Ubuntu Security Notices
USN-8279-1

USN-8279-1: Linux kernel vulnerabilities

Publication date

19 May 2026

Overview

Several security issues were fixed in the Linux kernel.

Releases

22.04 LTS 20.04 LTS

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-aws-5.15 - Linux kernel for Amazon Web Services (AWS) systems
linux-aws-fips - Linux kernel for Amazon Web Services (AWS) systems with FIPS
linux-fips - Linux kernel with FIPS
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-gcp-fips - Linux kernel for Google Cloud Platform (GCP) systems with FIPS
linux-gke - Linux kernel for Google Container Engine (GKE) systems
linux-gkeop - Linux kernel for Google Container Engine (GKE) systems
linux-hwe-5.15 - Linux hardware enablement (HWE) kernel
linux-ibm - Linux kernel for IBM cloud systems
linux-ibm-5.15 - Linux kernel for IBM cloud systems
linux-intel-iotg - Linux kernel for Intel IoT platforms
linux-intel-iotg-5.15 - Linux kernel for Intel IoT platforms
linux-kvm - Linux kernel for cloud environments
linux-nvidia - Linux kernel for NVIDIA systems
linux-nvidia-tegra - Linux kernel for NVIDIA Tegra systems
linux-nvidia-tegra-5.15 - Linux kernel for NVIDIA Tegra systems
linux-oracle - Linux kernel for Oracle Cloud systems
linux-raspi - Linux kernel for Raspberry Pi systems
linux-realtime - Linux kernel for Real-time systems

Details

It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

Cryptographic API;
Ethernet bonding driver;
SMB network file system;
Netfilter;
io_uring subsystem;
Packet sockets;
TLS protocol

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

Cryptographic API;
Ethernet bonding driver;
SMB network file system;
Netfilter;
io_uring subsystem;
Packet sockets;
TLS protocol

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
22.04 LTS jammy	linux-image-5.15.0-1060-nvidia-tegra – 5.15.0-1060.60
	linux-image-5.15.0-1060-nvidia-tegra-rt – 5.15.0-1060.60
	linux-image-5.15.0-1091-gkeop – 5.15.0-1091.99
	linux-image-5.15.0-1100-kvm – 5.15.0-1100.105
	linux-image-5.15.0-1102-ibm – 5.15.0-1102.105
	linux-image-5.15.0-1102-raspi – 5.15.0-1102.105
	linux-image-5.15.0-1103-intel-iotg – 5.15.0-1103.109
	linux-image-5.15.0-1103-nvidia – 5.15.0-1103.104
	linux-image-5.15.0-1103-nvidia-lowlatency – 5.15.0-1103.104
	linux-image-5.15.0-1104-gke – 5.15.0-1104.110
	linux-image-5.15.0-1105-oracle – 5.15.0-1105.111
	linux-image-5.15.0-1107-realtime – 5.15.0-1107.116
	linux-image-5.15.0-1108-aws – 5.15.0-1108.115
	linux-image-5.15.0-1108-aws-64k – 5.15.0-1108.115
	linux-image-5.15.0-1108-aws-fips – 5.15.0-1108.115+fips1
	linux-image-5.15.0-1108-gcp – 5.15.0-1108.117
	linux-image-5.15.0-1108-gcp-fips – 5.15.0-1108.117+fips1
	linux-image-5.15.0-179-fips – 5.15.0-179.189+fips1
	linux-image-5.15.0-179-generic – 5.15.0-179.189
	linux-image-5.15.0-179-generic-64k – 5.15.0-179.189
	linux-image-5.15.0-179-generic-lpae – 5.15.0-179.189
	linux-image-aws-5.15 – 5.15.0.1108.111
	linux-image-aws-64k-5.15 – 5.15.0.1108.111
	linux-image-aws-64k-lts-22.04 – 5.15.0.1108.111
	linux-image-aws-fips – 5.15.0.1108.104
	linux-image-aws-fips-5.15 – 5.15.0.1108.104
	linux-image-aws-lts-22.04 – 5.15.0.1108.111
	linux-image-fips – 5.15.0.179.105
	linux-image-fips-5.15 – 5.15.0.179.105
	linux-image-gcp-5.15 – 5.15.0.1108.104
	linux-image-gcp-fips – 5.15.0.1108.98
	linux-image-gcp-fips-5.15 – 5.15.0.1108.98
	linux-image-gcp-lts-22.04 – 5.15.0.1108.104
	linux-image-generic – 5.15.0.179.163
	linux-image-generic-5.15 – 5.15.0.179.163
	linux-image-generic-64k – 5.15.0.179.163
	linux-image-generic-64k-5.15 – 5.15.0.179.163
	linux-image-generic-lpae – 5.15.0.179.163
	linux-image-generic-lpae-5.15 – 5.15.0.179.163
	linux-image-gke – 5.15.0.1104.103
	linux-image-gke-5.15 – 5.15.0.1104.103
	linux-image-gkeop – 5.15.0.1091.90
	linux-image-gkeop-5.15 – 5.15.0.1091.90
	linux-image-ibm – 5.15.0.1102.98
	linux-image-ibm-5.15 – 5.15.0.1102.98
	linux-image-intel-iotg – 5.15.0.1103.102
	linux-image-intel-iotg-5.15 – 5.15.0.1103.102
	linux-image-kvm – 5.15.0.1100.96
	linux-image-kvm-5.15 – 5.15.0.1100.96
	linux-image-nvidia – 5.15.0.1103.103
	linux-image-nvidia-5.15 – 5.15.0.1103.103
	linux-image-nvidia-lowlatency – 5.15.0.1103.103
	linux-image-nvidia-lowlatency-5.15 – 5.15.0.1103.103
	linux-image-nvidia-tegra – 5.15.0.1060.60
	linux-image-nvidia-tegra-5.15 – 5.15.0.1060.60
	linux-image-nvidia-tegra-rt – 5.15.0.1060.60
	linux-image-nvidia-tegra-rt-5.15 – 5.15.0.1060.60
	linux-image-oracle-5.15 – 5.15.0.1105.101
	linux-image-oracle-lts-22.04 – 5.15.0.1105.101
	linux-image-raspi – 5.15.0.1102.100
	linux-image-raspi-5.15 – 5.15.0.1102.100
	linux-image-raspi-nolpae – 5.15.0.1102.100
	linux-image-realtime – 5.15.0.1107.111
	linux-image-realtime-5.15 – 5.15.0.1107.111
linux-image-virtual – 5.15.0.179.163
linux-image-virtual-5.15 – 5.15.0.179.163
20.04 LTS focal	linux-image-5.15.0-1060-nvidia-tegra – 5.15.0-1060.60~20.04.1
	linux-image-5.15.0-1060-nvidia-tegra-rt – 5.15.0-1060.60~20.04.1
	linux-image-5.15.0-1102-ibm – 5.15.0-1102.105~20.04.1
	linux-image-5.15.0-1103-intel-iotg – 5.15.0-1103.109~20.04.1
	linux-image-5.15.0-1108-aws – 5.15.0-1108.115~20.04.1
	linux-image-5.15.0-179-generic – 5.15.0-179.189~20.04.1
	linux-image-5.15.0-179-generic-64k – 5.15.0-179.189~20.04.1
	linux-image-5.15.0-179-generic-lpae – 5.15.0-179.189~20.04.1
	linux-image-aws – 5.15.0.1108.115~20.04.1
	linux-image-aws-5.15 – 5.15.0.1108.115~20.04.1
	linux-image-generic-5.15 – 5.15.0.179.189~20.04.1
	linux-image-generic-64k-5.15 – 5.15.0.179.189~20.04.1
	linux-image-generic-64k-hwe-20.04 – 5.15.0.179.189~20.04.1
	linux-image-generic-hwe-20.04 – 5.15.0.179.189~20.04.1
	linux-image-generic-lpae-5.15 – 5.15.0.179.189~20.04.1
	linux-image-generic-lpae-hwe-20.04 – 5.15.0.179.189~20.04.1
	linux-image-ibm – 5.15.0.1102.105~20.04.1
	linux-image-ibm-5.15 – 5.15.0.1102.105~20.04.1
	linux-image-intel – 5.15.0.1103.109~20.04.1
	linux-image-intel-iotg – 5.15.0.1103.109~20.04.1
	linux-image-intel-iotg-5.15 – 5.15.0.1103.109~20.04.1
	linux-image-nvidia-tegra – 5.15.0.1060.60~20.04.1
	linux-image-nvidia-tegra-5.15 – 5.15.0.1060.60~20.04.1
	linux-image-nvidia-tegra-rt – 5.15.0.1060.60~20.04.1
	linux-image-nvidia-tegra-rt-5.15 – 5.15.0.1060.60~20.04.1
	linux-image-oem-20.04 – 5.15.0.179.189~20.04.1
	linux-image-oem-20.04b – 5.15.0.179.189~20.04.1
	linux-image-oem-20.04c – 5.15.0.179.189~20.04.1
	linux-image-oem-20.04d – 5.15.0.179.189~20.04.1
	linux-image-virtual-5.15 – 5.15.0.179.189~20.04.1
	linux-image-virtual-hwe-20.04 – 5.15.0.179.189~20.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

Get Ubuntu Pro

References

Have additional questions?

Talk to a member of the team ›