-image-kvm-5.4 5.4.0.1148.144
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8617-1
CVE-2026-23272, CVE-2026-23455, CVE-2026-31418, CVE-2026-31607,
CVE-2026-31637, CVE-2026-31649, CVE-2026-31659, CVE-2026-31682,
CVE-2026-31685, CVE-2026-43011, CVE-2026-43038, CVE-2026-43117,
CVE-2026-43383, CVE-2026-43407, CVE-2026-43414, CVE-2026-43503,
CVE-2026-46043, CVE-2026-46243
