Wednesday, April 22, 2026

[USN-8200-2] Linux kernel (FIPS) vulnerabilities

========================================================================== Ubuntu Security Notice USN-8200-2 April 22, 2026 linux-fips, linux-aws-fips, linux-azure-fips, linux-gcp-fips vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - Cryptographic API; - GPU drivers; - I2C subsystem; - Network traffic control; (CVE-2022-49046, CVE-2024-46816, CVE-2025-37849, CVE-2026-23060, CVE-2026-23074) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 20.04 LTS linux-image-5.4.0-1131-fips 5.4.0-1131.141 Available with Ubuntu Pro linux-image-5.4.0-1157-aws-fips 5.4.0-1157.167+fips1 Available with Ubuntu Pro linux-image-5.4.0-1160-gcp-fips 5.4.0-1160.169+fips1 Available with Ubuntu Pro linux-image-5.4.0-1161-azure-fips 5.4.0-1161.167+fips1 Available with Ubuntu Pro linux-image-aws-fips 5.4.0.1157.104 Available with Ubuntu Pro linux-image-aws-fips-5.4 5.4.0.1157.104 Available with Ubuntu Pro linux-image-azure-fips 5.4.0.1161.97 Available with Ubuntu Pro linux-image-azure-fips-5.4 5.4.0.1161.97 Available with Ubuntu Pro linux-image-fips 5.4.0.1131.128 Available with Ubuntu Pro linux-image-fips-5.4 5.4.0.1131.128 Available with Ubuntu Pro linux-image-gcp-fips 5.4.0.1160.102 Available with Ubuntu Pro linux-image-gcp-fips-5.4 5.4.0.1160.102 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8200-2 https://ubuntu.com/security/notices/USN-8200-1 CVE-2022-49046, CVE-2024-46816, CVE-2025-37849, CVE-2026-23060, CVE-2026-23074

No comments:

Post a Comment