========================================================================== Ubuntu Security Notice USN-8179-4 May 07, 2026 linux-gcp-6.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-gcp-6.8: Linux kernel for Google Cloud Platform (GCP) systems Details: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of integrity and confidentiality. (CVE-2024-36347) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - MIPS architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Network block device driver; - Bluetooth drivers; - Character device driver; - TPM device driver; - Clock framework and drivers; - Data acquisition framework and drivers; - Hardware crypto device drivers; - GPU drivers; - Hardware monitoring drivers; - InfiniBand drivers; - Input Device core drivers; - IOMMU subsystem; - IRQ chip drivers; - Macintosh device drivers; - Multiple devices driver; - Media drivers; - Network drivers; - Mellanox network drivers; - STMicroelectronics network drivers; - Ethernet team driver; - MediaTek network drivers; - NVME drivers; - PA-RISC drivers; - Chrome hardware platform drivers; - x86 platform drivers; - Voltage and Current Regulator drivers; - SCSI subsystem; - SPI subsystem; - Media Oriented Systems Transport (MOST) driver; - Realtek RTL8723BS SDIO drivers; - TCM subsystem; - USB Host Controller drivers; - USB Type-C Connector System Software Interface driver; - Backlight driver; - Watchdog drivers; - BFS file system; - BTRFS file system; - Ext4 file system; - F2FS file system; - FUSE (File system in Userspace); - HFS+ file system; - File systems infrastructure; - Journaling layer for block devices (JBD2); - Network file system (NFS) client; - File system notification infrastructure; - NTFS3 file system; - OCFS2 file system; - SMB network file system; - BPF subsystem; - Ethernet bridge; - io_uring subsystem; - Locking primitives; - Scheduler infrastructure; - Shadow Call Stack mechanism; - Tracing infrastructure; - Memory management; - CAIF protocol; - Ceph Core library; - Networking core; - Ethtool driver; - Handshake API; - HSR network protocol; - IPv4 networking; - IPv6 networking; - MAC80211 subsystem; - Multipath TCP; - Netfilter; - NET/ROM layer; - NFC subsystem; - Open vSwitch; - Rose network layer; - Network traffic control; - Network sockets; - Sun RPC protocol; - Integrity Measurement Architecture(IMA) framework; - Key management; - Simplified Mandatory Access Control Kernel framework; - FireWire sound drivers; - HD-audio driver; - Turtle Beach Wavefront ALSA driver; - STMicroelectronics SoC drivers; - USB sound devices; - KVM subsystem; (CVE-2024-57795, CVE-2025-22022, CVE-2025-22111, CVE-2025-38022, CVE-2025-38234, CVE-2025-40164, CVE-2025-40325, CVE-2025-68206, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256, CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68291, CVE-2025-68325, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346, CVE-2025-68347, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367, CVE-2025-68369, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68744, CVE-2025-68746, CVE-2025-68753, CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-68767, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68804, CVE-2025-68806, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71125, CVE-2025-71126, CVE-2025-71127, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143, CVE-2025-71144, CVE-2025-71147, CVE-2025-71148, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2026-23209) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-6.8.0-1054-gcp 6.8.0-1054.57~22.04.1 linux-image-6.8.0-1054-gcp-64k 6.8.0-1054.57~22.04.1 linux-image-gcp 6.8.0-1054.57~22.04.1 linux-image-gcp-6.8 6.8.0-1054.57~22.04.1 linux-image-gcp-64k 6.8.0-1054.57~22.04.1 linux-image-gcp-64k-6.8 6.8.0-1054.57~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8179-4 https://ubuntu.com/security/notices/USN-8179-3 https://ubuntu.com/security/notices/USN-8179-2 https://ubuntu.com/security/notices/USN-8179-1 CVE-2024-36347, CVE-2024-57795, CVE-2025-22022, CVE-2025-22111, CVE-2025-38022, CVE-2025-38234, CVE-2025-40164, CVE-2025-40325, CVE-2025-68206, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256, CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68291, CVE-2025-68325, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346, CVE-2025-68347, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367, CVE-2025-68369, CVE-2025-68371, CVE-2025-68372, CVE-2025-68374, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68744, CVE-2025-68746, CVE-2025-68753, CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-68767, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68804, CVE-2025-68806, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71071, CVE-2025-71072, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71088, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71125, CVE-2025-71126, CVE-2025-71127, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71141, CVE-2025-71143, CVE-2025-71144, CVE-2025-71147, CVE-2025-71148, CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2026-23209 Package Information: https://launchpad.net/ubuntu/+source/linux-gcp-6.8/6.8.0-1054.57~22.04.1
Saturday, May 9, 2026
[USN-8220-1] HtmlUnit vulnerability
========================================================================== Ubuntu Security Notice USN-8220-1 May 05, 2026 htmlunit vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS - Ubuntu 16.04 LTS Summary: HtmlUnit could be made to run programs as your login if it opened a malicious website. Software Description: - htmlunit: headless web browser written in Java Details: It was discovered that HtmlUnit was vulnerable to remote code execution via XSLT when browsing an attacker-controlled webpage. An attacker could possibly use this issue to execute arbitrary code in the context of the application using HtmlUnit. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS libhtmlunit-java 2.8-3ubuntu1+esm1 Available with Ubuntu Pro Ubuntu 16.04 LTS libhtmlunit-java 2.8-1ubuntu2.1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8220-1 CVE-2023-49093
[USN-8254-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-8254-1 May 07, 2026 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-lowlatency: Linux low latency kernel - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-raspi-realtime: Linux kernel for Raspberry Pi Real-time systems - linux-realtime: Linux kernel for Real-time systems - linux-aws-6.8: Linux kernel for Amazon Web Services (AWS) systems - linux-hwe-6.8: Linux hardware enablement (HWE) kernel - linux-ibm-6.8: Linux kernel for IBM cloud systems - linux-lowlatency-hwe-6.8: Linux low latency kernel - linux-oracle-6.8: Linux kernel for Oracle Cloud systems - linux-realtime-6.8: Linux kernel for Real-time systems Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - NVME drivers; - Netfilter; (CVE-2026-23112, CVE-2026-23231, CVE-2026-23273) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS linux-image-6.8.0-1038-gkeop 6.8.0-1038.41 linux-image-6.8.0-1050-oracle 6.8.0-1050.51 linux-image-6.8.0-1050-oracle-64k 6.8.0-1050.51 linux-image-6.8.0-1051-gke 6.8.0-1051.57 linux-image-6.8.0-1051-gke-64k 6.8.0-1051.57 linux-image-6.8.0-1052-ibm 6.8.0-1052.52 linux-image-6.8.0-1053-aws 6.8.0-1053.56 linux-image-6.8.0-1053-aws-64k 6.8.0-1053.56 linux-image-6.8.0-1053-aws-fips 6.8.0-1053.56+fips1 Available with Ubuntu Pro linux-image-6.8.0-1053-raspi 6.8.0-1053.57 linux-image-6.8.0-1055-gcp 6.8.0-1055.58 linux-image-6.8.0-1055-gcp-64k 6.8.0-1055.58 linux-image-6.8.0-1055-gcp-fips 6.8.0-1055.58+fips1 Available with Ubuntu Pro linux-image-6.8.0-111-fips 6.8.0-111.111+fips1 Available with Ubuntu Pro linux-image-6.8.0-111-generic 6.8.0-111.111 linux-image-6.8.0-111-generic-64k 6.8.0-111.111 linux-image-6.8.0-111-lowlatency 6.8.0-111.111.1 linux-image-6.8.0-111-lowlatency-64k 6.8.0-111.111.1 linux-image-6.8.0-2043-raspi-realtime 6.8.0-2043.44 Available with Ubuntu Pro linux-image-6.8.1-1048-realtime 6.8.1-1048.49 Available with Ubuntu Pro linux-image-aws-6.8 6.8.0-1053.56 linux-image-aws-64k-6.8 6.8.0-1053.56 linux-image-aws-64k-lts-24.04 6.8.0-1053.56 linux-image-aws-fips 6.8.0-1053.56+fips1 Available with Ubuntu Pro linux-image-aws-fips-6.8 6.8.0-1053.56+fips1 Available with Ubuntu Pro linux-image-aws-lts-24.04 6.8.0-1053.56 linux-image-fips 6.8.0-111.111+fips1 Available with Ubuntu Pro linux-image-fips-6.8 6.8.0-111.111+fips1 Available with Ubuntu Pro linux-image-gcp-6.8 6.8.0-1055.58 linux-image-gcp-64k-6.8 6.8.0-1055.58 linux-image-gcp-64k-lts-24.04 6.8.0-1055.58 linux-image-gcp-fips 6.8.0-1055.58+fips1 Available with Ubuntu Pro linux-image-gcp-fips-6.8 6.8.0-1055.58+fips1 Available with Ubuntu Pro linux-image-gcp-lts-24.04 6.8.0-1055.58 linux-image-generic 6.8.0-111.111 linux-image-generic-6.8 6.8.0-111.111 linux-image-generic-64k 6.8.0-111.111 linux-image-generic-64k-6.8 6.8.0-111.111 linux-image-generic-lpae 6.8.0-111.111 linux-image-gke 6.8.0-1051.57 linux-image-gke-6.8 6.8.0-1051.57 linux-image-gke-64k 6.8.0-1051.57 linux-image-gke-64k-6.8 6.8.0-1051.57 linux-image-gkeop 6.8.0-1038.41 linux-image-gkeop-6.8 6.8.0-1038.41 linux-image-ibm 6.8.0-1052.52 linux-image-ibm-6.8 6.8.0-1052.52 linux-image-ibm-classic 6.8.0-1052.52 linux-image-ibm-lts-24.04 6.8.0-1052.52 linux-image-intel-iot-realtime 6.8.1-1048.49 Available with Ubuntu Pro linux-image-intel-iotg 6.8.0-111.111 linux-image-kvm 6.8.0-111.111 linux-image-lowlatency 6.8.0-111.111.1 linux-image-lowlatency-6.8 6.8.0-111.111.1 linux-image-lowlatency-64k 6.8.0-111.111.1 linux-image-lowlatency-64k-6.8 6.8.0-111.111.1 linux-image-oracle-6.8 6.8.0-1050.51 linux-image-oracle-64k-6.8 6.8.0-1050.51 linux-image-oracle-64k-lts-24.04 6.8.0-1050.51 linux-image-oracle-lts-24.04 6.8.0-1050.51 linux-image-raspi 6.8.0-1053.57 linux-image-raspi-6.8 6.8.0-1053.57 linux-image-raspi-realtime 6.8.0-2043.44 Available with Ubuntu Pro linux-image-raspi-realtime-6.8 6.8.0-2043.44 Available with Ubuntu Pro linux-image-realtime 6.8.1-1048.49 Available with Ubuntu Pro linux-image-realtime-6.8.1 6.8.1-1048.49 Available with Ubuntu Pro linux-image-virtual 6.8.0-111.111 linux-image-virtual-6.8 6.8.0-111.111 Ubuntu 22.04 LTS linux-image-6.8.0-1050-oracle 6.8.0-1050.51~22.04.1 linux-image-6.8.0-1050-oracle-64k 6.8.0-1050.51~22.04.1 linux-image-6.8.0-1052-ibm 6.8.0-1052.52~22.04.1 linux-image-6.8.0-1053-aws 6.8.0-1053.56~22.04.1 linux-image-6.8.0-1053-aws-64k 6.8.0-1053.56~22.04.1 linux-image-6.8.0-111-generic 6.8.0-111.111~22.04.1 linux-image-6.8.0-111-generic-64k 6.8.0-111.111~22.04.1 linux-image-6.8.0-111-lowlatency 6.8.0-111.111.1~22.04.1 linux-image-6.8.0-111-lowlatency-64k 6.8.0-111.111.1~22.04.1 linux-image-6.8.1-1048-realtime 6.8.1-1048.49~22.04.1 Available with Ubuntu Pro linux-image-aws 6.8.0-1053.56~22.04.1 linux-image-aws-6.8 6.8.0-1053.56~22.04.1 linux-image-aws-64k 6.8.0-1053.56~22.04.1 linux-image-aws-64k-6.8 6.8.0-1053.56~22.04.1 linux-image-generic-6.8 6.8.0-111.111~22.04.1 linux-image-generic-64k-6.8 6.8.0-111.111~22.04.1 linux-image-generic-64k-hwe-22.04 6.8.0-111.111~22.04.1 linux-image-generic-hwe-22.04 6.8.0-111.111~22.04.1 linux-image-ibm-6.8 6.8.0-1052.52~22.04.1 linux-image-lowlatency-6.8 6.8.0-111.111.1~22.04.1 linux-image-lowlatency-64k-6.8 6.8.0-111.111.1~22.04.1 linux-image-lowlatency-64k-hwe-22.04 6.8.0-111.111.1~22.04.1 linux-image-lowlatency-hwe-22.04 6.8.0-111.111.1~22.04.1 linux-image-oem-22.04 6.8.0-111.111~22.04.1 linux-image-oem-22.04a 6.8.0-111.111~22.04.1 linux-image-oem-22.04b 6.8.0-111.111~22.04.1 linux-image-oem-22.04c 6.8.0-111.111~22.04.1 linux-image-oem-22.04d 6.8.0-111.111~22.04.1 linux-image-oracle 6.8.0-1050.51~22.04.1 linux-image-oracle-6.8 6.8.0-1050.51~22.04.1 linux-image-oracle-64k 6.8.0-1050.51~22.04.1 linux-image-oracle-64k-6.8 6.8.0-1050.51~22.04.1 linux-image-realtime-6.8.1 6.8.1-1048.49~22.04.1 Available with Ubuntu Pro linux-image-realtime-hwe-22.04 6.8.1-1048.49~22.04.1 Available with Ubuntu Pro linux-image-virtual-6.8 6.8.0-111.111~22.04.1 linux-image-virtual-hwe-22.04 6.8.0-111.111~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8254-1 CVE-2026-23112, CVE-2026-23231, CVE-2026-23273 Package Information: https://launchpad.net/ubuntu/+source/linux/6.8.0-111.111 https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1053.56 https://launchpad.net/ubuntu/+source/linux-aws-fips/6.8.0-1053.56+fips1 https://launchpad.net/ubuntu/+source/linux-fips/6.8.0-111.111+fips1 https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1055.58 https://launchpad.net/ubuntu/+source/linux-gcp-fips/6.8.0-1055.58+fips1 https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1051.57 https://launchpad.net/ubuntu/+source/linux-gkeop/6.8.0-1038.41 https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1052.52 https://launchpad.net/ubuntu/+source/linux-lowlatency/6.8.0-111.111.1 https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1050.51 https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1053.57 https://launchpad.net/ubuntu/+source/linux-raspi-realtime/6.8.0-2043.44 https://launchpad.net/ubuntu/+source/linux-realtime/6.8.1-1048.49 https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-1053.56~22.04.1 https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-111.111~22.04.1 https://launchpad.net/ubuntu/+source/linux-ibm-6.8/6.8.0-1052.52~22.04.1 https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-6.8/6.8.0-111.111.1~22.04.1 https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8.0-1050.51~22.04.1 https://launchpad.net/ubuntu/+source/linux-realtime-6.8/6.8.1-1048.49~22.04.1
[USN-8255-1] Linux kernel vulnerabilities
========================================================================== Ubuntu Security Notice USN-8255-1 May 07, 2026 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-azure, linux-azure-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-igx, linux-oracle, linux-realtime vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-intel-iot-realtime: Linux kernel for Intel IoT Real-time platforms - linux-intel-iotg: Linux kernel for Intel IoT platforms - linux-kvm: Linux kernel for cloud environments - linux-lowlatency: Linux low latency kernel - linux-nvidia: Linux kernel for NVIDIA systems - linux-nvidia-tegra: Linux kernel for NVIDIA Tegra systems - linux-nvidia-tegra-igx: Linux kernel for NVIDIA Tegra IGX systems - linux-oracle: Linux kernel for Oracle Cloud systems - linux-realtime: Linux kernel for Real-time systems - linux-aws-5.15: Linux kernel for Amazon Web Services (AWS) systems - linux-hwe-5.15: Linux hardware enablement (HWE) kernel - linux-ibm-5.15: Linux kernel for IBM cloud systems - linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms - linux-lowlatency-hwe-5.15: Linux low latency kernel Details: Stonejiajia, Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-2640) Shir Tamari and Sagi Tzadik discovered that the OverlayFS implementation in the Ubuntu Linux kernel did not properly perform permission checks in certain situations. A local attacker could possibly use this to gain elevated privileges. (CVE-2023-32629) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Network drivers; - NVME drivers; (CVE-2026-23112, CVE-2026-23273) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1047-nvidia-tegra-igx 5.15.0-1047.47 linux-image-5.15.0-1047-nvidia-tegra-igx-rt 5.15.0-1047.47 linux-image-5.15.0-1058-nvidia-tegra 5.15.0-1058.58 linux-image-5.15.0-1058-nvidia-tegra-rt 5.15.0-1058.58 linux-image-5.15.0-1089-gkeop 5.15.0-1089.97 linux-image-5.15.0-1098-intel-iot-realtime 5.15.0-1098.100 Available with Ubuntu Pro linux-image-5.15.0-1098-kvm 5.15.0-1098.103 linux-image-5.15.0-1100-ibm 5.15.0-1100.103 linux-image-5.15.0-1101-intel-iotg 5.15.0-1101.107 linux-image-5.15.0-1101-nvidia 5.15.0-1101.102 linux-image-5.15.0-1101-nvidia-lowlatency 5.15.0-1101.102 linux-image-5.15.0-1102-gke 5.15.0-1102.108 linux-image-5.15.0-1103-oracle 5.15.0-1103.109 linux-image-5.15.0-1105-realtime 5.15.0-1105.114 Available with Ubuntu Pro linux-image-5.15.0-1106-aws 5.15.0-1106.113 linux-image-5.15.0-1106-aws-64k 5.15.0-1106.113 linux-image-5.15.0-1106-aws-fips 5.15.0-1106.113+fips1 Available with Ubuntu Pro linux-image-5.15.0-1106-gcp 5.15.0-1106.115 linux-image-5.15.0-1106-gcp-fips 5.15.0-1106.115+fips1 Available with Ubuntu Pro linux-image-5.15.0-1111-azure 5.15.0-1111.120 linux-image-5.15.0-1111-azure-fips 5.15.0-1111.120+fips1 Available with Ubuntu Pro linux-image-5.15.0-177-fips 5.15.0-177.187+fips1 Available with Ubuntu Pro linux-image-5.15.0-177-generic 5.15.0-177.187 linux-image-5.15.0-177-generic-64k 5.15.0-177.187 linux-image-5.15.0-177-generic-lpae 5.15.0-177.187 linux-image-5.15.0-177-lowlatency 5.15.0-177.187 linux-image-5.15.0-177-lowlatency-64k 5.15.0-177.187 linux-image-aws-5.15 5.15.0.1106.109 linux-image-aws-64k-5.15 5.15.0.1106.109 linux-image-aws-64k-lts-22.04 5.15.0.1106.109 linux-image-aws-fips 5.15.0.1106.102 Available with Ubuntu Pro linux-image-aws-fips-5.15 5.15.0.1106.102 Available with Ubuntu Pro linux-image-aws-lts-22.04 5.15.0.1106.109 linux-image-azure-5.15 5.15.0.1111.109 linux-image-azure-fips 5.15.0.1111.96 Available with Ubuntu Pro linux-image-azure-fips-5.15 5.15.0.1111.96 Available with Ubuntu Pro linux-image-azure-lts-22.04 5.15.0.1111.109 linux-image-fips 5.15.0.177.103 Available with Ubuntu Pro linux-image-fips-5.15 5.15.0.177.103 Available with Ubuntu Pro linux-image-gcp-5.15 5.15.0.1106.102 linux-image-gcp-fips 5.15.0.1106.96 Available with Ubuntu Pro linux-image-gcp-fips-5.15 5.15.0.1106.96 Available with Ubuntu Pro linux-image-gcp-lts-22.04 5.15.0.1106.102 linux-image-generic 5.15.0.177.162 linux-image-generic-5.15 5.15.0.177.162 linux-image-generic-64k 5.15.0.177.162 linux-image-generic-64k-5.15 5.15.0.177.162 linux-image-generic-lpae 5.15.0.177.162 linux-image-generic-lpae-5.15 5.15.0.177.162 linux-image-gke 5.15.0.1102.101 linux-image-gke-5.15 5.15.0.1102.101 linux-image-gkeop 5.15.0.1089.88 linux-image-gkeop-5.15 5.15.0.1089.88 linux-image-ibm 5.15.0.1100.96 linux-image-ibm-5.15 5.15.0.1100.96 linux-image-intel-iot-realtime 5.15.0.1098.102 Available with Ubuntu Pro linux-image-intel-iot-realtime-5.15 5.15.0.1098.102 Available with Ubuntu Pro linux-image-intel-iotg 5.15.0.1101.100 linux-image-intel-iotg-5.15 5.15.0.1101.100 linux-image-kvm 5.15.0.1098.94 linux-image-kvm-5.15 5.15.0.1098.94 linux-image-lowlatency 5.15.0.177.149 linux-image-lowlatency-5.15 5.15.0.177.149 linux-image-lowlatency-64k 5.15.0.177.149 linux-image-lowlatency-64k-5.15 5.15.0.177.149 linux-image-nvidia 5.15.0.1101.101 linux-image-nvidia-5.15 5.15.0.1101.101 linux-image-nvidia-lowlatency 5.15.0.1101.101 linux-image-nvidia-lowlatency-5.15 5.15.0.1101.101 linux-image-nvidia-tegra 5.15.0.1058.58 linux-image-nvidia-tegra-5.15 5.15.0.1058.58 linux-image-nvidia-tegra-igx 5.15.0.1047.49 linux-image-nvidia-tegra-igx-5.15 5.15.0.1047.49 linux-image-nvidia-tegra-igx-rt 5.15.0.1047.49 linux-image-nvidia-tegra-igx-rt-5.15 5.15.0.1047.49 linux-image-nvidia-tegra-rt 5.15.0.1058.58 linux-image-nvidia-tegra-rt-5.15 5.15.0.1058.58 linux-image-oracle-5.15 5.15.0.1103.99 linux-image-oracle-lts-22.04 5.15.0.1103.99 linux-image-realtime 5.15.0.1105.109 Available with Ubuntu Pro linux-image-realtime-5.15 5.15.0.1105.109 Available with Ubuntu Pro linux-image-virtual 5.15.0.177.162 linux-image-virtual-5.15 5.15.0.177.162 Ubuntu 20.04 LTS linux-image-5.15.0-1100-ibm 5.15.0-1100.103~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1101-intel-iotg 5.15.0-1101.107~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1106-aws 5.15.0-1106.113~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-177-generic 5.15.0-177.187~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-177-generic-64k 5.15.0-177.187~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-177-generic-lpae 5.15.0-177.187~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-177-lowlatency 5.15.0-177.187~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-177-lowlatency-64k 5.15.0-177.187~20.04.1 Available with Ubuntu Pro linux-image-aws 5.15.0.1106.113~20.04.1 Available with Ubuntu Pro linux-image-aws-5.15 5.15.0.1106.113~20.04.1 Available with Ubuntu Pro linux-image-generic-5.15 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-generic-64k-5.15 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-generic-64k-hwe-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-generic-hwe-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-generic-lpae-5.15 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-generic-lpae-hwe-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-ibm 5.15.0.1100.103~20.04.1 Available with Ubuntu Pro linux-image-ibm-5.15 5.15.0.1100.103~20.04.1 Available with Ubuntu Pro linux-image-intel 5.15.0.1101.107~20.04.1 Available with Ubuntu Pro linux-image-intel-iotg 5.15.0.1101.107~20.04.1 Available with Ubuntu Pro linux-image-intel-iotg-5.15 5.15.0.1101.107~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-5.15 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-64k-5.15 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-64k-hwe-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-lowlatency-hwe-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04b 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04c 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04d 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-virtual-5.15 5.15.0.177.187~20.04.1 Available with Ubuntu Pro linux-image-virtual-hwe-20.04 5.15.0.177.187~20.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8255-1 CVE-2023-2640, CVE-2023-32629, CVE-2026-23112, CVE-2026-23273 Package Information: https://launchpad.net/ubuntu/+source/linux/5.15.0-177.187 https://launchpad.net/ubuntu/+source/linux-aws/5.15.0-1106.113 https://launchpad.net/ubuntu/+source/linux-aws-fips/5.15.0-1106.113+fips1 https://launchpad.net/ubuntu/+source/linux-azure/5.15.0-1111.120 https://launchpad.net/ubuntu/+source/linux-azure-fips/5.15.0-1111.120+fips1 https://launchpad.net/ubuntu/+source/linux-fips/5.15.0-177.187+fips1 https://launchpad.net/ubuntu/+source/linux-gcp/5.15.0-1106.115 https://launchpad.net/ubuntu/+source/linux-gcp-fips/5.15.0-1106.115+fips1 https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1102.108 https://launchpad.net/ubuntu/+source/linux-gkeop/5.15.0-1089.97 https://launchpad.net/ubuntu/+source/linux-ibm/5.15.0-1100.103 https://launchpad.net/ubuntu/+source/linux-intel-iot-realtime/5.15.0-1098.100 https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1101.107 https://launchpad.net/ubuntu/+source/linux-kvm/5.15.0-1098.103 https://launchpad.net/ubuntu/+source/linux-lowlatency/5.15.0-177.187 https://launchpad.net/ubuntu/+source/linux-nvidia/5.15.0-1101.102 https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/5.15.0-1058.58 https://launchpad.net/ubuntu/+source/linux-nvidia-tegra-igx/5.15.0-1047.47 https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1103.109 https://launchpad.net/ubuntu/+source/linux-realtime/5.15.0-1105.114
[USN-8243-1] Linux kernel (Azure) vulnerabilities
========================================================================== Ubuntu Security Notice USN-8243-1 May 07, 2026 linux-azure-5.15 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-azure-5.15: Linux kernel for Microsoft Azure cloud systems Details: Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Nios II architecture; - PowerPC architecture; - Sun Sparc architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - ATM drivers; - Drivers core; - Network block device driver; - Bluetooth drivers; - Bus devices; - Character device driver; - Hardware random number generator core; - TPM device driver; - Data acquisition framework and drivers; - Counter interface drivers; - CPU frequency scaling framework; - DMA engine subsystem; - Intel Stratix 10 firmware drivers; - GPU drivers; - HID subsystem; - Hardware monitoring drivers; - CoreSight HW tracing drivers; - Intel Trace Hub HW tracing drivers; - IIO subsystem; - IIO ADC drivers; - InfiniBand drivers; - Input Device core drivers; - Input Device (Miscellaneous) drivers; - Input Device (Tablet) drivers; - IRQ chip drivers; - ISDN/mISDN subsystem; - Modular ISDN driver; - LED subsystem; - Macintosh device drivers; - Multiple devices driver; - Media drivers; - UACCE accelerator framework; - MOST (Media Oriented Systems Transport) drivers; - MTD block device drivers; - Ethernet bonding driver; - Network drivers; - Mellanox network drivers; - STMicroelectronics network drivers; - Texas Instruments network drivers; - Ethernet team driver; - MediaTek network drivers; - NVME drivers; - PA-RISC drivers; - PCI subsystem; - Performance monitor drivers; - PHY drivers; - Pin controllers subsystem; - Chrome hardware platform drivers; - x86 platform drivers; - ARM PM domains; - PPS (Pulse Per Second) driver; - PWM drivers; - Voltage and Current Regulator drivers; - S/390 drivers; - SCSI subsystem; - SLIMbus drivers; - Texas Instruments SoC drivers; - SPI subsystem; - Realtek RTL8723BS SDIO drivers; - TCM subsystem; - Userspace I/O drivers; - Cadence USB3 driver; - DesignWare USB3 driver; - USB Gadget drivers; - USB Host Controller drivers; - Renesas USBHS Controller drivers; - USB Mass Storage drivers; - USB Type-C Connector System Software Interface driver; - Backlight driver; - Framebuffer layer; - W1 Dallas's 1-wire bus driver; - Watchdog drivers; - Xen hypervisor drivers; - BFS file system; - BTRFS file system; - File systems infrastructure; - Ext4 file system; - F2FS file system; - FUSE (File system in Userspace); - HFS file system; - HFS+ file system; - HugeTLB file system; - Journaling layer for block devices (JBD2); - JFS file system; - Network file system (NFS) client; - Network file system (NFS) server daemon; - File system notification infrastructure; - NTFS3 file system; - OCFS2 file system; - OrangeFS file system; - Proc file system; - SMB network file system; - SquashFS file system; - UDF file system; - XFS file system; - BPF subsystem; - Ethernet bridge; - Memory management; - padata parallel execution mechanism; - IP tunnels definitions; - NFC subsystem; - Network traffic control; - Network sockets; - XFRM subsystem; - io_uring subsystem; - Control group (cgroup); - IRQ subsystem; - Locking primitives; - Padata parallel execution mechanism; - PID allocator; - Scheduler infrastructure; - Shadow Call Stack mechanism; - Tracing infrastructure; - 9P file system network protocol; - Bluetooth subsystem; - CAIF protocol; - CAN network layer; - Ceph Core library; - Networking core; - Ethtool driver; - HSR network protocol; - IPv4 networking; - IPv6 networking; - L2TP protocol; - MAC80211 subsystem; - Multipath TCP; - Netfilter; - NET/ROM layer; - Open vSwitch; - RF switch subsystem; - Rose network layer; - SCTP protocol; - Sun RPC protocol; - TIPC protocol; - TLS protocol; - Unix domain sockets; - VMware vSockets driver; - Wireless networking; - Rust bindings mechanism; - Integrity Measurement Architecture(IMA) framework; - Key management; - Simplified Mandatory Access Control Kernel framework; - FireWire sound drivers; - Turtle Beach Wavefront ALSA driver; - Creative Sound Blaster X-Fi driver; - Intel ASoC drivers; - STMicroelectronics SoC drivers; - USB sound devices; (CVE-2022-49465, CVE-2022-49635, CVE-2023-53421, CVE-2023-53520, CVE-2023-53662, CVE-2023-54207, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011, CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058, CVE-2025-22111, CVE-2025-22121, CVE-2025-23143, CVE-2025-37849, CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129, CVE-2025-38232, CVE-2025-38236, CVE-2025-38248, CVE-2025-38408, CVE-2025-38556, CVE-2025-38584, CVE-2025-38591, CVE-2025-39869, CVE-2025-39873, CVE-2025-39876, CVE-2025-39880, CVE-2025-39883, CVE-2025-39885, CVE-2025-39907, CVE-2025-39911, CVE-2025-39913, CVE-2025-39923, CVE-2025-39934, CVE-2025-39937, CVE-2025-39943, CVE-2025-39945, CVE-2025-39949, CVE-2025-39951, CVE-2025-39953, CVE-2025-39955, CVE-2025-39967, CVE-2025-39968, CVE-2025-39969, CVE-2025-39970, CVE-2025-39971, CVE-2025-39972, CVE-2025-39973, CVE-2025-39980, CVE-2025-39985, CVE-2025-39986, CVE-2025-39987, CVE-2025-39988, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996, CVE-2025-39998, CVE-2025-40001, CVE-2025-40006, CVE-2025-40011, CVE-2025-40020, CVE-2025-40021, CVE-2025-40026, CVE-2025-40027, CVE-2025-40029, CVE-2025-40030, CVE-2025-40035, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40048, CVE-2025-40049, CVE-2025-40053, CVE-2025-40055, CVE-2025-40060, CVE-2025-40068, CVE-2025-40070, CVE-2025-40078, CVE-2025-40081, CVE-2025-40083, CVE-2025-40085, CVE-2025-40087, CVE-2025-40088, CVE-2025-40092, CVE-2025-40094, CVE-2025-40105, CVE-2025-40106, CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112, CVE-2025-40115, CVE-2025-40116, CVE-2025-40118, CVE-2025-40120, CVE-2025-40121, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126, CVE-2025-40127, CVE-2025-40134, CVE-2025-40140, CVE-2025-40149, CVE-2025-40153, CVE-2025-40154, CVE-2025-40164, CVE-2025-40167, CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179, CVE-2025-40183, CVE-2025-40187, CVE-2025-40188, CVE-2025-40194, CVE-2025-40200, CVE-2025-40204, CVE-2025-40205, CVE-2025-40211, CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223, CVE-2025-40231, CVE-2025-40233, CVE-2025-40240, CVE-2025-40243, CVE-2025-40244, CVE-2025-40245, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283, CVE-2025-40304, CVE-2025-40306, CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322, CVE-2025-40324, CVE-2025-40331, CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349, CVE-2025-40351, CVE-2025-40360, CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191, CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68211, CVE-2025-68217, CVE-2025-68220, CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244, CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255, CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264, CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285, CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321, CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68339, CVE-2025-68340, CVE-2025-68344, CVE-2025-68346, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68364, CVE-2025-68365, CVE-2025-68366, CVE-2025-68367, CVE-2025-68372, CVE-2025-68724, CVE-2025-68725, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734, CVE-2025-68740, CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68764, CVE-2025-68765, CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776, CVE-2025-68777, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68787, CVE-2025-68788, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-71064, CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71108, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71185, CVE-2025-71186, CVE-2025-71188, CVE-2025-71190, CVE-2025-71191, CVE-2025-71194, CVE-2025-71196, CVE-2025-71197, CVE-2025-71199, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23001, CVE-2026-23003, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23026, CVE-2026-23033, CVE-2026-23037, CVE-2026-23038, CVE-2026-23047, CVE-2026-23049, CVE-2026-23056, CVE-2026-23058, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063, CVE-2026-23064, CVE-2026-23071, CVE-2026-23073, CVE-2026-23074, CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087, CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098, CVE-2026-23099, CVE-2026-23101, CVE-2026-23103, CVE-2026-23105, CVE-2026-23108, CVE-2026-23111, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23124, CVE-2026-23125, CVE-2026-23128, CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164, CVE-2026-23167, CVE-2026-23170, CVE-2026-23209) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS linux-image-5.15.0-1110-azure 5.15.0-1110.119~20.04.1 Available with Ubuntu Pro linux-image-azure 5.15.0.1110.119~20.04.1 Available with Ubuntu Pro linux-image-azure-5.15 5.15.0.1110.119~20.04.1 Available with Ubuntu Pro linux-image-azure-cvm 5.15.0.1110.119~20.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8243-1 https://launchpad.net/bugs/2143853 CVE-2022-49465, CVE-2022-49635, CVE-2023-53421, CVE-2023-53520, CVE-2023-53662, CVE-2023-54207, CVE-2024-36903, CVE-2024-36927, CVE-2024-37354, CVE-2024-41014, CVE-2024-46830, CVE-2024-47666, CVE-2024-49968, CVE-2024-53114, CVE-2024-56538, CVE-2024-58011, CVE-2025-21780, CVE-2025-21861, CVE-2025-22022, CVE-2025-22058, CVE-2025-22111, CVE-2025-22121, CVE-2025-23143, CVE-2025-37849, CVE-2025-38022, CVE-2025-38057, CVE-2025-38125, CVE-2025-38129, CVE-2025-38232, CVE-2025-38236, CVE-2025-38248, CVE-2025-38408, CVE-2025-38556, CVE-2025-38584, CVE-2025-38591, CVE-2025-39869, CVE-2025-39873, CVE-2025-39876, CVE-2025-39880, CVE-2025-39883, CVE-2025-39885, CVE-2025-39907, CVE-2025-39911, CVE-2025-39913, CVE-2025-39923, CVE-2025-39934, CVE-2025-39937, CVE-2025-39943, CVE-2025-39945, CVE-2025-39949, CVE-2025-39951, CVE-2025-39953, CVE-2025-39955, CVE-2025-39967, CVE-2025-39968, CVE-2025-39969, CVE-2025-39970, CVE-2025-39971, CVE-2025-39972, CVE-2025-39973, CVE-2025-39980, CVE-2025-39985, CVE-2025-39986, CVE-2025-39987, CVE-2025-39988, CVE-2025-39994, CVE-2025-39995, CVE-2025-39996, CVE-2025-39998, CVE-2025-40001, CVE-2025-40006, CVE-2025-40011, CVE-2025-40020, CVE-2025-40021, CVE-2025-40026, CVE-2025-40027, CVE-2025-40029, CVE-2025-40030, CVE-2025-40035, CVE-2025-40040, CVE-2025-40042, CVE-2025-40043, CVE-2025-40044, CVE-2025-40048, CVE-2025-40049, CVE-2025-40053, CVE-2025-40055, CVE-2025-40060, CVE-2025-40068, CVE-2025-40070, CVE-2025-40078, CVE-2025-40081, CVE-2025-40083, CVE-2025-40085, CVE-2025-40087, CVE-2025-40088, CVE-2025-40092, CVE-2025-40094, CVE-2025-40105, CVE-2025-40106, CVE-2025-40109, CVE-2025-40110, CVE-2025-40111, CVE-2025-40112, CVE-2025-40115, CVE-2025-40116, CVE-2025-40118, CVE-2025-40120, CVE-2025-40121, CVE-2025-40124, CVE-2025-40125, CVE-2025-40126, CVE-2025-40127, CVE-2025-40134, CVE-2025-40140, CVE-2025-40149, CVE-2025-40153, CVE-2025-40154, CVE-2025-40164, CVE-2025-40167, CVE-2025-40171, CVE-2025-40173, CVE-2025-40178, CVE-2025-40179, CVE-2025-40183, CVE-2025-40187, CVE-2025-40188, CVE-2025-40194, CVE-2025-40200, CVE-2025-40204, CVE-2025-40205, CVE-2025-40211, CVE-2025-40215, CVE-2025-40219, CVE-2025-40220, CVE-2025-40223, CVE-2025-40231, CVE-2025-40233, CVE-2025-40240, CVE-2025-40243, CVE-2025-40244, CVE-2025-40245, CVE-2025-40248, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40269, CVE-2025-40271, CVE-2025-40272, CVE-2025-40273, CVE-2025-40275, CVE-2025-40277, CVE-2025-40278, CVE-2025-40279, CVE-2025-40280, CVE-2025-40281, CVE-2025-40282, CVE-2025-40283, CVE-2025-40304, CVE-2025-40306, CVE-2025-40308, CVE-2025-40309, CVE-2025-40312, CVE-2025-40313, CVE-2025-40314, CVE-2025-40315, CVE-2025-40317, CVE-2025-40319, CVE-2025-40321, CVE-2025-40322, CVE-2025-40324, CVE-2025-40331, CVE-2025-40342, CVE-2025-40343, CVE-2025-40345, CVE-2025-40346, CVE-2025-40349, CVE-2025-40351, CVE-2025-40360, CVE-2025-40363, CVE-2025-68168, CVE-2025-68176, CVE-2025-68177, CVE-2025-68185, CVE-2025-68191, CVE-2025-68192, CVE-2025-68194, CVE-2025-68200, CVE-2025-68204, CVE-2025-68211, CVE-2025-68217, CVE-2025-68220, CVE-2025-68227, CVE-2025-68229, CVE-2025-68238, CVE-2025-68241, CVE-2025-68244, CVE-2025-68245, CVE-2025-68249, CVE-2025-68254, CVE-2025-68255, CVE-2025-68257, CVE-2025-68258, CVE-2025-68261, CVE-2025-68264, CVE-2025-68266, CVE-2025-68282, CVE-2025-68284, CVE-2025-68285, CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68295, CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68308, CVE-2025-68312, CVE-2025-68321, CVE-2025-68325, CVE-2025-68327, CVE-2025-68328, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68339, CVE-2025-68340, CVE-2025-68344, CVE-2025-68346, CVE-2025-68349, CVE-2025-68354, CVE-2025-68362, CVE-2025-68364, CVE-2025-68365, CVE-2025-68366, CVE-2025-68367, CVE-2025-68372, CVE-2025-68724, CVE-2025-68725, CVE-2025-68727, CVE-2025-68728, CVE-2025-68732, CVE-2025-68733, CVE-2025-68734, CVE-2025-68740, CVE-2025-68746, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68764, CVE-2025-68765, CVE-2025-68767, CVE-2025-68769, CVE-2025-68771, CVE-2025-68774, CVE-2025-68776, CVE-2025-68777, CVE-2025-68780, CVE-2025-68782, CVE-2025-68783, CVE-2025-68785, CVE-2025-68787, CVE-2025-68788, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68803, CVE-2025-68804, CVE-2025-68808, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-71064, CVE-2025-71066, CVE-2025-71068, CVE-2025-71069, CVE-2025-71075, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71108, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71116, CVE-2025-71118, CVE-2025-71120, CVE-2025-71121, CVE-2025-71125, CVE-2025-71127, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71136, CVE-2025-71137, CVE-2025-71147, CVE-2025-71154, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71185, CVE-2025-71186, CVE-2025-71188, CVE-2025-71190, CVE-2025-71191, CVE-2025-71194, CVE-2025-71196, CVE-2025-71197, CVE-2025-71199, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22980, CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23001, CVE-2026-23003, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23026, CVE-2026-23033, CVE-2026-23037, CVE-2026-23038, CVE-2026-23047, CVE-2026-23049, CVE-2026-23056, CVE-2026-23058, CVE-2026-23060, CVE-2026-23061, CVE-2026-23063, CVE-2026-23064, CVE-2026-23071, CVE-2026-23073, CVE-2026-23074, CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23087, CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098, CVE-2026-23099, CVE-2026-23101, CVE-2026-23103, CVE-2026-23105, CVE-2026-23108, CVE-2026-23111, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23124, CVE-2026-23125, CVE-2026-23128, CVE-2026-23133, CVE-2026-23146, CVE-2026-23150, CVE-2026-23164, CVE-2026-23167, CVE-2026-23170, CVE-2026-23209, CVE-2026-23268, CVE-2026-23269, CVE-2026-23403, CVE-2026-23404, CVE-2026-23405, CVE-2026-23406, CVE-2026-23407, CVE-2026-23408, CVE-2026-23409, CVE-2026-23410, CVE-2026-23411
[USN-8262-1] Lua vulnerability
========================================================================== Ubuntu Security Notice USN-8262-1 May 08, 2026 lua5.1 vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 16.04 LTS Summary: Lua could be made to crash or run programs as your login if it opened a specially crafted file. Software Description: - lua5.1: Lua is an embeddable scripting language Details: It was discovered that the Lua parser incorrectly handled garbage collection when processing specially crafted Lua scripts. A remote attacker could possibly use this issue to cause a denial of service or execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 16.04 LTS liblua5.1-0 5.1.5-8ubuntu1+esm1 Available with Ubuntu Pro lua5.1 5.1.5-8ubuntu1+esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8262-1 CVE-2025-49844
OpenBSD Errata: May 8, 2026 (expat nfs iked)
Errata patches for libexpat, NFS server, and iked have been released for OpenBSD 7.7 and 7.8. Binary updates for the amd64, arm64 and i386 platform are available via the syspatch utility. Source code patches can be found on the respective errata page: https://www.openbsd.org/errata77.html https://www.openbsd.org/errata78.html
[USN-8242-2] PostfixAdmin vulnerability
========================================================================== Ubuntu Security Notice USN-8242-2 May 07, 2026 postfixadmin vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: PostfixAdmin could be made to run malicious JavaScript in the user's browser if it received specially crafted input. Software Description: - postfixadmin: Virtual mail hosting interface for Postfix Details: USN-8242-1 fixed a vulnerability in CiviCRM. This update provides the corresponding fix for PostfixAdmin. Original advisory details: Takuya Aramaki discovered that Smarty, vendored in CiviCRM, did not properly escape JavaScript code. An attacker could possibly use this issue to conduct a cross-site scripting attack. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS postfixadmin 3.3.13-1ubuntu0.1~esm1 Available with Ubuntu Pro In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8242-2 https://ubuntu.com/security/notices/USN-8242-1 CVE-2023-28447
Friday, May 8, 2026
s390x builders restored
Thanks to a bunch of overnight work from IBM and Red Hat folks, our s390x builders are back online and processing backlog of builds. Note that there is a backlog so it may be a bit until things are caught up and processing normally. Also, there are no plans at this time to resubmit any builds. If your builds failed due to timeout or other issues, please do feel free to resubmit them. kevin -- _______________________________________________ devel-announce mailing list -- devel-announce@lists.fedoraproject.org To unsubscribe send an email to devel-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel-announce@lists.fedoraproject.org Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
[USN-8253-1] Postfix vulnerability
========================================================================== Ubuntu Security Notice USN-8253-1 May 07, 2026 postfix vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Postfix could be made to crash if it received specially crafted network traffic. Software Description: - postfix: High-performance mail transport agent Details: Kamil Frankowicz discovered that Postfix incorrectly handled certain enhanced status codes. A remote attacker could possibly use this issue to cause Postfix to crash, resulting in a denial of service. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS postfix 3.10.6-4ubuntu2.1 Ubuntu 25.10 postfix 3.10.2-1ubuntu2.1 Ubuntu 24.04 LTS postfix 3.8.6-1ubuntu0.1 Ubuntu 22.04 LTS postfix 3.6.4-1ubuntu1.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8253-1 CVE-2026-43964 Package Information: https://launchpad.net/ubuntu/+source/postfix/3.10.6-4ubuntu2.1 https://launchpad.net/ubuntu/+source/postfix/3.10.2-1ubuntu2.1 https://launchpad.net/ubuntu/+source/postfix/3.8.6-1ubuntu0.1 https://launchpad.net/ubuntu/+source/postfix/3.6.4-1ubuntu1.4
[USN-8246-1] Vim vulnerabilities
========================================================================== Ubuntu Security Notice USN-8246-1 May 07, 2026 vim vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 25.10 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in Vim. Software Description: - vim: Vi IMproved - enhanced vi editor Details: Michał Majchrowicz discovered that Vim’s zip plugin could overwrite arbitrary files. An attacker could possibly use this issue to delete sensitive data or execute arbitrary code. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-35177) It was discovered that Vim’s netbeans interface did not properly sanitize certain strings. An attacker could possibly use this issue to execute arbitrary commands. This issue only affected Ubuntu 26.04 LTS. (CVE-2026-39881) It was discovered that Vim did not properly handle backticks in tag filenames. An attacker could possibly use this issue to execute arbitrary commands. (CVE-2026-41411) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS vim 2:9.1.2141-1ubuntu4.1 vim-common 2:9.1.2141-1ubuntu4.1 vim-doc 2:9.1.2141-1ubuntu4.1 vim-gtk3 2:9.1.2141-1ubuntu4.1 vim-gui-common 2:9.1.2141-1ubuntu4.1 vim-motif 2:9.1.2141-1ubuntu4.1 vim-nox 2:9.1.2141-1ubuntu4.1 vim-runtime 2:9.1.2141-1ubuntu4.1 vim-tiny 2:9.1.2141-1ubuntu4.1 xxd 2:9.1.2141-1ubuntu4.1 Ubuntu 25.10 vim 2:9.1.0967-1ubuntu6.4 vim-athena 2:9.1.0967-1ubuntu6.4 vim-common 2:9.1.0967-1ubuntu6.4 vim-doc 2:9.1.0967-1ubuntu6.4 vim-gtk3 2:9.1.0967-1ubuntu6.4 vim-gui-common 2:9.1.0967-1ubuntu6.4 vim-motif 2:9.1.0967-1ubuntu6.4 vim-nox 2:9.1.0967-1ubuntu6.4 vim-runtime 2:9.1.0967-1ubuntu6.4 vim-tiny 2:9.1.0967-1ubuntu6.4 xxd 2:9.1.0967-1ubuntu6.4 Ubuntu 24.04 LTS vim 2:9.1.0016-1ubuntu7.13 vim-athena 2:9.1.0016-1ubuntu7.13 vim-common 2:9.1.0016-1ubuntu7.13 vim-doc 2:9.1.0016-1ubuntu7.13 vim-gtk3 2:9.1.0016-1ubuntu7.13 vim-gui-common 2:9.1.0016-1ubuntu7.13 vim-motif 2:9.1.0016-1ubuntu7.13 vim-nox 2:9.1.0016-1ubuntu7.13 vim-runtime 2:9.1.0016-1ubuntu7.13 vim-tiny 2:9.1.0016-1ubuntu7.13 xxd 2:9.1.0016-1ubuntu7.13 Ubuntu 22.04 LTS vim 2:8.2.3995-1ubuntu2.29 vim-athena 2:8.2.3995-1ubuntu2.29 vim-common 2:8.2.3995-1ubuntu2.29 vim-doc 2:8.2.3995-1ubuntu2.29 vim-gtk 2:8.2.3995-1ubuntu2.29 vim-gtk3 2:8.2.3995-1ubuntu2.29 vim-gui-common 2:8.2.3995-1ubuntu2.29 vim-nox 2:8.2.3995-1ubuntu2.29 vim-runtime 2:8.2.3995-1ubuntu2.29 vim-tiny 2:8.2.3995-1ubuntu2.29 xxd 2:8.2.3995-1ubuntu2.29 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8246-1 CVE-2026-35177, CVE-2026-39881, CVE-2026-41411 Package Information: https://launchpad.net/ubuntu/+source/vim/2:9.1.2141-1ubuntu4.1 https://launchpad.net/ubuntu/+source/vim/2:9.1.0967-1ubuntu6.4 https://launchpad.net/ubuntu/+source/vim/2:9.1.0016-1ubuntu7.13 https://launchpad.net/ubuntu/+source/vim/2:8.2.3995-1ubuntu2.29
[USN-8257-1] Linux kernel (Raspberry Pi) vulnerabilities
========================================================================== Ubuntu Security Notice USN-8257-1 May 07, 2026 linux-raspi vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-raspi: Linux kernel for Raspberry Pi systems Details: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo Rizzo discovered that some AMD Zen processors did not properly verify the signature of CPU microcode. This flaw is known as EntrySign. A privileged attacker could possibly use this issue to cause load malicious CPU microcode causing loss of integrity and confidentiality. (CVE-2024-36347) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - MIPS architecture; - PowerPC architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACPI drivers; - Ublk userspace block driver; - Bluetooth drivers; - Character device driver; - TPM device driver; - Clock framework and drivers; - GPU drivers; - Hardware monitoring drivers; - Intel Trace Hub HW tracing drivers; - InfiniBand drivers; - Input Device core drivers; - Input Device (Mouse) drivers; - IOMMU subsystem; - Multiple devices driver; - Media drivers; - Network drivers; - Mellanox network drivers; - STMicroelectronics network drivers; - Ethernet team driver; - NVME drivers; - PA-RISC drivers; - Chrome hardware platform drivers; - x86 platform drivers; - SCSI subsystem; - SPI subsystem; - TCM subsystem; - Freescale USB OTG Transceiver Driver; - USB Type-C Connector System Software Interface driver; - Watchdog drivers; - BTRFS file system; - exFAT file system; - Ext4 file system; - F2FS file system; - FUSE (File system in Userspace); - HFS+ file system; - File systems infrastructure; - Network file system (NFS) server daemon; - File system notification infrastructure; - NTFS3 file system; - OCFS2 file system; - SMB network file system; - XFS file system; - User-space API (UAPI); - io_uring subsystem; - Scheduler infrastructure; - Shadow Call Stack mechanism; - Tracing infrastructure; - Memory management; - BPF subsystem; - CAIF protocol; - Ceph Core library; - Networking core; - Ethtool driver; - Handshake API; - HSR network protocol; - IPv4 networking; - IPv6 networking; - Multipath TCP; - Netfilter; - NET/ROM layer; - NFC subsystem; - Open vSwitch; - Rose network layer; - Network traffic control; - Sun RPC protocol; - Key management; - Landlock security; - STMicroelectronics SoC drivers; - USB sound devices; - KVM subsystem; (CVE-2025-68351, CVE-2025-68353, CVE-2025-68365, CVE-2025-68368, CVE-2025-68725, CVE-2025-68736, CVE-2025-68745, CVE-2025-68767, CVE-2025-68768, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68781, CVE-2025-68782, CVE-2025-68783, CVE-2025-68784, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788, CVE-2025-68791, CVE-2025-68792, CVE-2025-68793, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68802, CVE-2025-68803, CVE-2025-68804, CVE-2025-68805, CVE-2025-68806, CVE-2025-68807, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-68822, CVE-2025-68823, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71070, CVE-2025-71071, CVE-2025-71072, CVE-2025-71073, CVE-2025-71075, CVE-2025-71076, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71099, CVE-2025-71100, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71115, CVE-2025-71116, CVE-2025-71117, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71124, CVE-2025-71125, CVE-2025-71126, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71143, CVE-2025-71146, CVE-2025-71147, CVE-2025-71148, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2025-71156, CVE-2025-71157, CVE-2026-23091, CVE-2026-23112, CVE-2026-23209, CVE-2026-23231, CVE-2026-23273) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 linux-image-6.17.0-1014-raspi 6.17.0-1014.14 linux-image-raspi 6.17.0-1014.14 linux-image-raspi-6.17 6.17.0-1014.14 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8257-1 CVE-2024-36347, CVE-2025-68351, CVE-2025-68353, CVE-2025-68365, CVE-2025-68368, CVE-2025-68725, CVE-2025-68736, CVE-2025-68745, CVE-2025-68767, CVE-2025-68768, CVE-2025-68769, CVE-2025-68770, CVE-2025-68771, CVE-2025-68772, CVE-2025-68773, CVE-2025-68774, CVE-2025-68775, CVE-2025-68776, CVE-2025-68777, CVE-2025-68778, CVE-2025-68780, CVE-2025-68781, CVE-2025-68782, CVE-2025-68783, CVE-2025-68784, CVE-2025-68785, CVE-2025-68786, CVE-2025-68787, CVE-2025-68788, CVE-2025-68791, CVE-2025-68792, CVE-2025-68793, CVE-2025-68794, CVE-2025-68795, CVE-2025-68796, CVE-2025-68797, CVE-2025-68798, CVE-2025-68799, CVE-2025-68800, CVE-2025-68801, CVE-2025-68802, CVE-2025-68803, CVE-2025-68804, CVE-2025-68805, CVE-2025-68806, CVE-2025-68807, CVE-2025-68808, CVE-2025-68809, CVE-2025-68810, CVE-2025-68811, CVE-2025-68813, CVE-2025-68814, CVE-2025-68815, CVE-2025-68816, CVE-2025-68817, CVE-2025-68818, CVE-2025-68819, CVE-2025-68820, CVE-2025-68821, CVE-2025-68822, CVE-2025-68823, CVE-2025-71064, CVE-2025-71065, CVE-2025-71066, CVE-2025-71067, CVE-2025-71068, CVE-2025-71069, CVE-2025-71070, CVE-2025-71071, CVE-2025-71072, CVE-2025-71073, CVE-2025-71075, CVE-2025-71076, CVE-2025-71077, CVE-2025-71078, CVE-2025-71079, CVE-2025-71081, CVE-2025-71082, CVE-2025-71083, CVE-2025-71084, CVE-2025-71085, CVE-2025-71086, CVE-2025-71087, CVE-2025-71089, CVE-2025-71091, CVE-2025-71093, CVE-2025-71094, CVE-2025-71095, CVE-2025-71096, CVE-2025-71097, CVE-2025-71098, CVE-2025-71099, CVE-2025-71100, CVE-2025-71101, CVE-2025-71102, CVE-2025-71104, CVE-2025-71105, CVE-2025-71107, CVE-2025-71108, CVE-2025-71109, CVE-2025-71111, CVE-2025-71112, CVE-2025-71113, CVE-2025-71114, CVE-2025-71115, CVE-2025-71116, CVE-2025-71117, CVE-2025-71118, CVE-2025-71119, CVE-2025-71120, CVE-2025-71121, CVE-2025-71122, CVE-2025-71123, CVE-2025-71124, CVE-2025-71125, CVE-2025-71126, CVE-2025-71130, CVE-2025-71131, CVE-2025-71132, CVE-2025-71133, CVE-2025-71135, CVE-2025-71136, CVE-2025-71137, CVE-2025-71138, CVE-2025-71140, CVE-2025-71143, CVE-2025-71146, CVE-2025-71147, CVE-2025-71148, CVE-2025-71149, CVE-2025-71150, CVE-2025-71151, CVE-2025-71153, CVE-2025-71154, CVE-2025-71156, CVE-2025-71157, CVE-2026-23091, CVE-2026-23112, CVE-2026-23209, CVE-2026-23231, CVE-2026-23273 Package Information: https://launchpad.net/ubuntu/+source/linux-raspi/6.17.0-1014.14