Ubuntu released a batch of security updates that address critical flaws across dozens of packages and multiple distribution versions. The Linux kernel receives the most extensive patching, covering specialized builds for cloud providers like Azure and AWS alongside standard desktop releases. Several widely used utilities and libraries also get fixed, including dpkg, vim, libpng, and PostfixAdmin, which previously allowed attackers to trigger crashes or execute malicious code through crafted files. Administrators should run their regular system upgrades immediately since most of these patches require a simple reboot to fully take effect.

[USN-8240-1] Swish-e vulnerabilities
[USN-8236-1] Slurm vulnerabilities
[USN-8245-1] Linux kernel vulnerabilities
[USN-8244-1] Linux kernel vulnerabilities
[USN-8241-1] Coin3D vulnerabilities
[USN-8243-1] Linux kernel (Azure) vulnerabilities
[USN-8235-1] ITK vulnerabilities
[USN-8179-4] Linux kernel (GCP) vulnerabilities
[USN-8250-1] Little CMS vulnerability
[USN-8249-1] dpkg vulnerability
[USN-8251-1] libpng vulnerabilities
[USN-8248-1] NASM vulnerabilities
[USN-8247-1] OWSLib vulnerability
[USN-8242-2] PostfixAdmin vulnerability
[USN-8242-1] CiviCRM vulnerability
[USN-8246-1] Vim vulnerabilities
[USN-8220-1] HtmlUnit vulnerability
[USN-8256-1] opam vulnerability
[USN-8259-1] OpenEXR vulnerabilities
[USN-8261-1] Linux kernel (Xilinx) vulnerabilities
[USN-8260-1] Linux kernel (Azure FIPS) vulnerabilities
[USN-8258-1] Linux kernel (Azure) vulnerabilities
[USN-8257-1] Linux kernel (Raspberry Pi) vulnerabilities
[USN-8255-1] Linux kernel vulnerabilities
[USN-8252-1] OpenJPEG vulnerability
[USN-8253-1] Postfix vulnerability
[USN-8254-1] Linux kernel vulnerabilities

[USN-8240-1] Swish-e vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8240-1
May 07, 2026

swish-e vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in Swish-e.

Software Description:
- swish-e: Simple Web Indexing System for Humans - Enhanced

Details:

It was discovered that Expat, vendored in Swish-e incorrectly handled
certain files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code. (CVE-2022-25235, CVE-2022-25236)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
swish-e 2.4.7-7.1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 24.04 LTS
swish-e 2.4.7-6.2ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
swish-e 2.4.7-6.1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 20.04 LTS
swish-e 2.4.7-6ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
swish-e 2.4.7-5ubuntu1+esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
swish-e 2.4.7-4ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8240-1
CVE-2022-25235, CVE-2022-25236

[USN-8236-1] Slurm vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8236-1
May 06, 2026

slurm-wlm vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in Slurm.

Software Description:
- slurm-wlm: Simple Linux Utility for Resource Management

Details:

It was discovered that Slurm did not correctly handle certain file system
operations. An attacker could possibly use this issue to modify files or
leak sensitive information. This issue only affected Ubuntu 22.04 LTS.
(CVE-2023-41914)

Ryan Hall discovered that Slurm did not correctly enforce certain message
integrity checks. An attacker could possibly use this issue to bypass
integrity checks. This issue only affected Ubuntu 22.04 LTS.
(CVE-2023-49933)

Ryan Hall discovered that Slurm did not correctly handle certain memory
operations. An attacker could possibly use this issue to cause a denial of
service or execute arbitrary code. This issue only affected Ubuntu 22.04
LTS. (CVE-2023-49937)

Ryan Hall discovered that Slurm did not correctly handle certain access
control mechanisms. An attacker could possibly use this issue to modify
files or leak sensitive information. This issue only affected Ubuntu 22.04
LTS. (CVE-2023-49938)

It was discovered that Slurm did not correctly handle user promotion. An
attacker could possibly use this issue to promote themselves to an
administrator. (CVE-2025-43904)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
libpam-slurm 23.11.4-1.2ubuntu5+esm1
Available with Ubuntu Pro
libpam-slurm-dev 23.11.4-1.2ubuntu5+esm1
Available with Ubuntu Pro
libslurm-dev 23.11.4-1.2ubuntu5+esm1
Available with Ubuntu Pro
slurm-wlm 23.11.4-1.2ubuntu5+esm1
Available with Ubuntu Pro
slurmctld 23.11.4-1.2ubuntu5+esm1
Available with Ubuntu Pro
slurmd 23.11.4-1.2ubuntu5+esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
libpam-slurm 21.08.5-2ubuntu1+esm2
Available with Ubuntu Pro
libslurm-dev 21.08.5-2ubuntu1+esm2
Available with Ubuntu Pro
slurm-wlm 21.08.5-2ubuntu1+esm2
Available with Ubuntu Pro
slurmctld 21.08.5-2ubuntu1+esm2
Available with Ubuntu Pro
slurmd 21.08.5-2ubuntu1+esm2
Available with Ubuntu Pro

After a standard system update you need to restart Slurm to make all the
necessary changes.

References:
https://ubuntu.com/security/notices/USN-8236-1
CVE-2023-41914, CVE-2023-49933, CVE-2023-49937, CVE-2023-49938,
CVE-2025-43904

[USN-8245-1] Linux kernel vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8245-1
May 07, 2026

linux-azure, linux-azure-6.17, linux-oem-6.17 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-azure: Linux kernel for Microsoft Azure Cloud systems
- linux-azure-6.17: Linux kernel for Microsoft Azure cloud systems
- linux-oem-6.17: Linux kernel for OEM systems

Details:

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- MIPS architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Ublk userspace block driver;
- Bluetooth drivers;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- GPU drivers;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Multiple devices driver;
- Media drivers;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Ethernet team driver;
- NVME drivers;
- PA-RISC drivers;
- Chrome hardware platform drivers;
- x86 platform drivers;
- SCSI subsystem;
- SPI subsystem;
- TCM subsystem;
- Freescale USB OTG Transceiver Driver;
- USB Type-C Connector System Software Interface driver;
- Watchdog drivers;
- BTRFS file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS+ file system;
- File systems infrastructure;
- Network file system (NFS) server daemon;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- SMB network file system;
- XFS file system;
- User-space API (UAPI);
- io_uring subsystem;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Tracing infrastructure;
- Memory management;
- BPF subsystem;
- CAIF protocol;
- Ceph Core library;
- Networking core;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Sun RPC protocol;
- Key management;
- Landlock security;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM subsystem;
(CVE-2025-68351, CVE-2025-68353, CVE-2025-68365, CVE-2025-68368,
CVE-2025-68725, CVE-2025-68736, CVE-2025-68745, CVE-2025-68767,
CVE-2025-68768, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771,
CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,
CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780,
CVE-2025-68781, CVE-2025-68782, CVE-2025-68783, CVE-2025-68784,
CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788,
CVE-2025-68791, CVE-2025-68792, CVE-2025-68793, CVE-2025-68794,
CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798,
CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68802,
CVE-2025-68803, CVE-2025-68804, CVE-2025-68805, CVE-2025-68806,
CVE-2025-68807, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810,
CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815,
CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819,
CVE-2025-68820, CVE-2025-68821, CVE-2025-68822, CVE-2025-68823,
CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067,
CVE-2025-71068, CVE-2025-71069, CVE-2025-71070, CVE-2025-71071,
CVE-2025-71072, CVE-2025-71073, CVE-2025-71075, CVE-2025-71076,
CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081,
CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085,
CVE-2025-71086, CVE-2025-71087, CVE-2025-71089, CVE-2025-71091,
CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096,
CVE-2025-71097, CVE-2025-71098, CVE-2025-71099, CVE-2025-71100,
CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111,
CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71115,
CVE-2025-71116, CVE-2025-71117, CVE-2025-71118, CVE-2025-71119,
CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71123,
CVE-2025-71124, CVE-2025-71125, CVE-2025-71126, CVE-2025-71130,
CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135,
CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71140,
CVE-2025-71143, CVE-2025-71146, CVE-2025-71147, CVE-2025-71148,
CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154,
CVE-2025-71156, CVE-2025-71157, CVE-2026-23091, CVE-2026-23112,
CVE-2026-23209, CVE-2026-23231)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
linux-image-6.17.0-1013-azure 6.17.0-1013.13
linux-image-azure 6.17.0-1013.13
linux-image-azure-6.17 6.17.0-1013.13

Ubuntu 24.04 LTS
linux-image-6.17.0-1013-azure 6.17.0-1013.13~24.04.1
linux-image-6.17.0-1020-oem 6.17.0-1020.20
linux-image-azure 6.17.0-1013.13~24.04.1
linux-image-azure-6.17 6.17.0-1013.13~24.04.1
linux-image-oem-24.04 6.17.0-1020.20
linux-image-oem-24.04a 6.17.0-1020.20
linux-image-oem-24.04b 6.17.0-1020.20
linux-image-oem-24.04c 6.17.0-1020.20
linux-image-oem-24.04d 6.17.0-1020.20
linux-image-oem-6.17 6.17.0-1020.20

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8245-1
CVE-2024-36347, CVE-2025-68351, CVE-2025-68353, CVE-2025-68365,
CVE-2025-68368, CVE-2025-68725, CVE-2025-68736, CVE-2025-68745,
CVE-2025-68767, CVE-2025-68768, CVE-2025-68769, CVE-2025-68770,
CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774,
CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778,
CVE-2025-68780, CVE-2025-68781, CVE-2025-68782, CVE-2025-68783,
CVE-2025-68784, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787,
CVE-2025-68788, CVE-2025-68791, CVE-2025-68792, CVE-2025-68793,
CVE-2025-68794, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797,
CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801,
CVE-2025-68802, CVE-2025-68803, CVE-2025-68804, CVE-2025-68805,
CVE-2025-68806, CVE-2025-68807, CVE-2025-68808, CVE-2025-68809,
CVE-2025-68810, CVE-2025-68811, CVE-2025-68813, CVE-2025-68814,
CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818,
CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-68822,
CVE-2025-68823, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,
CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71070,
CVE-2025-71071, CVE-2025-71072, CVE-2025-71073, CVE-2025-71075,
CVE-2025-71076, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71089,
CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095,
CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71099,
CVE-2025-71100, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104,
CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109,
CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114,
CVE-2025-71115, CVE-2025-71116, CVE-2025-71117, CVE-2025-71118,
CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122,
CVE-2025-71123, CVE-2025-71124, CVE-2025-71125, CVE-2025-71126,
CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133,
CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138,
CVE-2025-71140, CVE-2025-71143, CVE-2025-71146, CVE-2025-71147,
CVE-2025-71148, CVE-2025-71149, CVE-2025-71150, CVE-2025-71151,
CVE-2025-71153, CVE-2025-71154, CVE-2025-71156, CVE-2025-71157,
CVE-2026-23091, CVE-2026-23112, CVE-2026-23209, CVE-2026-23231

Package Information:
https://launchpad.net/ubuntu/+source/linux-azure/6.17.0-1013.13
https://launchpad.net/ubuntu/+source/linux-azure-6.17/6.17.0-1013.13~24.04.1
https://launchpad.net/ubuntu/+source/linux-oem-6.17/6.17.0-1020.20

[USN-8244-1] Linux kernel vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8244-1
May 07, 2026

linux, linux-aws, linux-aws-6.17, linux-gcp, linux-gcp-6.17,
linux-hwe-6.17, linux-oracle, linux-realtime, linux-realtime-6.17
vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-realtime: Linux kernel for Real-time systems
- linux-aws-6.17: Linux kernel for Amazon Web Services (AWS) systems
- linux-gcp-6.17: Linux kernel for Google Cloud Platform (GCP) systems
- linux-hwe-6.17: Linux hardware enablement (HWE) kernel
- linux-realtime-6.17: Linux kernel for Real-time systems

Details:

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- NVME drivers;
- Netfilter;
(CVE-2026-23112, CVE-2026-23231, CVE-2026-23273)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
linux-image-6.17.0-1011-realtime 6.17.0-1011.12
linux-image-6.17.0-1012-oracle 6.17.0-1012.12
linux-image-6.17.0-1012-oracle-64k 6.17.0-1012.12
linux-image-6.17.0-1013-aws 6.17.0-1013.13
linux-image-6.17.0-1013-aws-64k 6.17.0-1013.13
linux-image-6.17.0-1013-gcp 6.17.0-1013.13
linux-image-6.17.0-1013-gcp-64k 6.17.0-1013.13
linux-image-6.17.0-23-generic 6.17.0-23.23
linux-image-6.17.0-23-generic-64k 6.17.0-23.23
linux-image-aws 6.17.0-1013.13
linux-image-aws-6.17 6.17.0-1013.13
linux-image-aws-64k 6.17.0-1013.13
linux-image-aws-64k-6.17 6.17.0-1013.13
linux-image-gcp 6.17.0-1013.13
linux-image-gcp-6.17 6.17.0-1013.13
linux-image-gcp-64k 6.17.0-1013.13
linux-image-gcp-64k-6.17 6.17.0-1013.13
linux-image-generic 6.17.0-23.23
linux-image-generic-6.17 6.17.0-23.23
linux-image-generic-64k 6.17.0-23.23
linux-image-generic-64k-6.17 6.17.0-23.23
linux-image-oracle 6.17.0-1012.12
linux-image-oracle-6.17 6.17.0-1012.12
linux-image-oracle-64k 6.17.0-1012.12
linux-image-oracle-64k-6.17 6.17.0-1012.12
linux-image-realtime 6.17.0-1011.12
linux-image-realtime-6.17 6.17.0-1011.12
linux-image-virtual 6.17.0-23.23
linux-image-virtual-6.17 6.17.0-23.23

Ubuntu 24.04 LTS
linux-image-6.17.0-1011-realtime 6.17.0-1011.12~24.04.1
Available with Ubuntu Pro
linux-image-6.17.0-1013-aws 6.17.0-1013.13~24.04.1
linux-image-6.17.0-1013-aws-64k 6.17.0-1013.13~24.04.1
linux-image-6.17.0-1013-gcp 6.17.0-1013.13~24.04.1
linux-image-6.17.0-1013-gcp-64k 6.17.0-1013.13~24.04.1
linux-image-6.17.0-23-generic 6.17.0-23.23~24.04.1
linux-image-6.17.0-23-generic-64k 6.17.0-23.23~24.04.1
linux-image-aws 6.17.0-1013.13~24.04.1
linux-image-aws-6.17 6.17.0-1013.13~24.04.1
linux-image-aws-64k 6.17.0-1013.13~24.04.1
linux-image-aws-64k-6.17 6.17.0-1013.13~24.04.1
linux-image-gcp 6.17.0-1013.13~24.04.1
linux-image-gcp-6.17 6.17.0-1013.13~24.04.1
linux-image-gcp-64k 6.17.0-1013.13~24.04.1
linux-image-gcp-64k-6.17 6.17.0-1013.13~24.04.1
linux-image-generic-6.17 6.17.0-23.23~24.04.1
linux-image-generic-64k-6.17 6.17.0-23.23~24.04.1
linux-image-generic-64k-hwe-24.04 6.17.0-23.23~24.04.1
linux-image-generic-hwe-24.04 6.17.0-23.23~24.04.1
linux-image-realtime-6.17 6.17.0-1011.12~24.04.1
Available with Ubuntu Pro
linux-image-realtime-hwe-24.04 6.17.0-1011.12~24.04.1
Available with Ubuntu Pro
linux-image-virtual-6.17 6.17.0-23.23~24.04.1
linux-image-virtual-hwe-24.04 6.17.0-23.23~24.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8244-1
CVE-2026-23112, CVE-2026-23231, CVE-2026-23273

Package Information:
https://launchpad.net/ubuntu/+source/linux/6.17.0-23.23
https://launchpad.net/ubuntu/+source/linux-aws/6.17.0-1013.13
https://launchpad.net/ubuntu/+source/linux-gcp/6.17.0-1013.13
https://launchpad.net/ubuntu/+source/linux-oracle/6.17.0-1012.12
https://launchpad.net/ubuntu/+source/linux-realtime/6.17.0-1011.12
https://launchpad.net/ubuntu/+source/linux-aws-6.17/6.17.0-1013.13~24.04.1
https://launchpad.net/ubuntu/+source/linux-gcp-6.17/6.17.0-1013.13~24.04.1
https://launchpad.net/ubuntu/+source/linux-hwe-6.17/6.17.0-23.23~24.04.1
https://launchpad.net/ubuntu/+source/linux-realtime-6.17/6.17.0-1011.12~24.04.1

[USN-8241-1] Coin3D vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8241-1
May 07, 2026

coin3 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

Several security issues were fixed in Coin3D.

Software Description:
- coin3: high-level 3D graphics kit implementing the Open Inventor API

Details:

It was discovered that Expat, vendored in Coin3D incorrectly handled
certain files. An attacker could possibly use this issue to cause a crash
or execute arbitrary code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
libcoin80-runtime 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
Available with Ubuntu Pro
libcoin80v5 3.1.4~abc9f50+dfsg3-2ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libcoin80-runtime 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
Available with Ubuntu Pro
libcoin80v5 3.1.4~abc9f50+dfsg1-1ubuntu0.1~esm2
Available with Ubuntu Pro

Ubuntu 14.04 LTS
libcoin80 3.1.4~abc9f50-4ubuntu2+esm2
Available with Ubuntu Pro
libcoin80-runtime 3.1.4~abc9f50-4ubuntu2+esm2
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8241-1
CVE-2022-25235, CVE-2022-25236

[USN-8243-1] Linux kernel (Azure) vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8243-1
May 07, 2026

linux-azure-5.15 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-azure-5.15: Linux kernel for Microsoft Azure cloud systems

Details:

Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), local privilege escalation, or possibly escape a container.
(LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403,
CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407,
CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- Nios II architecture;
- PowerPC architecture;
- Sun Sparc architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Network block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Data acquisition framework and drivers;
- Counter interface drivers;
- CPU frequency scaling framework;
- DMA engine subsystem;
- Intel Stratix 10 firmware drivers;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- Intel Trace Hub HW tracing drivers;
- IIO subsystem;
- IIO ADC drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Tablet) drivers;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- Modular ISDN driver;
- LED subsystem;
- Macintosh device drivers;
- Multiple devices driver;
- Media drivers;
- UACCE accelerator framework;
- MOST (Media Oriented Systems Transport) drivers;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- NVME drivers;
- PA-RISC drivers;
- PCI subsystem;
- Performance monitor drivers;
- PHY drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- x86 platform drivers;
- ARM PM domains;
- PPS (Pulse Per Second) driver;
- PWM drivers;
- Voltage and Current Regulator drivers;
- S/390 drivers;
- SCSI subsystem;
- SLIMbus drivers;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Userspace I/O drivers;
- Cadence USB3 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Renesas USBHS Controller drivers;
- USB Mass Storage drivers;
- USB Type-C Connector System Software Interface driver;
- Backlight driver;
- Framebuffer layer;
- W1 Dallas's 1-wire bus driver;
- Watchdog drivers;
- Xen hypervisor drivers;
- BFS file system;
- BTRFS file system;
- File systems infrastructure;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS file system;
- HFS+ file system;
- HugeTLB file system;
- Journaling layer for block devices (JBD2);
- JFS file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- OrangeFS file system;
- Proc file system;
- SMB network file system;
- SquashFS file system;
- UDF file system;
- XFS file system;
- BPF subsystem;
- Ethernet bridge;
- Memory management;
- padata parallel execution mechanism;
- IP tunnels definitions;
- NFC subsystem;
- Network traffic control;
- Network sockets;
- XFRM subsystem;
- io_uring subsystem;
- Control group (cgroup);
- IRQ subsystem;
- Locking primitives;
- Padata parallel execution mechanism;
- PID allocator;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Tracing infrastructure;
- 9P file system network protocol;
- Bluetooth subsystem;
- CAIF protocol;
- CAN network layer;
- Ceph Core library;
- Networking core;
- Ethtool driver;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- L2TP protocol;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- Open vSwitch;
- RF switch subsystem;
- Rose network layer;
- SCTP protocol;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- Unix domain sockets;
- VMware vSockets driver;
- Wireless networking;
- Rust bindings mechanism;
- Integrity Measurement Architecture(IMA) framework;
- Key management;
- Simplified Mandatory Access Control Kernel framework;
- FireWire sound drivers;
- Turtle Beach Wavefront ALSA driver;
- Creative Sound Blaster X-Fi driver;
- Intel ASoC drivers;
- STMicroelectronics SoC drivers;
- USB sound devices;
(CVE-2022-49465, CVE-2022-49635, CVE-2023-53421, CVE-2023-53520,
CVE-2023-53662, CVE-2023-54207, CVE-2024-36903, CVE-2024-36927,
CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666,
CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011,
CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058,
CVE-2025-22111, CVE-2025-22121, CVE-2025-23143, CVE-2025-37849,
CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129,
CVE-2025-38232, CVE-2025-38236, CVE-2025-38248, CVE-2025-38408,
CVE-2025-38556, CVE-2025-38584, CVE-2025-38591, CVE-2025-39869,
CVE-2025-39873, CVE-2025-39876, CVE-2025-39880, CVE-2025-39883,
CVE-2025-39885, CVE-2025-39907, CVE-2025-39911, CVE-2025-39913,
CVE-2025-39923, CVE-2025-39934, CVE-2025-39937, CVE-2025-39943,
CVE-2025-39945, CVE-2025-39949, CVE-2025-39951, CVE-2025-39953,
CVE-2025-39955, CVE-2025-39967, CVE-2025-39968, CVE-2025-39969,
CVE-2025-39970, CVE-2025-39971, CVE-2025-39972, CVE-2025-39973,
CVE-2025-39980, CVE-2025-39985, CVE-2025-39986, CVE-2025-39987,
CVE-2025-39988, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996,
CVE-2025-39998, CVE-2025-40001, CVE-2025-40006, CVE-2025-40011,
CVE-2025-40020, CVE-2025-40021, CVE-2025-40026, CVE-2025-40027,
CVE-2025-40029, CVE-2025-40030, CVE-2025-40035, CVE-2025-40040,
CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40048,
CVE-2025-40049, CVE-2025-40053, CVE-2025-40055, CVE-2025-40060,
CVE-2025-40068, CVE-2025-40070, CVE-2025-40078, CVE-2025-40081,
CVE-2025-40083, CVE-2025-40085, CVE-2025-40087, CVE-2025-40088,
CVE-2025-40092, CVE-2025-40094, CVE-2025-40105, CVE-2025-40106,
CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112,
CVE-2025-40115, CVE-2025-40116, CVE-2025-40118, CVE-2025-40120,
CVE-2025-40121, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126,
CVE-2025-40127, CVE-2025-40134, CVE-2025-40140, CVE-2025-40149,
CVE-2025-40153, CVE-2025-40154, CVE-2025-40164, CVE-2025-40167,
CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179,
CVE-2025-40183, CVE-2025-40187, CVE-2025-40188, CVE-2025-40194,
CVE-2025-40200, CVE-2025-40204, CVE-2025-40205, CVE-2025-40211,
CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223,
CVE-2025-40231, CVE-2025-40233, CVE-2025-40240, CVE-2025-40243,
CVE-2025-40244, CVE-2025-40245, CVE-2025-40248, CVE-2025-40252,
CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258,
CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263,
CVE-2025-40264, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272,
CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278,
CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282,
CVE-2025-40283, CVE-2025-40304, CVE-2025-40306, CVE-2025-40308,
CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314,
CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321,
CVE-2025-40322, CVE-2025-40324, CVE-2025-40331, CVE-2025-40342,
CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349,
CVE-2025-40351, CVE-2025-40360, CVE-2025-40363, CVE-2025-68168,
CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191,
CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204,
CVE-2025-68211, CVE-2025-68217, CVE-2025-68220, CVE-2025-68227,
CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244,
CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255,
CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264,
CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285,
CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289,
CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302,
CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321,
CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330,
CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,
CVE-2025-68337, CVE-2025-68339, CVE-2025-68340, CVE-2025-68344,
CVE-2025-68346, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362,
CVE-2025-68364, CVE-2025-68365, CVE-2025-68366, CVE-2025-68367,
CVE-2025-68372, CVE-2025-68724, CVE-2025-68725, CVE-2025-68727,
CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734,
CVE-2025-68740, CVE-2025-68746, CVE-2025-68757, CVE-2025-68758,
CVE-2025-68759, CVE-2025-68764, CVE-2025-68765, CVE-2025-68767,
CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776,
CVE-2025-68777, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783,
CVE-2025-68785, CVE-2025-68787, CVE-2025-68788, CVE-2025-68795,
CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800,
CVE-2025-68801, CVE-2025-68803, CVE-2025-68804, CVE-2025-68808,
CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816,
CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,
CVE-2025-71064, CVE-2025-71066, CVE-2025-71068, CVE-2025-71069,
CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71091,
CVE-2025-71093, CVE-2025-71094, CVE-2025-71096, CVE-2025-71097,
CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71108, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113,
CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71120,
CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131,
CVE-2025-71132, CVE-2025-71133, CVE-2025-71136, CVE-2025-71137,
CVE-2025-71147, CVE-2025-71154, CVE-2025-71162, CVE-2025-71163,
CVE-2025-71180, CVE-2025-71182, CVE-2025-71185, CVE-2025-71186,
CVE-2025-71188, CVE-2025-71190, CVE-2025-71191, CVE-2025-71194,
CVE-2025-71196, CVE-2025-71197, CVE-2025-71199, CVE-2026-22976,
CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982,
CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992,
CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23001,
CVE-2026-23003, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020,
CVE-2026-23021, CVE-2026-23026, CVE-2026-23033, CVE-2026-23037,
CVE-2026-23038, CVE-2026-23047, CVE-2026-23049, CVE-2026-23056,
CVE-2026-23058, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063,
CVE-2026-23064, CVE-2026-23071, CVE-2026-23073, CVE-2026-23074,
CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080,
CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087,
CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093,
CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098,
CVE-2026-23099, CVE-2026-23101, CVE-2026-23103, CVE-2026-23105,
CVE-2026-23108, CVE-2026-23111, CVE-2026-23119, CVE-2026-23120,
CVE-2026-23121, CVE-2026-23124, CVE-2026-23125, CVE-2026-23128,
CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164,
CVE-2026-23167, CVE-2026-23170, CVE-2026-23209)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
linux-image-5.15.0-1110-azure 5.15.0-1110.119~20.04.1
Available with Ubuntu Pro
linux-image-azure 5.15.0.1110.119~20.04.1
Available with Ubuntu Pro
linux-image-azure-5.15 5.15.0.1110.119~20.04.1
Available with Ubuntu Pro
linux-image-azure-cvm 5.15.0.1110.119~20.04.1
Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8243-1
https://launchpad.net/bugs/2143853
CVE-2022-49465, CVE-2022-49635, CVE-2023-53421, CVE-2023-53520,
CVE-2023-53662, CVE-2023-54207, CVE-2024-36903, CVE-2024-36927,
CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666,
CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011,
CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058,
CVE-2025-22111, CVE-2025-22121, CVE-2025-23143, CVE-2025-37849,
CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129,
CVE-2025-38232, CVE-2025-38236, CVE-2025-38248, CVE-2025-38408,
CVE-2025-38556, CVE-2025-38584, CVE-2025-38591, CVE-2025-39869,
CVE-2025-39873, CVE-2025-39876, CVE-2025-39880, CVE-2025-39883,
CVE-2025-39885, CVE-2025-39907, CVE-2025-39911, CVE-2025-39913,
CVE-2025-39923, CVE-2025-39934, CVE-2025-39937, CVE-2025-39943,
CVE-2025-39945, CVE-2025-39949, CVE-2025-39951, CVE-2025-39953,
CVE-2025-39955, CVE-2025-39967, CVE-2025-39968, CVE-2025-39969,
CVE-2025-39970, CVE-2025-39971, CVE-2025-39972, CVE-2025-39973,
CVE-2025-39980, CVE-2025-39985, CVE-2025-39986, CVE-2025-39987,
CVE-2025-39988, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996,
CVE-2025-39998, CVE-2025-40001, CVE-2025-40006, CVE-2025-40011,
CVE-2025-40020, CVE-2025-40021, CVE-2025-40026, CVE-2025-40027,
CVE-2025-40029, CVE-2025-40030, CVE-2025-40035, CVE-2025-40040,
CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40048,
CVE-2025-40049, CVE-2025-40053, CVE-2025-40055, CVE-2025-40060,
CVE-2025-40068, CVE-2025-40070, CVE-2025-40078, CVE-2025-40081,
CVE-2025-40083, CVE-2025-40085, CVE-2025-40087, CVE-2025-40088,
CVE-2025-40092, CVE-2025-40094, CVE-2025-40105, CVE-2025-40106,
CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112,
CVE-2025-40115, CVE-2025-40116, CVE-2025-40118, CVE-2025-40120,
CVE-2025-40121, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126,
CVE-2025-40127, CVE-2025-40134, CVE-2025-40140, CVE-2025-40149,
CVE-2025-40153, CVE-2025-40154, CVE-2025-40164, CVE-2025-40167,
CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179,
CVE-2025-40183, CVE-2025-40187, CVE-2025-40188, CVE-2025-40194,
CVE-2025-40200, CVE-2025-40204, CVE-2025-40205, CVE-2025-40211,
CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223,
CVE-2025-40231, CVE-2025-40233, CVE-2025-40240, CVE-2025-40243,
CVE-2025-40244, CVE-2025-40245, CVE-2025-40248, CVE-2025-40252,
CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258,
CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263,
CVE-2025-40264, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272,
CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278,
CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282,
CVE-2025-40283, CVE-2025-40304, CVE-2025-40306, CVE-2025-40308,
CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314,
CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321,
CVE-2025-40322, CVE-2025-40324, CVE-2025-40331, CVE-2025-40342,
CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349,
CVE-2025-40351, CVE-2025-40360, CVE-2025-40363, CVE-2025-68168,
CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191,
CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204,
CVE-2025-68211, CVE-2025-68217, CVE-2025-68220, CVE-2025-68227,
CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244,
CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255,
CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264,
CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285,
CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289,
CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302,
CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321,
CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330,
CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,
CVE-2025-68337, CVE-2025-68339, CVE-2025-68340, CVE-2025-68344,
CVE-2025-68346, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362,
CVE-2025-68364, CVE-2025-68365, CVE-2025-68366, CVE-2025-68367,
CVE-2025-68372, CVE-2025-68724, CVE-2025-68725, CVE-2025-68727,
CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734,
CVE-2025-68740, CVE-2025-68746, CVE-2025-68757, CVE-2025-68758,
CVE-2025-68759, CVE-2025-68764, CVE-2025-68765, CVE-2025-68767,
CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776,
CVE-2025-68777, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783,
CVE-2025-68785, CVE-2025-68787, CVE-2025-68788, CVE-2025-68795,
CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800,
CVE-2025-68801, CVE-2025-68803, CVE-2025-68804, CVE-2025-68808,
CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816,
CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,
CVE-2025-71064, CVE-2025-71066, CVE-2025-71068, CVE-2025-71069,
CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71091,
CVE-2025-71093, CVE-2025-71094, CVE-2025-71096, CVE-2025-71097,
CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71108, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113,
CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71120,
CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131,
CVE-2025-71132, CVE-2025-71133, CVE-2025-71136, CVE-2025-71137,
CVE-2025-71147, CVE-2025-71154, CVE-2025-71162, CVE-2025-71163,
CVE-2025-71180, CVE-2025-71182, CVE-2025-71185, CVE-2025-71186,
CVE-2025-71188, CVE-2025-71190, CVE-2025-71191, CVE-2025-71194,
CVE-2025-71196, CVE-2025-71197, CVE-2025-71199, CVE-2026-22976,
CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982,
CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992,
CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23001,
CVE-2026-23003, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020,
CVE-2026-23021, CVE-2026-23026, CVE-2026-23033, CVE-2026-23037,
CVE-2026-23038, CVE-2026-23047, CVE-2026-23049, CVE-2026-23056,
CVE-2026-23058, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063,
CVE-2026-23064, CVE-2026-23071, CVE-2026-23073, CVE-2026-23074,
CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080,
CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087,
CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093,
CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098,
CVE-2026-23099, CVE-2026-23101, CVE-2026-23103, CVE-2026-23105,
CVE-2026-23108, CVE-2026-23111, CVE-2026-23119, CVE-2026-23120,
CVE-2026-23121, CVE-2026-23124, CVE-2026-23125, CVE-2026-23128,
CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164,
CVE-2026-23167, CVE-2026-23170, CVE-2026-23209, CVE-2026-23268,
CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405,
CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409,
CVE-2026-23410, CVE-2026-23411

[USN-8235-1] ITK vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8235-1
May 07, 2026

insighttoolkit vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in ITK.

Software Description:
- insighttoolkit: Toolkit for N-dimensional scientific image processing, segmentation, and registration

Details:

It was discovered that Expat, vendored in ITK incorrectly handled certain
files. An attacker could possibly use this issue to cause a crash or
execute arbitrary code. (CVE-2022-25235, CVE-2022-25236)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 16.04 LTS
libinsighttoolkit3.20 3.20.1+git20120521-6ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8235-1
CVE-2022-25235, CVE-2022-25236

[USN-8179-4] Linux kernel (GCP) vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8179-4
May 07, 2026

linux-gcp-6.8 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-gcp-6.8: Linux kernel for Google Cloud Platform (GCP) systems

Details:

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode causing loss of integrity and confidentiality.
(CVE-2024-36347)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- MIPS architecture;
- PowerPC architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Network block device driver;
- Bluetooth drivers;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- GPU drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Macintosh device drivers;
- Multiple devices driver;
- Media drivers;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- NVME drivers;
- PA-RISC drivers;
- Chrome hardware platform drivers;
- x86 platform drivers;
- Voltage and Current Regulator drivers;
- SCSI subsystem;
- SPI subsystem;
- Media Oriented Systems Transport (MOST) driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- USB Host Controller drivers;
- USB Type-C Connector System Software Interface driver;
- Backlight driver;
- Watchdog drivers;
- BFS file system;
- BTRFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS+ file system;
- File systems infrastructure;
- Journaling layer for block devices (JBD2);
- Network file system (NFS) client;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- SMB network file system;
- BPF subsystem;
- Ethernet bridge;
- io_uring subsystem;
- Locking primitives;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Tracing infrastructure;
- Memory management;
- CAIF protocol;
- Ceph Core library;
- Networking core;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Network sockets;
- Sun RPC protocol;
- Integrity Measurement Architecture(IMA) framework;
- Key management;
- Simplified Mandatory Access Control Kernel framework;
- FireWire sound drivers;
- HD-audio driver;
- Turtle Beach Wavefront ALSA driver;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM subsystem;
(CVE-2024-57795, CVE-2025-22022, CVE-2025-22111, CVE-2025-38022,
CVE-2025-38234, CVE-2025-40164, CVE-2025-40325, CVE-2025-68206,
CVE-2025-68254, CVE-2025-68255, CVE-2025-68256, CVE-2025-68257,
CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68263,
CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68291,
CVE-2025-68325, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,
CVE-2025-68337, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346,
CVE-2025-68347, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362,
CVE-2025-68363, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367,
CVE-2025-68369, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374,
CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724,
CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733,
CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68744,
CVE-2025-68746, CVE-2025-68753, CVE-2025-68755, CVE-2025-68756,
CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68763,
CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-68767,
CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772,
CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776,
CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68782,
CVE-2025-68783, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787,
CVE-2025-68788, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796,
CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800,
CVE-2025-68801, CVE-2025-68804, CVE-2025-68806, CVE-2025-68808,
CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813,
CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817,
CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821,
CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067,
CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072,
CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088,
CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094,
CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098,
CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111,
CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116,
CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121,
CVE-2025-71122, CVE-2025-71123, CVE-2025-71125, CVE-2025-71126,
CVE-2025-71127, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132,
CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137,
CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143,
CVE-2025-71144, CVE-2025-71147, CVE-2025-71148, CVE-2025-71150,
CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2026-23209)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
linux-image-6.8.0-1054-gcp 6.8.0-1054.57~22.04.1
linux-image-6.8.0-1054-gcp-64k 6.8.0-1054.57~22.04.1
linux-image-gcp 6.8.0-1054.57~22.04.1
linux-image-gcp-6.8 6.8.0-1054.57~22.04.1
linux-image-gcp-64k 6.8.0-1054.57~22.04.1
linux-image-gcp-64k-6.8 6.8.0-1054.57~22.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8179-4
https://ubuntu.com/security/notices/USN-8179-3
https://ubuntu.com/security/notices/USN-8179-2
https://ubuntu.com/security/notices/USN-8179-1
CVE-2024-36347, CVE-2024-57795, CVE-2025-22022, CVE-2025-22111,
CVE-2025-38022, CVE-2025-38234, CVE-2025-40164, CVE-2025-40325,
CVE-2025-68206, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256,
CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261,
CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266,
CVE-2025-68291, CVE-2025-68325, CVE-2025-68332, CVE-2025-68335,
CVE-2025-68336, CVE-2025-68337, CVE-2025-68344, CVE-2025-68345,
CVE-2025-68346, CVE-2025-68347, CVE-2025-68349, CVE-2025-68354,
CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,
CVE-2025-68367, CVE-2025-68369, CVE-2025-68371, CVE-2025-68372,
CVE-2025-68374, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380,
CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732,
CVE-2025-68733, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742,
CVE-2025-68744, CVE-2025-68746, CVE-2025-68753, CVE-2025-68755,
CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759,
CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766,
CVE-2025-68767, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771,
CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,
CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780,
CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68786,
CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795,
CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799,
CVE-2025-68800, CVE-2025-68801, CVE-2025-68804, CVE-2025-68806,
CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811,
CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816,
CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,
CVE-2025-68821, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,
CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071,
CVE-2025-71072, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,
CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083,
CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087,
CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093,
CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097,
CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104,
CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109,
CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114,
CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120,
CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71125,
CVE-2025-71126, CVE-2025-71127, CVE-2025-71130, CVE-2025-71131,
CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136,
CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71141,
CVE-2025-71143, CVE-2025-71144, CVE-2025-71147, CVE-2025-71148,
CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153,
CVE-2025-71154, CVE-2026-23209

Package Information:
https://launchpad.net/ubuntu/+source/linux-gcp-6.8/6.8.0-1054.57~22.04.1

[USN-8250-1] Little CMS vulnerability

==========================================================================
Ubuntu Security Notice USN-8250-1
May 07, 2026

lcms2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10

Summary:

Little CMS could be made to crash if it opened a specially crafted ICC
profile.

Software Description:
- lcms2: Little CMS color management library

Details:

It was discovered that Little CMS incorrectly handled certain malformed ICC
profiles. An attacker could possibly use this issue to cause Little CMS to
crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
liblcms2-2 2.17-1ubuntu0.2

Ubuntu 25.10
liblcms2-2 2.16-2ubuntu0.2

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8250-1
CVE-2026-42798

Package Information:
https://launchpad.net/ubuntu/+source/lcms2/2.17-1ubuntu0.2
https://launchpad.net/ubuntu/+source/lcms2/2.16-2ubuntu0.2

[USN-8249-1] dpkg vulnerability

==========================================================================
Ubuntu Security Notice USN-8249-1
May 07, 2026

dpkg vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS

Summary:

dpkg could be made to stop responding if it opened a specially crafted
file.

Software Description:
- dpkg: Debian package management system

Details:

Yashashree Gund discovered that the dpkg dpkg-deb tool incorrectly handled
certain zstd-compressed .deb archives. If a user or automated system were
tricked into manipulating a specially crafted .deb archive, a remote
attacker could possibly use this issue to cause dpkg-deb to stop
responding, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
dpkg 1.22.21ubuntu3.2

Ubuntu 24.04 LTS
dpkg 1.22.6ubuntu6.6

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8249-1
CVE-2026-2219

Package Information:
https://launchpad.net/ubuntu/+source/dpkg/1.22.21ubuntu3.2
https://launchpad.net/ubuntu/+source/dpkg/1.22.6ubuntu6.6

[USN-8251-1] libpng vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8251-1
May 07, 2026

libpng1.6 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in libpng.

Software Description:
- libpng1.6: PNG (Portable Network Graphics) file library

Details:

It was discovered that libpng incorrectly handled memory when processing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possibly execute
arbitrary code. (CVE-2026-33416)

It was discovered that libpng incorrectly handled expanding 8-bit paletted
rows to RGB or RGBA on ARM processors. If a user or automated system were
tricked into opening a specially crafted PNG file, an attacker could use
this issue to cause libpng to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2026-33636)

It was discovered that libpng incorrectly handled certain setter APIs. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2026-34757)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
libpng16-16t64 1.6.50-1ubuntu0.5

Ubuntu 24.04 LTS
libpng16-16t64 1.6.43-5ubuntu0.6

Ubuntu 22.04 LTS
libpng16-16 1.6.37-3ubuntu0.5

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8251-1
CVE-2026-33416, CVE-2026-33636, CVE-2026-34757

Package Information:
https://launchpad.net/ubuntu/+source/libpng1.6/1.6.50-1ubuntu0.5
https://launchpad.net/ubuntu/+source/libpng1.6/1.6.43-5ubuntu0.6
https://launchpad.net/ubuntu/+source/libpng1.6/1.6.37-3ubuntu0.5

[USN-8248-1] NASM vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8248-1
May 07, 2026

nasm vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in NASM.

Software Description:
- nasm: Netwide Assembler

Details:

Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow
when handling certain input. An attacker could possibly use this issue
to cause NASM to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2023-31722)

It was discovered that NASM incorrectly handled memory allocation.
An attacker could possibly use this issue to cause NASM to use
excessive resources, leading to a denial of service. This issue
only affected Ubuntu 24.04 LTS. (CVE-2021-33452, CVE-2021-33450)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
nasm 2.16.01-1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
nasm 2.15.05-1ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary
changes.

References:
https://ubuntu.com/security/notices/USN-8248-1
CVE-2021-33450, CVE-2021-33452, CVE-2023-31722

[USN-8247-1] OWSLib vulnerability

==========================================================================
Ubuntu Security Notice USN-8247-1
May 07, 2026

owslib vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

OWSLib could be made to expose sensitive information.

Software Description:
- owslib: Client library for Open Geospatial (OGC) web services

Details:

It was discovered that OWSLib did not properly disable entity resolution
within its XML parser. An attacker could possibly use this issue to read
arbitrary files via a crafted XML payload.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
python3-owslib 0.25.0-1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 20.04 LTS
python3-owslib 0.19.1-1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
python-owslib 0.16.0-1ubuntu0.1~esm1
Available with Ubuntu Pro
python3-owslib 0.16.0-1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
python-owslib 0.10.3-1ubuntu0.1~esm1
Available with Ubuntu Pro
python3-owslib 0.10.3-1ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8247-1
CVE-2023-27476

[USN-8242-2] PostfixAdmin vulnerability

==========================================================================
Ubuntu Security Notice USN-8242-2
May 07, 2026

postfixadmin vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

PostfixAdmin could be made to run malicious JavaScript in the user's
browser if it received specially crafted input.

Software Description:
- postfixadmin: Virtual mail hosting interface for Postfix

Details:

USN-8242-1 fixed a vulnerability in CiviCRM. This update provides the
corresponding fix for PostfixAdmin.

Original advisory details:

Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not
properly escape JavaScript code. An attacker could possibly use this issue
to conduct a cross-site scripting attack.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
postfixadmin 3.3.13-1ubuntu0.1~esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8242-2
https://ubuntu.com/security/notices/USN-8242-1
CVE-2023-28447

[USN-8242-1] CiviCRM vulnerability

==========================================================================
Ubuntu Security Notice USN-8242-1
May 07, 2026

civicrm vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

CiviCRM could be made to run malicious JavaScript in the user's browser
if it received specially crafted input.

Software Description:
- civicrm: Constituent relationship management solution

Details:

Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not
properly escape JavaScript code. An attacker could possibly use this issue
to conduct a cross-site scripting attack.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
civicrm-common 5.33.2+dfsg1-1ubuntu1+esm1
Available with Ubuntu Pro

Ubuntu 20.04 LTS
civicrm-common 5.21.2+dfsg-1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
civicrm-common 4.7.30+dfsg-1ubuntu1+esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
civicrm-common 4.7.1+dfsg-2ubuntu1+esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8242-1
CVE-2023-28447

[USN-8246-1] Vim vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8246-1
May 07, 2026

vim vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in Vim.

Software Description:
- vim: Vi IMproved - enhanced vi editor

Details:

Michał Majchrowicz discovered that Vim’s zip plugin could overwrite
arbitrary files. An attacker could possibly use this issue to delete
sensitive data or execute arbitrary code. This issue only affected
Ubuntu 26.04 LTS. (CVE-2026-35177)

It was discovered that Vim’s netbeans interface did not properly
sanitize certain strings. An attacker could possibly use this issue to
execute arbitrary commands. This issue only affected Ubuntu 26.04 LTS.
(CVE-2026-39881)

It was discovered that Vim did not properly handle backticks in tag
filenames. An attacker could possibly use this issue to execute arbitrary
commands. (CVE-2026-41411)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
vim 2:9.1.2141-1ubuntu4.1
vim-common 2:9.1.2141-1ubuntu4.1
vim-doc 2:9.1.2141-1ubuntu4.1
vim-gtk3 2:9.1.2141-1ubuntu4.1
vim-gui-common 2:9.1.2141-1ubuntu4.1
vim-motif 2:9.1.2141-1ubuntu4.1
vim-nox 2:9.1.2141-1ubuntu4.1
vim-runtime 2:9.1.2141-1ubuntu4.1
vim-tiny 2:9.1.2141-1ubuntu4.1
xxd 2:9.1.2141-1ubuntu4.1

Ubuntu 25.10
vim 2:9.1.0967-1ubuntu6.4
vim-athena 2:9.1.0967-1ubuntu6.4
vim-common 2:9.1.0967-1ubuntu6.4
vim-doc 2:9.1.0967-1ubuntu6.4
vim-gtk3 2:9.1.0967-1ubuntu6.4
vim-gui-common 2:9.1.0967-1ubuntu6.4
vim-motif 2:9.1.0967-1ubuntu6.4
vim-nox 2:9.1.0967-1ubuntu6.4
vim-runtime 2:9.1.0967-1ubuntu6.4
vim-tiny 2:9.1.0967-1ubuntu6.4
xxd 2:9.1.0967-1ubuntu6.4

Ubuntu 24.04 LTS
vim 2:9.1.0016-1ubuntu7.13
vim-athena 2:9.1.0016-1ubuntu7.13
vim-common 2:9.1.0016-1ubuntu7.13
vim-doc 2:9.1.0016-1ubuntu7.13
vim-gtk3 2:9.1.0016-1ubuntu7.13
vim-gui-common 2:9.1.0016-1ubuntu7.13
vim-motif 2:9.1.0016-1ubuntu7.13
vim-nox 2:9.1.0016-1ubuntu7.13
vim-runtime 2:9.1.0016-1ubuntu7.13
vim-tiny 2:9.1.0016-1ubuntu7.13
xxd 2:9.1.0016-1ubuntu7.13

Ubuntu 22.04 LTS
vim 2:8.2.3995-1ubuntu2.29
vim-athena 2:8.2.3995-1ubuntu2.29
vim-common 2:8.2.3995-1ubuntu2.29
vim-doc 2:8.2.3995-1ubuntu2.29
vim-gtk 2:8.2.3995-1ubuntu2.29
vim-gtk3 2:8.2.3995-1ubuntu2.29
vim-gui-common 2:8.2.3995-1ubuntu2.29
vim-nox 2:8.2.3995-1ubuntu2.29
vim-runtime 2:8.2.3995-1ubuntu2.29
vim-tiny 2:8.2.3995-1ubuntu2.29
xxd 2:8.2.3995-1ubuntu2.29

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8246-1
CVE-2026-35177, CVE-2026-39881, CVE-2026-41411

Package Information:
https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.1
https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.4
https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.13
https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.29

[USN-8220-1] HtmlUnit vulnerability

==========================================================================
Ubuntu Security Notice USN-8220-1
May 05, 2026

htmlunit vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

HtmlUnit could be made to run programs as your login if it
opened a malicious website.

Software Description:
- htmlunit: headless web browser written in Java

Details:

It was discovered that HtmlUnit was vulnerable to remote code execution
via XSLT when browsing an attacker-controlled webpage. An attacker could possibly use
this issue to execute arbitrary code in the context of the application using HtmlUnit.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
libhtmlunit-java 2.8-3ubuntu1+esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libhtmlunit-java 2.8-1ubuntu2.1+esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8220-1
CVE-2023-49093

[USN-8256-1] opam vulnerability

==========================================================================
Ubuntu Security Notice USN-8256-1
May 07, 2026

opam vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

opam could be made to install files in unintended locations if it installed
a specially crafted package.

Software Description:
- opam: package manager for OCaml

Details:

Andrew Nesbitt discovered that opam did not properly validate file
destination paths in package install files. An attacker could use this
issue to bypass sandbox protections and write files to arbitrary locations,
possibly leading to arbitrary code execution.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
opam 2.5.0-1ubuntu0.1~esm1
Available with Ubuntu Pro
opam-installer 2.5.0-1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 25.10
opam 2.3.0-1+deb13u1build0.25.10.1
opam-installer 2.3.0-1+deb13u1build0.25.10.1

Ubuntu 24.04 LTS
opam 2.1.5-1ubuntu0.1~esm2
Available with Ubuntu Pro
opam-installer 2.1.5-1ubuntu0.1~esm2
Available with Ubuntu Pro

Ubuntu 22.04 LTS
opam 2.1.2-1+deb12u1build0.22.04.1
opam-installer 2.1.2-1+deb12u1build0.22.04.1

Ubuntu 20.04 LTS
opam 2.0.5-1ubuntu1+esm1
Available with Ubuntu Pro
opam-installer 2.0.5-1ubuntu1+esm1
Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8256-1
CVE-2026-41082

Package Information:
https://launchpad.net/ubuntu/+source/opam/2.3.0-1+deb13u1build0.25.10.1
https://launchpad.net/ubuntu/+source/opam/2.1.2-1+deb12u1build0.22.04.1

[USN-8259-1] OpenEXR vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8259-1
May 07, 2026

openexr vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in OpenEXR.

Software Description:
- openexr: tools for the OpenEXR image format

Details:

Quang Luong discovered that OpenEXR incorrectly handled sample count
accumulation when processing deep scan line image files. An attacker could
possibly use this issue to cause OpenEXR to crash, resulting in a denial of
service, or execute arbitrary code. (CVE-2026-27622)

It was discovered that OpenEXR had an integer overflow in the PXR24
decoder. An attacker could possibly use this issue to cause OpenEXR to
crash, resulting in a denial of service, or execute arbitrary code.
This issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS.
(CVE-2026-34380)

Quang Luong discovered that OpenEXR had a signed integer overflow in the
PIZ decoder. An attacker could possibly use this issue to cause OpenEXR to
crash, resulting in a denial of service, or execute arbitrary code. This
issue only affected Ubuntu 24.04 LTS and Ubuntu 26.04 LTS. (CVE-2026-34588)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
libopenexr-3-1-30 3.1.13-2ubuntu0.26.04.1~esm1
Available with Ubuntu Pro
openexr 3.1.13-2ubuntu0.26.04.1~esm1
Available with Ubuntu Pro

Ubuntu 24.04 LTS
libopenexr-3-1-30 3.1.5-5.1ubuntu0.1~esm1
Available with Ubuntu Pro
openexr 3.1.5-5.1ubuntu0.1~esm1
Available with Ubuntu Pro

Ubuntu 22.04 LTS
libopenexr25 2.5.7-1ubuntu0.1~esm2
Available with Ubuntu Pro
openexr 2.5.7-1ubuntu0.1~esm2
Available with Ubuntu Pro

Ubuntu 20.04 LTS
libopenexr24 2.3.0-6ubuntu0.5+esm2
Available with Ubuntu Pro
openexr 2.3.0-6ubuntu0.5+esm2
Available with Ubuntu Pro

Ubuntu 18.04 LTS
libopenexr22 2.2.0-11.1ubuntu1.9+esm1
Available with Ubuntu Pro
openexr 2.2.0-11.1ubuntu1.9+esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
libopenexr22 2.2.0-10ubuntu2.6+esm4
Available with Ubuntu Pro
openexr 2.2.0-10ubuntu2.6+esm4
Available with Ubuntu Pro

In general, a standard system update will make all the necessary
changes.

References:
https://ubuntu.com/security/notices/USN-8259-1
CVE-2026-27622, CVE-2026-34380, CVE-2026-34588

[USN-8261-1] Linux kernel (Xilinx) vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8261-1
May 07, 2026

linux-xilinx vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-xilinx: Linux kernel for Xilinx systems

Details:

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), local privilege escalation, or possibly escape a container.
(LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403,
CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407,
CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- MIPS architecture;
- Nios II architecture;
- PA-RISC architecture;
- PowerPC architecture;
- RISC-V architecture;
- S390 architecture;
- Sun Sparc architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Xtensa architecture;
- Block layer subsystem;
- Cryptographic API;
- Compute Acceleration Framework;
- ACPI drivers;
- ATM drivers;
- Drivers core;
- Block device driver;
- Network block device driver;
- Bluetooth drivers;
- Bus devices;
- Character device driver;
- Hardware random number generator core;
- TPM device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- CPU frequency scaling framework;
- Hardware crypto device drivers;
- Device frequency scaling framework;
- DMA engine subsystem;
- ARM SCMI message protocol;
- EFI core;
- Intel Stratix 10 firmware drivers;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- CoreSight HW tracing drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Miscellaneous) drivers;
- Input Device (Tablet) drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- ISDN/mISDN subsystem;
- Macintosh device drivers;
- Mailbox framework;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- MOST (Media Oriented Systems Transport) drivers;
- MTD block device drivers;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Texas Instruments network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- NVME drivers;
- PA-RISC drivers;
- PCI subsystem;
- PCCARD (PCMCIA/CardBus) bus subsystem;
- Performance monitor drivers;
- Pin controllers subsystem;
- Chrome hardware platform drivers;
- x86 platform drivers;
- ARM PM domains;
- PPS (Pulse Per Second) driver;
- PTP clock framework;
- PWM drivers;
- Voltage and Current Regulator drivers;
- Remote Processor subsystem;
- S/390 drivers;
- SCSI subsystem;
- Texas Instruments SoC drivers;
- SPI subsystem;
- Media Oriented Systems Transport (MOST) driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- Trusted Execution Environment drivers;
- TTY drivers;
- Userspace I/O drivers;
- Cadence USB3 driver;
- DesignWare USB3 driver;
- USB Gadget drivers;
- USB Host Controller drivers;
- Renesas USBHS Controller drivers;
- USB Mass Storage drivers;
- USB Type-C Connector System Software Interface driver;
- Virtio Host (VHOST) subsystem;
- Backlight driver;
- Framebuffer layer;
- Watchdog drivers;
- Xen hypervisor drivers;
- AFS file system;
- BFS file system;
- BTRFS file system;
- Ceph distributed file system;
- File systems infrastructure;
- EFI Variable file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- GFS2 file system;
- HFS file system;
- HFS+ file system;
- HugeTLB file system;
- Journaling layer for block devices (JBD2);
- JFS file system;
- KERNFS file system;
- Network file system (NFS) client;
- Network file system (NFS) server daemon;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- OrangeFS file system;
- Proc file system;
- Diskquota system;
- SMB network file system;
- SquashFS file system;
- UDF file system;
- XFS file system;
- Asynchronous Transfer Mode (ATM) subsystem;
- BPF subsystem;
- Ethernet bridge;
- Mellanox drivers;
- NFS page cache wrapper;
- Memory management;
- Memory Management;
- Media input infrastructure;
- Bluetooth subsystem;
- IP tunnels definitions;
- Network traffic control;
- Rose network layer;
- Network sockets;
- io_uring subsystem;
- Control group (cgroup);
- Kernel crash support code;
- Kernel futex primitives;
- Locking primitives;
- PID allocator;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Syscalls implementation;
- Timer subsystem;
- Tracing infrastructure;
- 9P file system network protocol;
- Amateur Radio drivers;
- B.A.T.M.A.N. meshing protocol;
- CAIF protocol;
- Ceph Core library;
- Networking core;
- Devlink API;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- Open vSwitch;
- RF switch subsystem;
- SCTP protocol;
- SMC sockets;
- Sun RPC protocol;
- TIPC protocol;
- TLS protocol;
- VMware vSockets driver;
- Wireless networking;
- eXpress Data Path;
- XFRM subsystem;
- Integrity Measurement Architecture(IMA) framework;
- Key management;
- Simplified Mandatory Access Control Kernel framework;
- FireWire sound drivers;
- HD-audio driver;
- Turtle Beach Wavefront ALSA driver;
- Intel ASoC drivers;
- QCOM ASoC drivers;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM subsystem;
(CVE-2024-57795, CVE-2025-21833, CVE-2025-22022, CVE-2025-22103,
CVE-2025-22105, CVE-2025-22106, CVE-2025-22107, CVE-2025-22111,
CVE-2025-22113, CVE-2025-22121, CVE-2025-22124, CVE-2025-22125,
CVE-2025-23129, CVE-2025-23130, CVE-2025-23133, CVE-2025-23143,
CVE-2025-37860, CVE-2025-38022, CVE-2025-38105, CVE-2025-38234,
CVE-2025-38502, CVE-2025-38556, CVE-2025-38627, CVE-2025-38643,
CVE-2025-38709, CVE-2025-39678, CVE-2025-39697, CVE-2025-39805,
CVE-2025-39806, CVE-2025-39807, CVE-2025-39808, CVE-2025-39810,
CVE-2025-39811, CVE-2025-39812, CVE-2025-39813, CVE-2025-39815,
CVE-2025-39817, CVE-2025-39819, CVE-2025-39823, CVE-2025-39824,
CVE-2025-39825, CVE-2025-39826, CVE-2025-39827, CVE-2025-39828,
CVE-2025-39829, CVE-2025-39832, CVE-2025-39835, CVE-2025-39836,
CVE-2025-39838, CVE-2025-39839, CVE-2025-39841, CVE-2025-39842,
CVE-2025-39843, CVE-2025-39844, CVE-2025-39845, CVE-2025-39846,
CVE-2025-39847, CVE-2025-39848, CVE-2025-39849, CVE-2025-39850,
CVE-2025-39851, CVE-2025-39852, CVE-2025-39853, CVE-2025-39854,
CVE-2025-39857, CVE-2025-39860, CVE-2025-39861, CVE-2025-39863,
CVE-2025-39864, CVE-2025-39865, CVE-2025-39866, CVE-2025-39869,
CVE-2025-39870, CVE-2025-39871, CVE-2025-39873, CVE-2025-39876,
CVE-2025-39877, CVE-2025-39880, CVE-2025-39881, CVE-2025-39883,
CVE-2025-39885, CVE-2025-39886, CVE-2025-39891, CVE-2025-39894,
CVE-2025-39895, CVE-2025-39899, CVE-2025-39901, CVE-2025-39902,
CVE-2025-39907, CVE-2025-39909, CVE-2025-39911, CVE-2025-39913,
CVE-2025-39914, CVE-2025-39916, CVE-2025-39920, CVE-2025-39923,
CVE-2025-39927, CVE-2025-39929, CVE-2025-39931, CVE-2025-39932,
CVE-2025-39934, CVE-2025-39937, CVE-2025-39938, CVE-2025-39940,
CVE-2025-39942, CVE-2025-39943, CVE-2025-39944, CVE-2025-39945,
CVE-2025-39947, CVE-2025-39948, CVE-2025-39949, CVE-2025-39950,
CVE-2025-39951, CVE-2025-39952, CVE-2025-39953, CVE-2025-39955,
CVE-2025-39957, CVE-2025-39961, CVE-2025-39965, CVE-2025-39967,
CVE-2025-39968, CVE-2025-39969, CVE-2025-39970, CVE-2025-39971,
CVE-2025-39972, CVE-2025-39973, CVE-2025-39977, CVE-2025-39978,
CVE-2025-39980, CVE-2025-39981, CVE-2025-39982, CVE-2025-39985,
CVE-2025-39986, CVE-2025-39987, CVE-2025-39988, CVE-2025-39991,
CVE-2025-39992, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996,
CVE-2025-39998, CVE-2025-40000, CVE-2025-40001, CVE-2025-40006,
CVE-2025-40008, CVE-2025-40009, CVE-2025-40010, CVE-2025-40011,
CVE-2025-40013, CVE-2025-40016, CVE-2025-40020, CVE-2025-40021,
CVE-2025-40024, CVE-2025-40026, CVE-2025-40027, CVE-2025-40029,
CVE-2025-40030, CVE-2025-40031, CVE-2025-40032, CVE-2025-40033,
CVE-2025-40035, CVE-2025-40036, CVE-2025-40037, CVE-2025-40038,
CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40047,
CVE-2025-40048, CVE-2025-40049, CVE-2025-40051, CVE-2025-40052,
CVE-2025-40053, CVE-2025-40055, CVE-2025-40056, CVE-2025-40057,
CVE-2025-40058, CVE-2025-40059, CVE-2025-40060, CVE-2025-40061,
CVE-2025-40062, CVE-2025-40067, CVE-2025-40068, CVE-2025-40070,
CVE-2025-40071, CVE-2025-40077, CVE-2025-40078, CVE-2025-40079,
CVE-2025-40080, CVE-2025-40081, CVE-2025-40083, CVE-2025-40084,
CVE-2025-40085, CVE-2025-40087, CVE-2025-40088, CVE-2025-40092,
CVE-2025-40093, CVE-2025-40094, CVE-2025-40095, CVE-2025-40096,
CVE-2025-40099, CVE-2025-40100, CVE-2025-40101, CVE-2025-40103,
CVE-2025-40104, CVE-2025-40105, CVE-2025-40106, CVE-2025-40107,
CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112,
CVE-2025-40115, CVE-2025-40116, CVE-2025-40118, CVE-2025-40120,
CVE-2025-40121, CVE-2025-40123, CVE-2025-40124, CVE-2025-40125,
CVE-2025-40126, CVE-2025-40127, CVE-2025-40129, CVE-2025-40134,
CVE-2025-40137, CVE-2025-40140, CVE-2025-40141, CVE-2025-40153,
CVE-2025-40154, CVE-2025-40155, CVE-2025-40156, CVE-2025-40159,
CVE-2025-40160, CVE-2025-40164, CVE-2025-40165, CVE-2025-40166,
CVE-2025-40167, CVE-2025-40169, CVE-2025-40171, CVE-2025-40172,
CVE-2025-40173, CVE-2025-40176, CVE-2025-40178, CVE-2025-40179,
CVE-2025-40180, CVE-2025-40183, CVE-2025-40187, CVE-2025-40188,
CVE-2025-40192, CVE-2025-40193, CVE-2025-40194, CVE-2025-40196,
CVE-2025-40198, CVE-2025-40200, CVE-2025-40201, CVE-2025-40202,
CVE-2025-40204, CVE-2025-40205, CVE-2025-40206, CVE-2025-40207,
CVE-2025-40211, CVE-2025-40218, CVE-2025-40219, CVE-2025-40220,
CVE-2025-40221, CVE-2025-40223, CVE-2025-40226, CVE-2025-40231,
CVE-2025-40233, CVE-2025-40235, CVE-2025-40237, CVE-2025-40238,
CVE-2025-40240, CVE-2025-40242, CVE-2025-40243, CVE-2025-40244,
CVE-2025-40245, CVE-2025-40248, CVE-2025-40250, CVE-2025-40251,
CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257,
CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262,
CVE-2025-40263, CVE-2025-40264, CVE-2025-40266, CVE-2025-40268,
CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273,
CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279,
CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283,
CVE-2025-40284, CVE-2025-40285, CVE-2025-40286, CVE-2025-40287,
CVE-2025-40288, CVE-2025-40289, CVE-2025-40292, CVE-2025-40293,
CVE-2025-40294, CVE-2025-40301, CVE-2025-40303, CVE-2025-40304,
CVE-2025-40305, CVE-2025-40306, CVE-2025-40307, CVE-2025-40308,
CVE-2025-40309, CVE-2025-40310, CVE-2025-40311, CVE-2025-40312,
CVE-2025-40313, CVE-2025-40314, CVE-2025-40315, CVE-2025-40317,
CVE-2025-40318, CVE-2025-40319, CVE-2025-40320, CVE-2025-40321,
CVE-2025-40322, CVE-2025-40323, CVE-2025-40324, CVE-2025-40325,
CVE-2025-40328, CVE-2025-40329, CVE-2025-40331, CVE-2025-40333,
CVE-2025-40337, CVE-2025-40339, CVE-2025-40341, CVE-2025-40342,
CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40347,
CVE-2025-40349, CVE-2025-40350, CVE-2025-40351, CVE-2025-40353,
CVE-2025-40358, CVE-2025-40360, CVE-2025-40363, CVE-2025-68168,
CVE-2025-68171, CVE-2025-68172, CVE-2025-68173, CVE-2025-68176,
CVE-2025-68177, CVE-2025-68178, CVE-2025-68179, CVE-2025-68180,
CVE-2025-68183, CVE-2025-68184, CVE-2025-68185, CVE-2025-68190,
CVE-2025-68191, CVE-2025-68192, CVE-2025-68194, CVE-2025-68198,
CVE-2025-68200, CVE-2025-68201, CVE-2025-68204, CVE-2025-68206,
CVE-2025-68208, CVE-2025-68213, CVE-2025-68214, CVE-2025-68217,
CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68222,
CVE-2025-68223, CVE-2025-68227, CVE-2025-68229, CVE-2025-68231,
CVE-2025-68233, CVE-2025-68235, CVE-2025-68237, CVE-2025-68238,
CVE-2025-68241, CVE-2025-68244, CVE-2025-68245, CVE-2025-68246,
CVE-2025-68249, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256,
CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261,
CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266,
CVE-2025-68282, CVE-2025-68283, CVE-2025-68284, CVE-2025-68285,
CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289,
CVE-2025-68290, CVE-2025-68295, CVE-2025-68297, CVE-2025-68301,
CVE-2025-68302, CVE-2025-68303, CVE-2025-68305, CVE-2025-68307,
CVE-2025-68308, CVE-2025-68310, CVE-2025-68311, CVE-2025-68312,
CVE-2025-68313, CVE-2025-68315, CVE-2025-68320, CVE-2025-68321,
CVE-2025-68322, CVE-2025-68325, CVE-2025-68327, CVE-2025-68328,
CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68335,
CVE-2025-68336, CVE-2025-68337, CVE-2025-68339, CVE-2025-68340,
CVE-2025-68342, CVE-2025-68343, CVE-2025-68344, CVE-2025-68345,
CVE-2025-68346, CVE-2025-68347, CVE-2025-68349, CVE-2025-68354,
CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,
CVE-2025-68367, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374,
CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724,
CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733,
CVE-2025-68734, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742,
CVE-2025-68744, CVE-2025-68746, CVE-2025-68753, CVE-2025-68755,
CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759,
CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766,
CVE-2025-68767, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771,
CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,
CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780,
CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68786,
CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795,
CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799,
CVE-2025-68800, CVE-2025-68801, CVE-2025-68804, CVE-2025-68806,
CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811,
CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816,
CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,
CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067,
CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072,
CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088,
CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094,
CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098,
CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111,
CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116,
CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121,
CVE-2025-71122, CVE-2025-71125, CVE-2025-71126, CVE-2025-71127,
CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133,
CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138,
CVE-2025-71140, CVE-2025-71141, CVE-2025-71143, CVE-2025-71147,
CVE-2025-71148, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153,
CVE-2025-71154, CVE-2026-23060, CVE-2026-23074, CVE-2026-23111,
CVE-2026-23112, CVE-2026-23209, CVE-2026-23231, CVE-2026-23273)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
linux-image-6.8.0-1029-xilinx 6.8.0-1029.30
linux-image-xilinx 6.8.0.1029.30
linux-image-xilinx-6.8 6.8.0.1029.30
linux-image-xilinx-zynqmp 6.8.0.1029.30

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8261-1
CVE-2024-36347, CVE-2024-57795, CVE-2025-21833, CVE-2025-22022,
CVE-2025-22103, CVE-2025-22105, CVE-2025-22106, CVE-2025-22107,
CVE-2025-22111, CVE-2025-22113, CVE-2025-22121, CVE-2025-22124,
CVE-2025-22125, CVE-2025-23129, CVE-2025-23130, CVE-2025-23133,
CVE-2025-23143, CVE-2025-37860, CVE-2025-38022, CVE-2025-38105,
CVE-2025-38234, CVE-2025-38502, CVE-2025-38556, CVE-2025-38627,
CVE-2025-38643, CVE-2025-38709, CVE-2025-39678, CVE-2025-39697,
CVE-2025-39805, CVE-2025-39806, CVE-2025-39807, CVE-2025-39808,
CVE-2025-39810, CVE-2025-39811, CVE-2025-39812, CVE-2025-39813,
CVE-2025-39815, CVE-2025-39817, CVE-2025-39819, CVE-2025-39823,
CVE-2025-39824, CVE-2025-39825, CVE-2025-39826, CVE-2025-39827,
CVE-2025-39828, CVE-2025-39829, CVE-2025-39832, CVE-2025-39835,
CVE-2025-39836, CVE-2025-39838, CVE-2025-39839, CVE-2025-39841,
CVE-2025-39842, CVE-2025-39843, CVE-2025-39844, CVE-2025-39845,
CVE-2025-39846, CVE-2025-39847, CVE-2025-39848, CVE-2025-39849,
CVE-2025-39850, CVE-2025-39851, CVE-2025-39852, CVE-2025-39853,
CVE-2025-39854, CVE-2025-39857, CVE-2025-39860, CVE-2025-39861,
CVE-2025-39863, CVE-2025-39864, CVE-2025-39865, CVE-2025-39866,
CVE-2025-39869, CVE-2025-39870, CVE-2025-39871, CVE-2025-39873,
CVE-2025-39876, CVE-2025-39877, CVE-2025-39880, CVE-2025-39881,
CVE-2025-39883, CVE-2025-39885, CVE-2025-39886, CVE-2025-39891,
CVE-2025-39894, CVE-2025-39895, CVE-2025-39899, CVE-2025-39901,
CVE-2025-39902, CVE-2025-39907, CVE-2025-39909, CVE-2025-39911,
CVE-2025-39913, CVE-2025-39914, CVE-2025-39916, CVE-2025-39920,
CVE-2025-39923, CVE-2025-39927, CVE-2025-39929, CVE-2025-39931,
CVE-2025-39932, CVE-2025-39934, CVE-2025-39937, CVE-2025-39938,
CVE-2025-39940, CVE-2025-39942, CVE-2025-39943, CVE-2025-39944,
CVE-2025-39945, CVE-2025-39947, CVE-2025-39948, CVE-2025-39949,
CVE-2025-39950, CVE-2025-39951, CVE-2025-39952, CVE-2025-39953,
CVE-2025-39955, CVE-2025-39957, CVE-2025-39961, CVE-2025-39965,
CVE-2025-39967, CVE-2025-39968, CVE-2025-39969, CVE-2025-39970,
CVE-2025-39971, CVE-2025-39972, CVE-2025-39973, CVE-2025-39977,
CVE-2025-39978, CVE-2025-39980, CVE-2025-39981, CVE-2025-39982,
CVE-2025-39985, CVE-2025-39986, CVE-2025-39987, CVE-2025-39988,
CVE-2025-39991, CVE-2025-39992, CVE-2025-39994, CVE-2025-39995,
CVE-2025-39996, CVE-2025-39998, CVE-2025-40000, CVE-2025-40001,
CVE-2025-40006, CVE-2025-40008, CVE-2025-40009, CVE-2025-40010,
CVE-2025-40011, CVE-2025-40013, CVE-2025-40016, CVE-2025-40020,
CVE-2025-40021, CVE-2025-40024, CVE-2025-40026, CVE-2025-40027,
CVE-2025-40029, CVE-2025-40030, CVE-2025-40031, CVE-2025-40032,
CVE-2025-40033, CVE-2025-40035, CVE-2025-40036, CVE-2025-40037,
CVE-2025-40038, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044,
CVE-2025-40047, CVE-2025-40048, CVE-2025-40049, CVE-2025-40051,
CVE-2025-40052, CVE-2025-40053, CVE-2025-40055, CVE-2025-40056,
CVE-2025-40057, CVE-2025-40058, CVE-2025-40059, CVE-2025-40060,
CVE-2025-40061, CVE-2025-40062, CVE-2025-40067, CVE-2025-40068,
CVE-2025-40070, CVE-2025-40071, CVE-2025-40077, CVE-2025-40078,
CVE-2025-40079, CVE-2025-40080, CVE-2025-40081, CVE-2025-40083,
CVE-2025-40084, CVE-2025-40085, CVE-2025-40087, CVE-2025-40088,
CVE-2025-40092, CVE-2025-40093, CVE-2025-40094, CVE-2025-40095,
CVE-2025-40096, CVE-2025-40099, CVE-2025-40100, CVE-2025-40101,
CVE-2025-40103, CVE-2025-40104, CVE-2025-40105, CVE-2025-40106,
CVE-2025-40107, CVE-2025-40109, CVE-2025-40110, CVE-2025-40111,
CVE-2025-40112, CVE-2025-40115, CVE-2025-40116, CVE-2025-40118,
CVE-2025-40120, CVE-2025-40121, CVE-2025-40123, CVE-2025-40124,
CVE-2025-40125, CVE-2025-40126, CVE-2025-40127, CVE-2025-40129,
CVE-2025-40134, CVE-2025-40137, CVE-2025-40140, CVE-2025-40141,
CVE-2025-40153, CVE-2025-40154, CVE-2025-40155, CVE-2025-40156,
CVE-2025-40159, CVE-2025-40160, CVE-2025-40164, CVE-2025-40165,
CVE-2025-40166, CVE-2025-40167, CVE-2025-40169, CVE-2025-40171,
CVE-2025-40172, CVE-2025-40173, CVE-2025-40176, CVE-2025-40178,
CVE-2025-40179, CVE-2025-40180, CVE-2025-40183, CVE-2025-40187,
CVE-2025-40188, CVE-2025-40192, CVE-2025-40193, CVE-2025-40194,
CVE-2025-40196, CVE-2025-40198, CVE-2025-40200, CVE-2025-40201,
CVE-2025-40202, CVE-2025-40204, CVE-2025-40205, CVE-2025-40206,
CVE-2025-40207, CVE-2025-40211, CVE-2025-40218, CVE-2025-40219,
CVE-2025-40220, CVE-2025-40221, CVE-2025-40223, CVE-2025-40226,
CVE-2025-40231, CVE-2025-40233, CVE-2025-40235, CVE-2025-40237,
CVE-2025-40238, CVE-2025-40240, CVE-2025-40242, CVE-2025-40243,
CVE-2025-40244, CVE-2025-40245, CVE-2025-40248, CVE-2025-40250,
CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254,
CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261,
CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40266,
CVE-2025-40268, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272,
CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278,
CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282,
CVE-2025-40283, CVE-2025-40284, CVE-2025-40285, CVE-2025-40286,
CVE-2025-40287, CVE-2025-40288, CVE-2025-40289, CVE-2025-40292,
CVE-2025-40293, CVE-2025-40294, CVE-2025-40301, CVE-2025-40303,
CVE-2025-40304, CVE-2025-40305, CVE-2025-40306, CVE-2025-40307,
CVE-2025-40308, CVE-2025-40309, CVE-2025-40310, CVE-2025-40311,
CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315,
CVE-2025-40317, CVE-2025-40318, CVE-2025-40319, CVE-2025-40320,
CVE-2025-40321, CVE-2025-40322, CVE-2025-40323, CVE-2025-40324,
CVE-2025-40325, CVE-2025-40328, CVE-2025-40329, CVE-2025-40331,
CVE-2025-40333, CVE-2025-40337, CVE-2025-40339, CVE-2025-40341,
CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40346,
CVE-2025-40347, CVE-2025-40349, CVE-2025-40350, CVE-2025-40351,
CVE-2025-40353, CVE-2025-40358, CVE-2025-40360, CVE-2025-40363,
CVE-2025-68168, CVE-2025-68171, CVE-2025-68172, CVE-2025-68173,
CVE-2025-68176, CVE-2025-68177, CVE-2025-68178, CVE-2025-68179,
CVE-2025-68180, CVE-2025-68183, CVE-2025-68184, CVE-2025-68185,
CVE-2025-68190, CVE-2025-68191, CVE-2025-68192, CVE-2025-68194,
CVE-2025-68198, CVE-2025-68200, CVE-2025-68201, CVE-2025-68204,
CVE-2025-68206, CVE-2025-68208, CVE-2025-68213, CVE-2025-68214,
CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220,
CVE-2025-68222, CVE-2025-68223, CVE-2025-68227, CVE-2025-68229,
CVE-2025-68231, CVE-2025-68233, CVE-2025-68235, CVE-2025-68237,
CVE-2025-68238, CVE-2025-68241, CVE-2025-68244, CVE-2025-68245,
CVE-2025-68246, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255,
CVE-2025-68256, CVE-2025-68257, CVE-2025-68258, CVE-2025-68259,
CVE-2025-68261, CVE-2025-68263, CVE-2025-68264, CVE-2025-68265,
CVE-2025-68266, CVE-2025-68282, CVE-2025-68283, CVE-2025-68284,
CVE-2025-68285, CVE-2025-68286, CVE-2025-68287, CVE-2025-68288,
CVE-2025-68289, CVE-2025-68290, CVE-2025-68295, CVE-2025-68297,
CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68305,
CVE-2025-68307, CVE-2025-68308, CVE-2025-68310, CVE-2025-68311,
CVE-2025-68312, CVE-2025-68313, CVE-2025-68315, CVE-2025-68320,
CVE-2025-68321, CVE-2025-68322, CVE-2025-68325, CVE-2025-68327,
CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332,
CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68339,
CVE-2025-68340, CVE-2025-68342, CVE-2025-68343, CVE-2025-68344,
CVE-2025-68345, CVE-2025-68346, CVE-2025-68347, CVE-2025-68349,
CVE-2025-68354, CVE-2025-68362, CVE-2025-68363, CVE-2025-68364,
CVE-2025-68366, CVE-2025-68367, CVE-2025-68371, CVE-2025-68372,
CVE-2025-68374, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380,
CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732,
CVE-2025-68733, CVE-2025-68734, CVE-2025-68740, CVE-2025-68741,
CVE-2025-68742, CVE-2025-68744, CVE-2025-68746, CVE-2025-68753,
CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758,
CVE-2025-68759, CVE-2025-68763, CVE-2025-68764, CVE-2025-68765,
CVE-2025-68766, CVE-2025-68767, CVE-2025-68769, CVE-2025-68770,
CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774,
CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778,
CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785,
CVE-2025-68786, CVE-2025-68787, CVE-2025-68788, CVE-2025-68794,
CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798,
CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68804,
CVE-2025-68806, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810,
CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815,
CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819,
CVE-2025-68820, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,
CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071,
CVE-2025-71072, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,
CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083,
CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087,
CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093,
CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097,
CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104,
CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109,
CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114,
CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120,
CVE-2025-71121, CVE-2025-71122, CVE-2025-71125, CVE-2025-71126,
CVE-2025-71127, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132,
CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137,
CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143,
CVE-2025-71147, CVE-2025-71148, CVE-2025-71149, CVE-2025-71150,
CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2026-23060,
CVE-2026-23074, CVE-2026-23111, CVE-2026-23112, CVE-2026-23209,
CVE-2026-23231, CVE-2026-23268, CVE-2026-23269, CVE-2026-23273,
CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406,
CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410,
CVE-2026-23411, https://launchpad.net/bugs/2143853

Package Information:
https://launchpad.net/ubuntu/+source/linux-xilinx/6.8.0-1029.30

[USN-8260-1] Linux kernel (Azure FIPS) vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8260-1
May 07, 2026

linux-azure-fips vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS

Details:

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- MIPS architecture;
- PowerPC architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Network block device driver;
- Bluetooth drivers;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- GPU drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Macintosh device drivers;
- Multiple devices driver;
- Media drivers;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- NVME drivers;
- PA-RISC drivers;
- Chrome hardware platform drivers;
- x86 platform drivers;
- Voltage and Current Regulator drivers;
- SCSI subsystem;
- SPI subsystem;
- Media Oriented Systems Transport (MOST) driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- USB Host Controller drivers;
- USB Type-C Connector System Software Interface driver;
- Backlight driver;
- Watchdog drivers;
- BFS file system;
- BTRFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS+ file system;
- File systems infrastructure;
- Journaling layer for block devices (JBD2);
- Network file system (NFS) client;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- SMB network file system;
- BPF subsystem;
- Ethernet bridge;
- io_uring subsystem;
- Locking primitives;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Tracing infrastructure;
- Memory management;
- CAIF protocol;
- Ceph Core library;
- Networking core;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Network sockets;
- Sun RPC protocol;
- Integrity Measurement Architecture(IMA) framework;
- Key management;
- Simplified Mandatory Access Control Kernel framework;
- FireWire sound drivers;
- HD-audio driver;
- Turtle Beach Wavefront ALSA driver;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM subsystem;
(CVE-2024-57795, CVE-2025-22022, CVE-2025-22111, CVE-2025-38022,
CVE-2025-38234, CVE-2025-40164, CVE-2025-40325, CVE-2025-68206,
CVE-2025-68254, CVE-2025-68255, CVE-2025-68256, CVE-2025-68257,
CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68263,
CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68291,
CVE-2025-68325, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,
CVE-2025-68337, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346,
CVE-2025-68347, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362,
CVE-2025-68363, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367,
CVE-2025-68369, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374,
CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724,
CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733,
CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68744,
CVE-2025-68746, CVE-2025-68753, CVE-2025-68755, CVE-2025-68756,
CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68763,
CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-68767,
CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772,
CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776,
CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68782,
CVE-2025-68783, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787,
CVE-2025-68788, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796,
CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800,
CVE-2025-68801, CVE-2025-68804, CVE-2025-68806, CVE-2025-68808,
CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813,
CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817,
CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821,
CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067,
CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072,
CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088,
CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094,
CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098,
CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111,
CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116,
CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121,
CVE-2025-71122, CVE-2025-71123, CVE-2025-71125, CVE-2025-71126,
CVE-2025-71127, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132,
CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137,
CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143,
CVE-2025-71144, CVE-2025-71147, CVE-2025-71148, CVE-2025-71150,
CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2026-23112,
CVE-2026-23209, CVE-2026-23231, CVE-2026-23273)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
linux-image-6.8.0-1054-azure-fips 6.8.0-1054.60+fips1
Available with Ubuntu Pro
linux-image-azure-fips 6.8.0-1054.60+fips1
Available with Ubuntu Pro
linux-image-azure-fips-6.8 6.8.0-1054.60+fips1
Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8260-1
CVE-2024-36347, CVE-2024-57795, CVE-2025-22022, CVE-2025-22111,
CVE-2025-38022, CVE-2025-38234, CVE-2025-40164, CVE-2025-40325,
CVE-2025-68206, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256,
CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261,
CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266,
CVE-2025-68291, CVE-2025-68325, CVE-2025-68332, CVE-2025-68335,
CVE-2025-68336, CVE-2025-68337, CVE-2025-68344, CVE-2025-68345,
CVE-2025-68346, CVE-2025-68347, CVE-2025-68349, CVE-2025-68354,
CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,
CVE-2025-68367, CVE-2025-68369, CVE-2025-68371, CVE-2025-68372,
CVE-2025-68374, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380,
CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732,
CVE-2025-68733, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742,
CVE-2025-68744, CVE-2025-68746, CVE-2025-68753, CVE-2025-68755,
CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759,
CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766,
CVE-2025-68767, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771,
CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,
CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780,
CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68786,
CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795,
CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799,
CVE-2025-68800, CVE-2025-68801, CVE-2025-68804, CVE-2025-68806,
CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811,
CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816,
CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,
CVE-2025-68821, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,
CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071,
CVE-2025-71072, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,
CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083,
CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087,
CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093,
CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097,
CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104,
CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109,
CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114,
CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120,
CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71125,
CVE-2025-71126, CVE-2025-71127, CVE-2025-71130, CVE-2025-71131,
CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136,
CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71141,
CVE-2025-71143, CVE-2025-71144, CVE-2025-71147, CVE-2025-71148,
CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153,
CVE-2025-71154, CVE-2026-23112, CVE-2026-23209, CVE-2026-23231,
CVE-2026-23273

Package Information:
https://launchpad.net/ubuntu/+source/linux-azure-fips/6.8.0-1054.60+fips1

[USN-8258-1] Linux kernel (Azure) vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8258-1
May 07, 2026

linux-azure vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-azure: Linux kernel for Microsoft Azure Cloud systems

Details:

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- MIPS architecture;
- PowerPC architecture;
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Network block device driver;
- Bluetooth drivers;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- Data acquisition framework and drivers;
- Hardware crypto device drivers;
- GPU drivers;
- Hardware monitoring drivers;
- InfiniBand drivers;
- Input Device core drivers;
- IOMMU subsystem;
- IRQ chip drivers;
- Macintosh device drivers;
- Multiple devices driver;
- Media drivers;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Ethernet team driver;
- MediaTek network drivers;
- NVME drivers;
- PA-RISC drivers;
- Chrome hardware platform drivers;
- x86 platform drivers;
- Voltage and Current Regulator drivers;
- SCSI subsystem;
- SPI subsystem;
- Media Oriented Systems Transport (MOST) driver;
- Realtek RTL8723BS SDIO drivers;
- TCM subsystem;
- USB Host Controller drivers;
- USB Type-C Connector System Software Interface driver;
- Backlight driver;
- Watchdog drivers;
- BFS file system;
- BTRFS file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS+ file system;
- File systems infrastructure;
- Journaling layer for block devices (JBD2);
- Network file system (NFS) client;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- SMB network file system;
- BPF subsystem;
- Ethernet bridge;
- io_uring subsystem;
- Locking primitives;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Tracing infrastructure;
- Memory management;
- CAIF protocol;
- Ceph Core library;
- Networking core;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- MAC80211 subsystem;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Network sockets;
- Sun RPC protocol;
- Integrity Measurement Architecture(IMA) framework;
- Key management;
- Simplified Mandatory Access Control Kernel framework;
- FireWire sound drivers;
- HD-audio driver;
- Turtle Beach Wavefront ALSA driver;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM subsystem;
(CVE-2024-57795, CVE-2025-22022, CVE-2025-22111, CVE-2025-38022,
CVE-2025-38234, CVE-2025-40164, CVE-2025-40325, CVE-2025-68206,
CVE-2025-68254, CVE-2025-68255, CVE-2025-68256, CVE-2025-68257,
CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68263,
CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68291,
CVE-2025-68325, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336,
CVE-2025-68337, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346,
CVE-2025-68347, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362,
CVE-2025-68363, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367,
CVE-2025-68369, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374,
CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724,
CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733,
CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68744,
CVE-2025-68746, CVE-2025-68753, CVE-2025-68755, CVE-2025-68756,
CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68763,
CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-68767,
CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772,
CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776,
CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68782,
CVE-2025-68783, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787,
CVE-2025-68788, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796,
CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800,
CVE-2025-68801, CVE-2025-68804, CVE-2025-68806, CVE-2025-68808,
CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813,
CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817,
CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821,
CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067,
CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072,
CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088,
CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094,
CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098,
CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111,
CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116,
CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121,
CVE-2025-71122, CVE-2025-71123, CVE-2025-71125, CVE-2025-71126,
CVE-2025-71127, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132,
CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137,
CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143,
CVE-2025-71144, CVE-2025-71147, CVE-2025-71148, CVE-2025-71150,
CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2026-23112,
CVE-2026-23209, CVE-2026-23231)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
linux-image-6.8.0-1054-azure 6.8.0-1054.60
linux-image-azure-6.8 6.8.0-1054.60
linux-image-azure-lts-24.04 6.8.0-1054.60

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8258-1
CVE-2024-36347, CVE-2024-57795, CVE-2025-22022, CVE-2025-22111,
CVE-2025-38022, CVE-2025-38234, CVE-2025-40164, CVE-2025-40325,
CVE-2025-68206, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256,
CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261,
CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266,
CVE-2025-68291, CVE-2025-68325, CVE-2025-68332, CVE-2025-68335,
CVE-2025-68336, CVE-2025-68337, CVE-2025-68344, CVE-2025-68345,
CVE-2025-68346, CVE-2025-68347, CVE-2025-68349, CVE-2025-68354,
CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,
CVE-2025-68367, CVE-2025-68369, CVE-2025-68371, CVE-2025-68372,
CVE-2025-68374, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380,
CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732,
CVE-2025-68733, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742,
CVE-2025-68744, CVE-2025-68746, CVE-2025-68753, CVE-2025-68755,
CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759,
CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766,
CVE-2025-68767, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771,
CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,
CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780,
CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68786,
CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795,
CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799,
CVE-2025-68800, CVE-2025-68801, CVE-2025-68804, CVE-2025-68806,
CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811,
CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816,
CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820,
CVE-2025-68821, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,
CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071,
CVE-2025-71072, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078,
CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083,
CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087,
CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093,
CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097,
CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104,
CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109,
CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114,
CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120,
CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71125,
CVE-2025-71126, CVE-2025-71127, CVE-2025-71130, CVE-2025-71131,
CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136,
CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71141,
CVE-2025-71143, CVE-2025-71144, CVE-2025-71147, CVE-2025-71148,
CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153,
CVE-2025-71154, CVE-2026-23112, CVE-2026-23209, CVE-2026-23231

Package Information:
https://launchpad.net/ubuntu/+source/linux-azure/6.8.0-1054.60

[USN-8257-1] Linux kernel (Raspberry Pi) vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8257-1
May 07, 2026

linux-raspi vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-raspi: Linux kernel for Raspberry Pi systems

Details:

Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode causing loss of integrity and confidentiality. (CVE-2024-36347)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- MIPS architecture;
- PowerPC architecture;
- User-Mode Linux (UML);
- x86 architecture;
- Block layer subsystem;
- Cryptographic API;
- ACPI drivers;
- Ublk userspace block driver;
- Bluetooth drivers;
- Character device driver;
- TPM device driver;
- Clock framework and drivers;
- GPU drivers;
- Hardware monitoring drivers;
- Intel Trace Hub HW tracing drivers;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- IOMMU subsystem;
- Multiple devices driver;
- Media drivers;
- Network drivers;
- Mellanox network drivers;
- STMicroelectronics network drivers;
- Ethernet team driver;
- NVME drivers;
- PA-RISC drivers;
- Chrome hardware platform drivers;
- x86 platform drivers;
- SCSI subsystem;
- SPI subsystem;
- TCM subsystem;
- Freescale USB OTG Transceiver Driver;
- USB Type-C Connector System Software Interface driver;
- Watchdog drivers;
- BTRFS file system;
- exFAT file system;
- Ext4 file system;
- F2FS file system;
- FUSE (File system in Userspace);
- HFS+ file system;
- File systems infrastructure;
- Network file system (NFS) server daemon;
- File system notification infrastructure;
- NTFS3 file system;
- OCFS2 file system;
- SMB network file system;
- XFS file system;
- User-space API (UAPI);
- io_uring subsystem;
- Scheduler infrastructure;
- Shadow Call Stack mechanism;
- Tracing infrastructure;
- Memory management;
- BPF subsystem;
- CAIF protocol;
- Ceph Core library;
- Networking core;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IPv4 networking;
- IPv6 networking;
- Multipath TCP;
- Netfilter;
- NET/ROM layer;
- NFC subsystem;
- Open vSwitch;
- Rose network layer;
- Network traffic control;
- Sun RPC protocol;
- Key management;
- Landlock security;
- STMicroelectronics SoC drivers;
- USB sound devices;
- KVM subsystem;
(CVE-2025-68351, CVE-2025-68353, CVE-2025-68365, CVE-2025-68368,
CVE-2025-68725, CVE-2025-68736, CVE-2025-68745, CVE-2025-68767,
CVE-2025-68768, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771,
CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775,
CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780,
CVE-2025-68781, CVE-2025-68782, CVE-2025-68783, CVE-2025-68784,
CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788,
CVE-2025-68791, CVE-2025-68792, CVE-2025-68793, CVE-2025-68794,
CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798,
CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68802,
CVE-2025-68803, CVE-2025-68804, CVE-2025-68805, CVE-2025-68806,
CVE-2025-68807, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810,
CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815,
CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819,
CVE-2025-68820, CVE-2025-68821, CVE-2025-68822, CVE-2025-68823,
CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067,
CVE-2025-71068, CVE-2025-71069, CVE-2025-71070, CVE-2025-71071,
CVE-2025-71072, CVE-2025-71073, CVE-2025-71075, CVE-2025-71076,
CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081,
CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085,
CVE-2025-71086, CVE-2025-71087, CVE-2025-71089, CVE-2025-71091,
CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096,
CVE-2025-71097, CVE-2025-71098, CVE-2025-71099, CVE-2025-71100,
CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105,
CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111,
CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71115,
CVE-2025-71116, CVE-2025-71117, CVE-2025-71118, CVE-2025-71119,
CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71123,
CVE-2025-71124, CVE-2025-71125, CVE-2025-71126, CVE-2025-71130,
CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135,
CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71140,
CVE-2025-71143, CVE-2025-71146, CVE-2025-71147, CVE-2025-71148,
CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154,
CVE-2025-71156, CVE-2025-71157, CVE-2026-23091, CVE-2026-23112,
CVE-2026-23209, CVE-2026-23231, CVE-2026-23273)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
linux-image-6.17.0-1014-raspi 6.17.0-1014.14
linux-image-raspi 6.17.0-1014.14
linux-image-raspi-6.17 6.17.0-1014.14

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8257-1
CVE-2024-36347, CVE-2025-68351, CVE-2025-68353, CVE-2025-68365,
CVE-2025-68368, CVE-2025-68725, CVE-2025-68736, CVE-2025-68745,
CVE-2025-68767, CVE-2025-68768, CVE-2025-68769, CVE-2025-68770,
CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774,
CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778,
CVE-2025-68780, CVE-2025-68781, CVE-2025-68782, CVE-2025-68783,
CVE-2025-68784, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787,
CVE-2025-68788, CVE-2025-68791, CVE-2025-68792, CVE-2025-68793,
CVE-2025-68794, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797,
CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801,
CVE-2025-68802, CVE-2025-68803, CVE-2025-68804, CVE-2025-68805,
CVE-2025-68806, CVE-2025-68807, CVE-2025-68808, CVE-2025-68809,
CVE-2025-68810, CVE-2025-68811, CVE-2025-68813, CVE-2025-68814,
CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818,
CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-68822,
CVE-2025-68823, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066,
CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71070,
CVE-2025-71071, CVE-2025-71072, CVE-2025-71073, CVE-2025-71075,
CVE-2025-71076, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079,
CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084,
CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71089,
CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095,
CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71099,
CVE-2025-71100, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104,
CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109,
CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114,
CVE-2025-71115, CVE-2025-71116, CVE-2025-71117, CVE-2025-71118,
CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122,
CVE-2025-71123, CVE-2025-71124, CVE-2025-71125, CVE-2025-71126,
CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133,
CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138,
CVE-2025-71140, CVE-2025-71143, CVE-2025-71146, CVE-2025-71147,
CVE-2025-71148, CVE-2025-71149, CVE-2025-71150, CVE-2025-71151,
CVE-2025-71153, CVE-2025-71154, CVE-2025-71156, CVE-2025-71157,
CVE-2026-23091, CVE-2026-23112, CVE-2026-23209, CVE-2026-23231,
CVE-2026-23273

Package Information:
https://launchpad.net/ubuntu/+source/linux-raspi/6.17.0-1014.14

[USN-8255-1] Linux kernel vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8255-1
May 07, 2026

linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure,
linux-azure-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke,
linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15,
linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15,
linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia,
linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-realtime
vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 22.04 LTS
- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS
- linux-azure: Linux kernel for Microsoft Azure Cloud systems
- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS
- linux-fips: Linux kernel with FIPS
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS
- linux-gke: Linux kernel for Google Container Engine (GKE) systems
- linux-gkeop: Linux kernel for Google Container Engine (GKE) systems
- linux-ibm: Linux kernel for IBM cloud systems
- linux-intel-iot-realtime: Linux kernel for Intel IoT Real-time platforms
- linux-intel-iotg: Linux kernel for Intel IoT platforms
- linux-kvm: Linux kernel for cloud environments
- linux-lowlatency: Linux low latency kernel
- linux-nvidia: Linux kernel for NVIDIA systems
- linux-nvidia-tegra: Linux kernel for NVIDIA Tegra systems
- linux-nvidia-tegra-igx: Linux kernel for NVIDIA Tegra IGX systems
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-realtime: Linux kernel for Real-time systems
- linux-aws-5.15: Linux kernel for Amazon Web Services (AWS) systems
- linux-hwe-5.15: Linux hardware enablement (HWE) kernel
- linux-ibm-5.15: Linux kernel for IBM cloud systems
- linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms
- linux-lowlatency-hwe-5.15: Linux low latency kernel

Details:

Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS
implementation in the Ubuntu Linux kernel did not properly perform
permission checks in certain situations. A local attacker could possibly
use this to gain elevated privileges. (CVE-2023-2640)

Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in
the Ubuntu Linux kernel did not properly perform permission checks in
certain situations. A local attacker could possibly use this to gain
elevated privileges. (CVE-2023-32629)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- NVME drivers;
(CVE-2026-23112, CVE-2026-23273)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
linux-image-5.15.0-1047-nvidia-tegra-igx 5.15.0-1047.47
linux-image-5.15.0-1047-nvidia-tegra-igx-rt 5.15.0-1047.47
linux-image-5.15.0-1058-nvidia-tegra 5.15.0-1058.58
linux-image-5.15.0-1058-nvidia-tegra-rt 5.15.0-1058.58
linux-image-5.15.0-1089-gkeop 5.15.0-1089.97
linux-image-5.15.0-1098-intel-iot-realtime 5.15.0-1098.100
Available with Ubuntu Pro
linux-image-5.15.0-1098-kvm 5.15.0-1098.103
linux-image-5.15.0-1100-ibm 5.15.0-1100.103
linux-image-5.15.0-1101-intel-iotg 5.15.0-1101.107
linux-image-5.15.0-1101-nvidia 5.15.0-1101.102
linux-image-5.15.0-1101-nvidia-lowlatency 5.15.0-1101.102
linux-image-5.15.0-1102-gke 5.15.0-1102.108
linux-image-5.15.0-1103-oracle 5.15.0-1103.109
linux-image-5.15.0-1105-realtime 5.15.0-1105.114
Available with Ubuntu Pro
linux-image-5.15.0-1106-aws 5.15.0-1106.113
linux-image-5.15.0-1106-aws-64k 5.15.0-1106.113
linux-image-5.15.0-1106-aws-fips 5.15.0-1106.113+fips1
Available with Ubuntu Pro
linux-image-5.15.0-1106-gcp 5.15.0-1106.115
linux-image-5.15.0-1106-gcp-fips 5.15.0-1106.115+fips1
Available with Ubuntu Pro
linux-image-5.15.0-1111-azure 5.15.0-1111.120
linux-image-5.15.0-1111-azure-fips 5.15.0-1111.120+fips1
Available with Ubuntu Pro
linux-image-5.15.0-177-fips 5.15.0-177.187+fips1
Available with Ubuntu Pro
linux-image-5.15.0-177-generic 5.15.0-177.187
linux-image-5.15.0-177-generic-64k 5.15.0-177.187
linux-image-5.15.0-177-generic-lpae 5.15.0-177.187
linux-image-5.15.0-177-lowlatency 5.15.0-177.187
linux-image-5.15.0-177-lowlatency-64k 5.15.0-177.187
linux-image-aws-5.15 5.15.0.1106.109
linux-image-aws-64k-5.15 5.15.0.1106.109
linux-image-aws-64k-lts-22.04 5.15.0.1106.109
linux-image-aws-fips 5.15.0.1106.102
Available with Ubuntu Pro
linux-image-aws-fips-5.15 5.15.0.1106.102
Available with Ubuntu Pro
linux-image-aws-lts-22.04 5.15.0.1106.109
linux-image-azure-5.15 5.15.0.1111.109
linux-image-azure-fips 5.15.0.1111.96
Available with Ubuntu Pro
linux-image-azure-fips-5.15 5.15.0.1111.96
Available with Ubuntu Pro
linux-image-azure-lts-22.04 5.15.0.1111.109
linux-image-fips 5.15.0.177.103
Available with Ubuntu Pro
linux-image-fips-5.15 5.15.0.177.103
Available with Ubuntu Pro
linux-image-gcp-5.15 5.15.0.1106.102
linux-image-gcp-fips 5.15.0.1106.96
Available with Ubuntu Pro
linux-image-gcp-fips-5.15 5.15.0.1106.96
Available with Ubuntu Pro
linux-image-gcp-lts-22.04 5.15.0.1106.102
linux-image-generic 5.15.0.177.162
linux-image-generic-5.15 5.15.0.177.162
linux-image-generic-64k 5.15.0.177.162
linux-image-generic-64k-5.15 5.15.0.177.162
linux-image-generic-lpae 5.15.0.177.162
linux-image-generic-lpae-5.15 5.15.0.177.162
linux-image-gke 5.15.0.1102.101
linux-image-gke-5.15 5.15.0.1102.101
linux-image-gkeop 5.15.0.1089.88
linux-image-gkeop-5.15 5.15.0.1089.88
linux-image-ibm 5.15.0.1100.96
linux-image-ibm-5.15 5.15.0.1100.96
linux-image-intel-iot-realtime 5.15.0.1098.102
Available with Ubuntu Pro
linux-image-intel-iot-realtime-5.15 5.15.0.1098.102
Available with Ubuntu Pro
linux-image-intel-iotg 5.15.0.1101.100
linux-image-intel-iotg-5.15 5.15.0.1101.100
linux-image-kvm 5.15.0.1098.94
linux-image-kvm-5.15 5.15.0.1098.94
linux-image-lowlatency 5.15.0.177.149
linux-image-lowlatency-5.15 5.15.0.177.149
linux-image-lowlatency-64k 5.15.0.177.149
linux-image-lowlatency-64k-5.15 5.15.0.177.149
linux-image-nvidia 5.15.0.1101.101
linux-image-nvidia-5.15 5.15.0.1101.101
linux-image-nvidia-lowlatency 5.15.0.1101.101
linux-image-nvidia-lowlatency-5.15 5.15.0.1101.101
linux-image-nvidia-tegra 5.15.0.1058.58
linux-image-nvidia-tegra-5.15 5.15.0.1058.58
linux-image-nvidia-tegra-igx 5.15.0.1047.49
linux-image-nvidia-tegra-igx-5.15 5.15.0.1047.49
linux-image-nvidia-tegra-igx-rt 5.15.0.1047.49
linux-image-nvidia-tegra-igx-rt-5.15 5.15.0.1047.49
linux-image-nvidia-tegra-rt 5.15.0.1058.58
linux-image-nvidia-tegra-rt-5.15 5.15.0.1058.58
linux-image-oracle-5.15 5.15.0.1103.99
linux-image-oracle-lts-22.04 5.15.0.1103.99
linux-image-realtime 5.15.0.1105.109
Available with Ubuntu Pro
linux-image-realtime-5.15 5.15.0.1105.109
Available with Ubuntu Pro
linux-image-virtual 5.15.0.177.162
linux-image-virtual-5.15 5.15.0.177.162

Ubuntu 20.04 LTS
linux-image-5.15.0-1100-ibm 5.15.0-1100.103~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-1101-intel-iotg 5.15.0-1101.107~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-1106-aws 5.15.0-1106.113~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-177-generic 5.15.0-177.187~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-177-generic-64k 5.15.0-177.187~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-177-generic-lpae 5.15.0-177.187~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-177-lowlatency 5.15.0-177.187~20.04.1
Available with Ubuntu Pro
linux-image-5.15.0-177-lowlatency-64k 5.15.0-177.187~20.04.1
Available with Ubuntu Pro
linux-image-aws 5.15.0.1106.113~20.04.1
Available with Ubuntu Pro
linux-image-aws-5.15 5.15.0.1106.113~20.04.1
Available with Ubuntu Pro
linux-image-generic-5.15 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-generic-64k-5.15 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-generic-64k-hwe-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-generic-hwe-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-generic-lpae-5.15 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-generic-lpae-hwe-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-ibm 5.15.0.1100.103~20.04.1
Available with Ubuntu Pro
linux-image-ibm-5.15 5.15.0.1100.103~20.04.1
Available with Ubuntu Pro
linux-image-intel 5.15.0.1101.107~20.04.1
Available with Ubuntu Pro
linux-image-intel-iotg 5.15.0.1101.107~20.04.1
Available with Ubuntu Pro
linux-image-intel-iotg-5.15 5.15.0.1101.107~20.04.1
Available with Ubuntu Pro
linux-image-lowlatency-5.15 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-lowlatency-64k-5.15 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-lowlatency-64k-hwe-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-lowlatency-hwe-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-oem-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-oem-20.04b 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-oem-20.04c 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-oem-20.04d 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-virtual-5.15 5.15.0.177.187~20.04.1
Available with Ubuntu Pro
linux-image-virtual-hwe-20.04 5.15.0.177.187~20.04.1
Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8255-1
CVE-2023-2640, CVE-2023-32629, CVE-2026-23112, CVE-2026-23273

Package Information:
https://launchpad.net/ubuntu/+source/linux/5.15.0-177.187
https://launchpad.net/ubuntu/+source/linux-aws/5.15.0-1106.113
https://launchpad.net/ubuntu/+source/linux-aws-fips/5.15.0-1106.113+fips1
https://launchpad.net/ubuntu/+source/linux-azure/5.15.0-1111.120
https://launchpad.net/ubuntu/+source/linux-azure-fips/5.15.0-1111.120+fips1
https://launchpad.net/ubuntu/+source/linux-fips/5.15.0-177.187+fips1
https://launchpad.net/ubuntu/+source/linux-gcp/5.15.0-1106.115
https://launchpad.net/ubuntu/+source/linux-gcp-fips/5.15.0-1106.115+fips1
https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1102.108
https://launchpad.net/ubuntu/+source/linux-gkeop/5.15.0-1089.97
https://launchpad.net/ubuntu/+source/linux-ibm/5.15.0-1100.103
https://launchpad.net/ubuntu/+source/linux-intel-iot-realtime/5.15.0-1098.100
https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1101.107
https://launchpad.net/ubuntu/+source/linux-kvm/5.15.0-1098.103
https://launchpad.net/ubuntu/+source/linux-lowlatency/5.15.0-177.187
https://launchpad.net/ubuntu/+source/linux-nvidia/5.15.0-1101.102
https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/5.15.0-1058.58
https://launchpad.net/ubuntu/+source/linux-nvidia-tegra-igx/5.15.0-1047.47
https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1103.109
https://launchpad.net/ubuntu/+source/linux-realtime/5.15.0-1105.114

[USN-8252-1] OpenJPEG vulnerability

==========================================================================
Ubuntu Security Notice USN-8252-1
May 07, 2026

openjpeg2 vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

OpenJPEG could be made to crash or run programs when encoding image files.

Software Description:
- openjpeg2: JPEG 2000 image compression/decompression library

Details:

It was discovered that OpenJPEG did not properly handle memory when
encoding image files. An attacker could use this issue to cause OpenJPEG to
crash, resulting in a denial of service, or possibly execute arbitrary
code.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
libopenjp2-7 2.5.4-1ubuntu0.1

Ubuntu 25.10
libopenjp2-7 2.5.3-2.1ubuntu0.1

Ubuntu 24.04 LTS
libopenjp2-7 2.5.0-2ubuntu0.5

Ubuntu 22.04 LTS
libopenjp2-7 2.4.0-6ubuntu0.5

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8252-1
CVE-2026-6192

Package Information:
https://launchpad.net/ubuntu/+source/openjpeg2/2.5.4-1ubuntu0.1
https://launchpad.net/ubuntu/+source/openjpeg2/2.5.3-2.1ubuntu0.1
https://launchpad.net/ubuntu/+source/openjpeg2/2.5.0-2ubuntu0.5
https://launchpad.net/ubuntu/+source/openjpeg2/2.4.0-6ubuntu0.5

[USN-8253-1] Postfix vulnerability

==========================================================================
Ubuntu Security Notice USN-8253-1
May 07, 2026

postfix vulnerability
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 26.04 LTS
- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Postfix could be made to crash if it received specially crafted network
traffic.

Software Description:
- postfix: High-performance mail transport agent

Details:

Kamil Frankowicz discovered that Postfix incorrectly handled certain
enhanced status codes. A remote attacker could possibly use this issue to
cause Postfix to crash, resulting in a denial of service.

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 26.04 LTS
postfix 3.10.6-4ubuntu2.1

Ubuntu 25.10
postfix 3.10.2-1ubuntu2.1

Ubuntu 24.04 LTS
postfix 3.8.6-1ubuntu0.1

Ubuntu 22.04 LTS
postfix 3.6.4-1ubuntu1.4

In general, a standard system update will make all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8253-1
CVE-2026-43964

Package Information:
https://launchpad.net/ubuntu/+source/postfix/3.10.6-4ubuntu2.1
https://launchpad.net/ubuntu/+source/postfix/3.10.2-1ubuntu2.1
https://launchpad.net/ubuntu/+source/postfix/3.8.6-1ubuntu0.1
https://launchpad.net/ubuntu/+source/postfix/3.6.4-1ubuntu1.4

[USN-8254-1] Linux kernel vulnerabilities

==========================================================================
Ubuntu Security Notice USN-8254-1
May 07, 2026

linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-gcp,
linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm,
linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle,
linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime,
linux-realtime-6.8 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS
- linux-fips: Linux kernel with FIPS
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS
- linux-gke: Linux kernel for Google Container Engine (GKE) systems
- linux-gkeop: Linux kernel for Google Container Engine (GKE) systems
- linux-ibm: Linux kernel for IBM cloud systems
- linux-lowlatency: Linux low latency kernel
- linux-oracle: Linux kernel for Oracle Cloud systems
- linux-raspi: Linux kernel for Raspberry Pi systems
- linux-raspi-realtime: Linux kernel for Raspberry Pi Real-time systems
- linux-realtime: Linux kernel for Real-time systems
- linux-aws-6.8: Linux kernel for Amazon Web Services (AWS) systems
- linux-hwe-6.8: Linux hardware enablement (HWE) kernel
- linux-ibm-6.8: Linux kernel for IBM cloud systems
- linux-lowlatency-hwe-6.8: Linux low latency kernel
- linux-oracle-6.8: Linux kernel for Oracle Cloud systems
- linux-realtime-6.8: Linux kernel for Real-time systems

Details:

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Network drivers;
- NVME drivers;
- Netfilter;
(CVE-2026-23112, CVE-2026-23231, CVE-2026-23273)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.04 LTS
linux-image-6.8.0-1038-gkeop 6.8.0-1038.41
linux-image-6.8.0-1050-oracle 6.8.0-1050.51
linux-image-6.8.0-1050-oracle-64k 6.8.0-1050.51
linux-image-6.8.0-1051-gke 6.8.0-1051.57
linux-image-6.8.0-1051-gke-64k 6.8.0-1051.57
linux-image-6.8.0-1052-ibm 6.8.0-1052.52
linux-image-6.8.0-1053-aws 6.8.0-1053.56
linux-image-6.8.0-1053-aws-64k 6.8.0-1053.56
linux-image-6.8.0-1053-aws-fips 6.8.0-1053.56+fips1
Available with Ubuntu Pro
linux-image-6.8.0-1053-raspi 6.8.0-1053.57
linux-image-6.8.0-1055-gcp 6.8.0-1055.58
linux-image-6.8.0-1055-gcp-64k 6.8.0-1055.58
linux-image-6.8.0-1055-gcp-fips 6.8.0-1055.58+fips1
Available with Ubuntu Pro
linux-image-6.8.0-111-fips 6.8.0-111.111+fips1
Available with Ubuntu Pro
linux-image-6.8.0-111-generic 6.8.0-111.111
linux-image-6.8.0-111-generic-64k 6.8.0-111.111
linux-image-6.8.0-111-lowlatency 6.8.0-111.111.1
linux-image-6.8.0-111-lowlatency-64k 6.8.0-111.111.1
linux-image-6.8.0-2043-raspi-realtime 6.8.0-2043.44
Available with Ubuntu Pro
linux-image-6.8.1-1048-realtime 6.8.1-1048.49
Available with Ubuntu Pro
linux-image-aws-6.8 6.8.0-1053.56
linux-image-aws-64k-6.8 6.8.0-1053.56
linux-image-aws-64k-lts-24.04 6.8.0-1053.56
linux-image-aws-fips 6.8.0-1053.56+fips1
Available with Ubuntu Pro
linux-image-aws-fips-6.8 6.8.0-1053.56+fips1
Available with Ubuntu Pro
linux-image-aws-lts-24.04 6.8.0-1053.56
linux-image-fips 6.8.0-111.111+fips1
Available with Ubuntu Pro
linux-image-fips-6.8 6.8.0-111.111+fips1
Available with Ubuntu Pro
linux-image-gcp-6.8 6.8.0-1055.58
linux-image-gcp-64k-6.8 6.8.0-1055.58
linux-image-gcp-64k-lts-24.04 6.8.0-1055.58
linux-image-gcp-fips 6.8.0-1055.58+fips1
Available with Ubuntu Pro
linux-image-gcp-fips-6.8 6.8.0-1055.58+fips1
Available with Ubuntu Pro
linux-image-gcp-lts-24.04 6.8.0-1055.58
linux-image-generic 6.8.0-111.111
linux-image-generic-6.8 6.8.0-111.111
linux-image-generic-64k 6.8.0-111.111
linux-image-generic-64k-6.8 6.8.0-111.111
linux-image-generic-lpae 6.8.0-111.111
linux-image-gke 6.8.0-1051.57
linux-image-gke-6.8 6.8.0-1051.57
linux-image-gke-64k 6.8.0-1051.57
linux-image-gke-64k-6.8 6.8.0-1051.57
linux-image-gkeop 6.8.0-1038.41
linux-image-gkeop-6.8 6.8.0-1038.41
linux-image-ibm 6.8.0-1052.52
linux-image-ibm-6.8 6.8.0-1052.52
linux-image-ibm-classic 6.8.0-1052.52
linux-image-ibm-lts-24.04 6.8.0-1052.52
linux-image-intel-iot-realtime 6.8.1-1048.49
Available with Ubuntu Pro
linux-image-intel-iotg 6.8.0-111.111
linux-image-kvm 6.8.0-111.111
linux-image-lowlatency 6.8.0-111.111.1
linux-image-lowlatency-6.8 6.8.0-111.111.1
linux-image-lowlatency-64k 6.8.0-111.111.1
linux-image-lowlatency-64k-6.8 6.8.0-111.111.1
linux-image-oracle-6.8 6.8.0-1050.51
linux-image-oracle-64k-6.8 6.8.0-1050.51
linux-image-oracle-64k-lts-24.04 6.8.0-1050.51
linux-image-oracle-lts-24.04 6.8.0-1050.51
linux-image-raspi 6.8.0-1053.57
linux-image-raspi-6.8 6.8.0-1053.57
linux-image-raspi-realtime 6.8.0-2043.44
Available with Ubuntu Pro
linux-image-raspi-realtime-6.8 6.8.0-2043.44
Available with Ubuntu Pro
linux-image-realtime 6.8.1-1048.49
Available with Ubuntu Pro
linux-image-realtime-6.8.1 6.8.1-1048.49
Available with Ubuntu Pro
linux-image-virtual 6.8.0-111.111
linux-image-virtual-6.8 6.8.0-111.111

Ubuntu 22.04 LTS
linux-image-6.8.0-1050-oracle 6.8.0-1050.51~22.04.1
linux-image-6.8.0-1050-oracle-64k 6.8.0-1050.51~22.04.1
linux-image-6.8.0-1052-ibm 6.8.0-1052.52~22.04.1
linux-image-6.8.0-1053-aws 6.8.0-1053.56~22.04.1
linux-image-6.8.0-1053-aws-64k 6.8.0-1053.56~22.04.1
linux-image-6.8.0-111-generic 6.8.0-111.111~22.04.1
linux-image-6.8.0-111-generic-64k 6.8.0-111.111~22.04.1
linux-image-6.8.0-111-lowlatency 6.8.0-111.111.1~22.04.1
linux-image-6.8.0-111-lowlatency-64k 6.8.0-111.111.1~22.04.1
linux-image-6.8.1-1048-realtime 6.8.1-1048.49~22.04.1
Available with Ubuntu Pro
linux-image-aws 6.8.0-1053.56~22.04.1
linux-image-aws-6.8 6.8.0-1053.56~22.04.1
linux-image-aws-64k 6.8.0-1053.56~22.04.1
linux-image-aws-64k-6.8 6.8.0-1053.56~22.04.1
linux-image-generic-6.8 6.8.0-111.111~22.04.1
linux-image-generic-64k-6.8 6.8.0-111.111~22.04.1
linux-image-generic-64k-hwe-22.04 6.8.0-111.111~22.04.1
linux-image-generic-hwe-22.04 6.8.0-111.111~22.04.1
linux-image-ibm-6.8 6.8.0-1052.52~22.04.1
linux-image-lowlatency-6.8 6.8.0-111.111.1~22.04.1
linux-image-lowlatency-64k-6.8 6.8.0-111.111.1~22.04.1
linux-image-lowlatency-64k-hwe-22.04 6.8.0-111.111.1~22.04.1
linux-image-lowlatency-hwe-22.04 6.8.0-111.111.1~22.04.1
linux-image-oem-22.04 6.8.0-111.111~22.04.1
linux-image-oem-22.04a 6.8.0-111.111~22.04.1
linux-image-oem-22.04b 6.8.0-111.111~22.04.1
linux-image-oem-22.04c 6.8.0-111.111~22.04.1
linux-image-oem-22.04d 6.8.0-111.111~22.04.1
linux-image-oracle 6.8.0-1050.51~22.04.1
linux-image-oracle-6.8 6.8.0-1050.51~22.04.1
linux-image-oracle-64k 6.8.0-1050.51~22.04.1
linux-image-oracle-64k-6.8 6.8.0-1050.51~22.04.1
linux-image-realtime-6.8.1 6.8.1-1048.49~22.04.1
Available with Ubuntu Pro
linux-image-realtime-hwe-22.04 6.8.1-1048.49~22.04.1
Available with Ubuntu Pro
linux-image-virtual-6.8 6.8.0-111.111~22.04.1
linux-image-virtual-hwe-22.04 6.8.0-111.111~22.04.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
https://ubuntu.com/security/notices/USN-8254-1
CVE-2026-23112, CVE-2026-23231, CVE-2026-23273

Package Information:
https://launchpad.net/ubuntu/+source/linux/6.8.0-111.111
https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1053.56
https://launchpad.net/ubuntu/+source/linux-aws-fips/6.8.0-1053.56+fips1
https://launchpad.net/ubuntu/+source/linux-fips/6.8.0-111.111+fips1
https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1055.58
https://launchpad.net/ubuntu/+source/linux-gcp-fips/6.8.0-1055.58+fips1
https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1051.57
https://launchpad.net/ubuntu/+source/linux-gkeop/6.8.0-1038.41
https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1052.52
https://launchpad.net/ubuntu/+source/linux-lowlatency/6.8.0-111.111.1
https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1050.51
https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1053.57
https://launchpad.net/ubuntu/+source/linux-raspi-realtime/6.8.0-2043.44
https://launchpad.net/ubuntu/+source/linux-realtime/6.8.1-1048.49
https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-1053.56~22.04.1
https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-111.111~22.04.1
https://launchpad.net/ubuntu/+source/linux-ibm-6.8/6.8.0-1052.52~22.04.1
https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-6.8/6.8.0-111.111.1~22.04.1
https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8.0-1050.51~22.04.1
https://launchpad.net/ubuntu/+source/linux-realtime-6.8/6.8.1-1048.49~22.04.1