Ubuntu alert USN-8226-1 (kmod)

From:
             
 
noreply+usn-bot@canonical.com
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8226-1] kmod update
Date:
             
 
Thu, 30 Apr 2026 16:02:00 +0000
Message-ID:
             
 
<E1wITpw-0003IB-Fl@lists.ubuntu.com>
==========================================================================
Ubuntu Security Notice USN-8226-1
April 30, 2026

kmod update
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 25.10
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS

Summary:

kmod has been updated to block loading of the algif_aead kernel module.

Software Description:
- kmod: tools for managing Linux kernel modules

Details:

It was discovered that the Linux kernel algif_aead module contained a logic
flaw allowing a local attacker to escalate privileges to root. This update
to the kmod package disables loading the algif_aead module as a measure to
mitigate the issue until kernel updates are made available.

See the following URL for more information
https://ubuntu.com/blog/copy-fail-vulnerability-fixes-ava...

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  kmod                            34.2-2ubuntu1.1

Ubuntu 24.04 LTS
  kmod                            31+20240202-2ubuntu7.2

Ubuntu 22.04 LTS
  kmod                            29-1ubuntu1.1

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
  https://ubuntu.com/security/notices/USN-8226-1
  CVE-2026-31431, https://launchpad.net/bugs/2150743

Package Information:
  https://launchpad.net/ubuntu/+source/kmod/34.2-2ubuntu1.1
  https://launchpad.net/ubuntu/+source/kmod/31+20240202-2ub...
  https://launchpad.net/ubuntu/+source/kmod/29-1ubuntu1.1


Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=7X7U
-----END PGP SIGNATURE-----