Skip to content
OpenAdvisories
Critical 1 exploited CVE LSN-120-1 3 CVEs

Kernel Live Patch Security Notice

Published Jun 1, 2026 · Updated Jul 29, 2026

Ecosystem: Ubuntu

Summary

In the Linux kernel, the following vulnerability has been
resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If
kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we
propagate the error back to the ioctl but leave the vGIC vCPU data
initialised.

In the Linux kernel, the following vulnerability has been
resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length
or offset exceeds sg_cnt and then use bogus sg->length/offset values,
leading to _copy_to_iter() GPF/KASAN.

It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container.)(CVE-2026-31431)

Fixed packages 30

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux 4.15.0-250.262
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-aws 4.15.0-1192.205
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-azure-4.15 4.15.0-1201.216
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-gcp-4.15 4.15.0-1185.202
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-hwe-5.4 5.4.0-231.251~18.04.1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS linux-oracle 4.15.0-1154.165
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux 5.4.0-230.250
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1108.115~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure-5.15 5.15.0-1114.123~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1108.117~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-179.189~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1102.105~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-179.189~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-oracle-5.15 5.15.0-1106.112~20.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux 5.15.0-179.189
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-aws 5.15.0-1108.115
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-aws-6.8 6.8.0-1057.60~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-azure 5.15.0-1114.123
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gcp 5.15.0-1108.117
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gcp-6.8 6.8.0-1060.63~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-gke 5.15.0-1104.110
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-ibm 5.15.0-1102.105
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-ibm-6.8 6.8.0-1055.56~22.04.1
Ubuntu · Pro 22.04 LTS Pro:22.04:LTS linux-oracle 5.15.0-1105.111
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux 6.8.0-117.117
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-aws 6.8.0-1055.58
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-azure 6.8.0-1056.62
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-gcp 6.8.0-1058.61
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-ibm 6.8.0-1055.56
Ubuntu · Pro 24.04 LTS Pro:24.04:LTS linux-oracle 6.8.0-1054.55

Vulnerabilities 3

  • High 7.8
    CVE-2026-31431 Exploited Public exploit EPSS 98%

    crypto: algif_aead - Revert to operating out-of-place

    In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux Alpine
    KEV May 1, 2026
  • Critical 9.8
    CVE-2026-23112

    nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec

    In the Linux kernel, the following vulnerability has been resolved: nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec nvmet_tcp_build_pdu_iovec() could walk past cmd->req.sg when a PDU length or offset exceeds sg_cnt and then use bogus sg->length/offs…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 8.8
    CVE-2025-37849

    KVM: arm64: Tear down vGIC on failed vCPU creation

    In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-37849
  • report
    https://ubuntu.com/security/CVE-2026-23112
  • report
    https://ubuntu.com/security/CVE-2026-31431