Ubuntu alert USN-8547-1 (linux-gcp-5.15, linux-intel-iotg-5.15)

From:
             
 
Giampaolo Fresi Roglia via ubuntu-security-announce <ubuntu-security-announce@lists.ubuntu.com>
To:
             
 
ubuntu-security-announce@lists.ubuntu.com
Subject:
             
 
[USN-8547-1] Linux kernel vulnerabilities
Date:
             
 
Wed, 15 Jul 2026 13:05:07 +0200
Message-ID:
             
 
<sa7tsq0jyxo.fsf@canonical.com>
Cc:
             
 
Giampaolo Fresi Roglia <giampaolo.fresi.roglia@canonical.com>
==========================================================================
Ubuntu Security Notice USN-8547-1
July 15, 2026

linux-gcp-5.15, linux-intel-iotg-5.15 vulnerabilities
==========================================================================

A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS

Summary:

Several security issues were fixed in the Linux kernel.

Software Description:
- linux-gcp-5.15: Linux kernel for Google Cloud Platform (GCP) systems
- linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms

Details:

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
  - RISC-V architecture;
  - Cryptographic API;
  - InfiniBand drivers;
  - IOMMU subsystem;
  - Network drivers;
  - STMicroelectronics network drivers;
  - NVME drivers;
  - x86 platform drivers;
  - SCSI subsystem;
  - SPI subsystem;
  - TCM subsystem;
  - USB over IP driver;
  - File systems infrastructure;
  - HFS+ file system;
  - Network file system (NFS) server daemon;
  - SMB network file system;
  - IPv6 networking;
  - Tracing infrastructure;
  - Timer subsystem;
  - B.A.T.M.A.N. meshing protocol;
  - Bluetooth subsystem;
  - Ethernet bridge;
  - Ceph Core library;
  - IPv4 networking;
  - MAC80211 subsystem;
  - Multipath TCP;
  - Netfilter;
  - RxRPC session sockets;
  - SMC sockets;
  - Sun RPC protocol;
  - X.25 network layer;
  - AMD SoC Alsa drivers;
  - KVM subsystem;
(CVE-2022-48816, CVE-2023-53673, CVE-2025-37778, CVE-2025-37822,
CVE-2025-37924, CVE-2025-38201, CVE-2025-40082, CVE-2025-68214,
CVE-2025-68263, CVE-2025-71089, CVE-2025-71220, CVE-2025-71222,
CVE-2025-71224, CVE-2026-23176, CVE-2026-23180, CVE-2026-23182,
CVE-2026-23190, CVE-2026-23193, CVE-2026-23198, CVE-2026-23202,
CVE-2026-23206, CVE-2026-23216, CVE-2026-23256, CVE-2026-23257,
CVE-2026-23258, CVE-2026-23262, CVE-2026-23272, CVE-2026-23278,
CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402,
CVE-2026-31418, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,
CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668,
CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-43011,
CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114,
CVE-2026-43117, CVE-2026-43185, CVE-2026-43186, CVE-2026-43304,
CVE-2026-43341, CVE-2026-43383, CVE-2026-43406, CVE-2026-43407,
CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45988,
CVE-2026-46043, CVE-2026-46119, CVE-2026-46135, CVE-2026-46195,
CVE-2026-46243)

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
  linux-image-5.15.0-1106-intel-iotg  5.15.0-1106.112~20.04.1
                                  Available with Ubuntu Pro
  linux-image-5.15.0-1111-gcp     5.15.0-1111.121~20.04.1
                                  Available with Ubuntu Pro
  linux-image-gcp                 5.15.0.1111.121~20.04.1
                                  Available with Ubuntu Pro
  linux-image-gcp-5.15            5.15.0.1111.121~20.04.1
                                  Available with Ubuntu Pro
  linux-image-intel               5.15.0.1106.112~20.04.1
                                  Available with Ubuntu Pro
  linux-image-intel-iotg          5.15.0.1106.112~20.04.1
                                  Available with Ubuntu Pro
  linux-image-intel-iotg-5.15     5.15.0.1106.112~20.04.1
                                  Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References:
  https://ubuntu.com/security/notices/USN-8547-1
  CVE-2022-48816, CVE-2023-53673, CVE-2025-37778, CVE-2025-37822,
  CVE-2025-37924, CVE-2025-38201, CVE-2025-40082, CVE-2025-68214,
  CVE-2025-68263, CVE-2025-71089, CVE-2025-71220, CVE-2025-71222,
  CVE-2025-71224, CVE-2026-23176, CVE-2026-23180, CVE-2026-23182,
  CVE-2026-23190, CVE-2026-23193, CVE-2026-23198, CVE-2026-23202,
  CVE-2026-23206, CVE-2026-23216, CVE-2026-23256, CVE-2026-23257,
  CVE-2026-23258, CVE-2026-23262, CVE-2026-23272, CVE-2026-23278,
  CVE-2026-23428, CVE-2026-23450, CVE-2026-23455, CVE-2026-31402,
  CVE-2026-31418, CVE-2026-31478, CVE-2026-31607, CVE-2026-31637,
  CVE-2026-31649, CVE-2026-31657, CVE-2026-31659, CVE-2026-31668,
  CVE-2026-31669, CVE-2026-31682, CVE-2026-31685, CVE-2026-43011,
  CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114,
  CVE-2026-43117, CVE-2026-43185, CVE-2026-43186, CVE-2026-43304,
  CVE-2026-43341, CVE-2026-43383, CVE-2026-43406, CVE-2026-43407,
  CVE-2026-43414, CVE-2026-43493, CVE-2026-43501, CVE-2026-45988,
  CVE-2026-46043, CVE-2026-46119, CVE-2026-46135, CVE-2026-46195,
  CVE-2026-46243



Attachment: signature.asc (type=application/pgp-signature)
-----BEGIN PGP SIGNATURE-----
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=BaI3
-----END PGP SIGNATURE-----