Ubuntu alert USN-8254-1 (linux, linux-*)
| From: | Giampaolo Fresi Roglia <giampaolo.fresi.roglia@canonical.com> | |
| To: | ubuntu-security-announce@lists.ubuntu.com | |
| Subject: | [USN-8254-1] Linux kernel vulnerabilities | |
| Date: | Thu, 07 May 2026 16:46:11 +0200 | |
| Message-ID: | <ap4oulv7czwa4s.fsf@canonical.com> |
========================================================================== Ubuntu Security Notice USN-8254-1 May 07, 2026 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-lowlatency: Linux low latency kernel - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-raspi-realtime: Linux kernel for Raspberry Pi Real-time systems - linux-realtime: Linux kernel for Real-time systems - linux-aws-6.8: Linux kernel for Amazon Web Services (AWS) systems - linux-hwe-6.8: Linux hardware enablement (HWE) kernel - linux-ibm-6.8: Linux kernel for IBM cloud systems - linux-lowlatency-hwe-6.8: Linux low latency kernel - linux-oracle-6.8: Linux kernel for Oracle Cloud systems - linux-realtime-6.8: Linux kernel for Real-time systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - NVME drivers; - Netfilter; (CVE-2026-23112, CVE-2026-23231, CVE-2026-23273) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS linux-image-6.8.0-1038-gkeop 6.8.0-1038.41 linux-image-6.8.0-1050-oracle 6.8.0-1050.51 linux-image-6.8.0-1050-oracle-64k 6.8.0-1050.51 linux-image-6.8.0-1051-gke 6.8.0-1051.57 linux-image-6.8.0-1051-gke-64k 6.8.0-1051.57 linux-image-6.8.0-1052-ibm 6.8.0-1052.52 linux-image-6.8.0-1053-aws 6.8.0-1053.56 linux-image-6.8.0-1053-aws-64k 6.8.0-1053.56 linux-image-6.8.0-1053-aws-fips 6.8.0-1053.56+fips1 Available with Ubuntu Pro linux-image-6.8.0-1053-raspi 6.8.0-1053.57 linux-image-6.8.0-1055-gcp 6.8.0-1055.58 linux-image-6.8.0-1055-gcp-64k 6.8.0-1055.58 linux-image-6.8.0-1055-gcp-fips 6.8.0-1055.58+fips1 Available with Ubuntu Pro linux-image-6.8.0-111-fips 6.8.0-111.111+fips1 Available with Ubuntu Pro linux-image-6.8.0-111-generic 6.8.0-111.111 linux-image-6.8.0-111-generic-64k 6.8.0-111.111 linux-image-6.8.0-111-lowlatency 6.8.0-111.111.1 linux-image-6.8.0-111-lowlatency-64k 6.8.0-111.111.1 linux-image-6.8.0-2043-raspi-realtime 6.8.0-2043.44 Available with Ubuntu Pro linux-image-6.8.1-1048-realtime 6.8.1-1048.49 Available with Ubuntu Pro linux-image-aws-6.8 6.8.0-1053.56 linux-image-aws-64k-6.8 6.8.0-1053.56 linux-image-aws-64k-lts-24.04 6.8.0-1053.56 linux-image-aws-fips 6.8.0-1053.56+fips1 Available with Ubuntu Pro linux-image-aws-fips-6.8 6.8.0-1053.56+fips1 Available with Ubuntu Pro linux-image-aws-lts-24.04 6.8.0-1053.56 linux-image-fips 6.8.0-111.111+fips1 Available with Ubuntu Pro linux-image-fips-6.8 6.8.0-111.111+fips1 Available with Ubuntu Pro linux-image-gcp-6.8 6.8.0-1055.58 linux-image-gcp-64k-6.8 6.8.0-1055.58 linux-image-gcp-64k-lts-24.04 6.8.0-1055.58 linux-image-gcp-fips 6.8.0-1055.58+fips1 Available with Ubuntu Pro linux-image-gcp-fips-6.8 6.8.0-1055.58+fips1 Available with Ubuntu Pro linux-image-gcp-lts-24.04 6.8.0-1055.58 linux-image-generic 6.8.0-111.111 linux-image-generic-6.8 6.8.0-111.111 linux-image-generic-64k 6.8.0-111.111 linux-image-generic-64k-6.8 6.8.0-111.111 linux-image-generic-lpae 6.8.0-111.111 linux-image-gke 6.8.0-1051.57 linux-image-gke-6.8 6.8.0-1051.57 linux-image-gke-64k 6.8.0-1051.57 linux-image-gke-64k-6.8 6.8.0-1051.57 linux-image-gkeop 6.8.0-1038.41 linux-image-gkeop-6.8 6.8.0-1038.41 linux-image-ibm 6.8.0-1052.52 linux-image-ibm-6.8 6.8.0-1052.52 linux-image-ibm-classic 6.8.0-1052.52 linux-image-ibm-lts-24.04 6.8.0-1052.52 linux-image-intel-iot-realtime 6.8.1-1048.49 Available with Ubuntu Pro linux-image-intel-iotg 6.8.0-111.111 linux-image-kvm 6.8.0-111.111 linux-image-lowlatency 6.8.0-111.111.1 linux-image-lowlatency-6.8 6.8.0-111.111.1 linux-image-lowlatency-64k 6.8.0-111.111.1 linux-image-lowlatency-64k-6.8 6.8.0-111.111.1 linux-image-oracle-6.8 6.8.0-1050.51 linux-image-oracle-64k-6.8 6.8.0-1050.51 linux-image-oracle-64k-lts-24.04 6.8.0-1050.51 linux-image-oracle-lts-24.04 6.8.0-1050.51 linux-image-raspi 6.8.0-1053.57 linux-image-raspi-6.8 6.8.0-1053.57 linux-image-raspi-realtime 6.8.0-2043.44 Available with Ubuntu Pro linux-image-raspi-realtime-6.8 6.8.0-2043.44 Available with Ubuntu Pro linux-image-realtime 6.8.1-1048.49 Available with Ubuntu Pro linux-image-realtime-6.8.1 6.8.1-1048.49 Available with Ubuntu Pro linux-image-virtual 6.8.0-111.111 linux-image-virtual-6.8 6.8.0-111.111 Ubuntu 22.04 LTS linux-image-6.8.0-1050-oracle 6.8.0-1050.51~22.04.1 linux-image-6.8.0-1050-oracle-64k 6.8.0-1050.51~22.04.1 linux-image-6.8.0-1052-ibm 6.8.0-1052.52~22.04.1 linux-image-6.8.0-1053-aws 6.8.0-1053.56~22.04.1 linux-image-6.8.0-1053-aws-64k 6.8.0-1053.56~22.04.1 linux-image-6.8.0-111-generic 6.8.0-111.111~22.04.1 linux-image-6.8.0-111-generic-64k 6.8.0-111.111~22.04.1 linux-image-6.8.0-111-lowlatency 6.8.0-111.111.1~22.04.1 linux-image-6.8.0-111-lowlatency-64k 6.8.0-111.111.1~22.04.1 linux-image-6.8.1-1048-realtime 6.8.1-1048.49~22.04.1 Available with Ubuntu Pro linux-image-aws 6.8.0-1053.56~22.04.1 linux-image-aws-6.8 6.8.0-1053.56~22.04.1 linux-image-aws-64k 6.8.0-1053.56~22.04.1 linux-image-aws-64k-6.8 6.8.0-1053.56~22.04.1 linux-image-generic-6.8 6.8.0-111.111~22.04.1 linux-image-generic-64k-6.8 6.8.0-111.111~22.04.1 linux-image-generic-64k-hwe-22.04 6.8.0-111.111~22.04.1 linux-image-generic-hwe-22.04 6.8.0-111.111~22.04.1 linux-image-ibm-6.8 6.8.0-1052.52~22.04.1 linux-image-lowlatency-6.8 6.8.0-111.111.1~22.04.1 linux-image-lowlatency-64k-6.8 6.8.0-111.111.1~22.04.1 linux-image-lowlatency-64k-hwe-22.04 6.8.0-111.111.1~22.04.1 linux-image-lowlatency-hwe-22.04 6.8.0-111.111.1~22.04.1 linux-image-oem-22.04 6.8.0-111.111~22.04.1 linux-image-oem-22.04a 6.8.0-111.111~22.04.1 linux-image-oem-22.04b 6.8.0-111.111~22.04.1 linux-image-oem-22.04c 6.8.0-111.111~22.04.1 linux-image-oem-22.04d 6.8.0-111.111~22.04.1 linux-image-oracle 6.8.0-1050.51~22.04.1 linux-image-oracle-6.8 6.8.0-1050.51~22.04.1 linux-image-oracle-64k 6.8.0-1050.51~22.04.1 linux-image-oracle-64k-6.8 6.8.0-1050.51~22.04.1 linux-image-realtime-6.8.1 6.8.1-1048.49~22.04.1 Available with Ubuntu Pro linux-image-realtime-hwe-22.04 6.8.1-1048.49~22.04.1 Available with Ubuntu Pro linux-image-virtual-6.8 6.8.0-111.111~22.04.1 linux-image-virtual-hwe-22.04 6.8.0-111.111~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8254-1 CVE-2026-23112, CVE-2026-23231, CVE-2026-23273 Package Information: https://launchpad.net/ubuntu/+source/linux/6.8.0-111.111 https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1053.56 https://launchpad.net/ubuntu/+source/linux-aws-fips/6.8.0... https://launchpad.net/ubuntu/+source/linux-fips/6.8.0-111... https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1055.58 https://launchpad.net/ubuntu/+source/linux-gcp-fips/6.8.0... https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1051.57 https://launchpad.net/ubuntu/+source/linux-gkeop/6.8.0-10... https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1052.52 https://launchpad.net/ubuntu/+source/linux-lowlatency/6.8... https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1... https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-10... https://launchpad.net/ubuntu/+source/linux-raspi-realtime... https://launchpad.net/ubuntu/+source/linux-realtime/6.8.1... https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-... https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-... https://launchpad.net/ubuntu/+source/linux-ibm-6.8/6.8.0-... https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe... https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8... https://launchpad.net/ubuntu/+source/linux-realtime-6.8/6...
Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE----- iQHZBAEBCgBDFiEEBcMY+nwS2CY71sUWc4vdAqvdlsYFAmn8pbMlHGdpYW1wYW9s by5mcmVzaS5yb2dsaWFAY2Fub25pY2FsLmNvbQAKCRBzi90Cq92WxpIdC/9F4Vnf w2ug4iEJiih8LLh2ihJ8yMN7GN/XwhgEkxBN0N5WF+lG/nTedkjhFGTH8YZzY8JD OsQWa/hjVi1aSa124jZZ+u5irQnHr+PZdidi7KHHfobODi36G+JCrveXJr2mAh6g +5vD7+CG3nMMDNQxmQmADfGXVsqkvys4k96aiS4DQTE0AuF0E25fRUECRDlOtZSx caU9mBNZMnmdLRWpBNFqPiZe7Wd3PK5Dy2jPVfeAFFFXn3zpRHlTIL+lKl92Wzfq LEvYxMiteR4UqlyZC3rTPMzCd9w5Mh6euv7rSoJCq1jsQ2pvXH/Alp1NxpTGv++L EyZ5/nPOAXrWe/B8VVjJBb3dQaDPLiiRG317S0TE2SS7csCV3GJG/zl/DTzbLRHm ozhKtU8dgINdCrQE4knZcFFg596DGxPnNphBB+8095RjS0RvJKWRzttUX8EZj8us I0lDlXwyft20TeNOAWw7pbcxnExTCALbBJ8q40lb5tlcMWdFh9MF2tpn0iY= =LyZj -----END PGP SIGNATURE-----