Ubuntu alert USN-8145-3 (linux-gcp, linux-gcp-4.15, linux-gcp-fips)

From:
             
 
Rodrigo Figueiredo Zaiden <rodrigo.zaiden@canonical.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8145-3] Linux kernel (GCP) vulnerabilities
Date:
             
 
Mon, 06 Apr 2026 19:02:21 -0300
Message-ID:
             
 
<efa6fb5a-99b0-4cc2-be02-8d14619eece7@canonical.com>
==========================================================================
Ubuntu Security Notice USN-8145-3
April 06, 2026

linux-gcp, linux-gcp-4.15, linux-gcp-fips vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-gcp-4.15: Linux kernel for Google Cloud Platform (GCP) systems
- linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with 
FIPS
- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems

Details:

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
   - ARM64 architecture;
   - Cryptographic API;
   - UDF file system;
   - NFC subsystem;
   - Network traffic control;
(CVE-2024-46777, CVE-2025-21735, CVE-2025-37849, CVE-2026-23060,
CVE-2026-23074)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
   linux-image-4.15.0-1183-gcp     4.15.0-1183.200
                                   Available with Ubuntu Pro
   linux-image-4.15.0-2091-gcp-fips  4.15.0-2091.97
                                   Available with Ubuntu Pro
   linux-image-gcp-4.15            4.15.0.1183.196
                                   Available with Ubuntu Pro
   linux-image-gcp-fips            4.15.0.2091.89
                                   Available with Ubuntu Pro
   linux-image-gcp-fips-4.15       4.15.0.2091.89
                                   Available with Ubuntu Pro
   linux-image-gcp-lts-18.04       4.15.0.1183.196
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   linux-image-4.15.0-1183-gcp     4.15.0-1183.200~16.04.2
                                   Available with Ubuntu Pro
   linux-image-gcp                 4.15.0.1183.200~16.04.2
                                   Available with Ubuntu Pro
   linux-image-gke                 4.15.0.1183.200~16.04.2
                                   Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
   https://ubuntu.com/security/notices/USN-8145-3
   https://ubuntu.com/security/notices/USN-8145-2
   https://ubuntu.com/security/notices/USN-8145-1
   CVE-2024-46777, CVE-2025-21735, CVE-2025-37849, CVE-2026-23060,
   CVE-2026-23074



Attachment: OpenPGP_signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEYrygdx1GDec9TV8EZ0GeRcM5nt0FAmnULW0FAwAAAAAACgkQZ0GeRcM5nt0A
8AgAsOI1UGi84NcTa4YOIxhALDBOYtZjc9j7pDPohEw7Eqkcuc3cbEC8B0RjKiC1zMWsoPOE3Mfy
HdfCyZdlvlcEclJv627UngFvC5oKwutO1+prbivcnkcQVe9F+SooKyB6WjnnuLiAAhDhbg6+nY2d
t/m6QEqivoMPa4/Z7EiyxHx/AIgyEa1QEXcXlBs5ARBtDkFFj3pm1ox/5/AyH8H7GKyYJ4dIS32f
Wd97wnX09CISMTR6tujjkdc6FmjTKvjduzmU8CqN4EvoAzk7nlIMYPYRTgFqKfLg3xrC/PvioTfc
yT+LuT+y4vICnhqhT30JYMnLQecMJ5wJr1umx2mgMg==
=eBX5
-----END PGP SIGNATURE-----