Skip to content
OpenAdvisories
Critical USN-8013-1 2 CVEs

linux, linux-aws, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi vulnerabilities

Published Feb 4, 2026 · Updated Nov 3, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- SMB network file system;
(CVE-2025-38561, CVE-2025-40019)

Fixed packages 20

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-168.178
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1099.106
Ubuntu · 22.04 LTS 22.04:LTS linux-azure 5.15.0-1103.112
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1099.108
Ubuntu · 22.04 LTS 22.04:LTS linux-gke 5.15.0-1095.101
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1082.90
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1093.96
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1094.100
Ubuntu · 22.04 LTS 22.04:LTS linux-kvm 5.15.0-1091.96
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-168.178
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1094.95
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-tegra 5.15.0-1051.51
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1096.102
Ubuntu · 22.04 LTS 22.04:LTS linux-raspi 5.15.0-1093.96
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-azure-5.15 5.15.0-1103.112~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-168.178~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1093.96~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-intel-iotg-5.15 5.15.0-1094.100~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-168.178~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-nvidia-tegra-5.15 5.15.0-1051.51~20.04.1

Vulnerabilities 2

  • Critical 9.8
    CVE-2025-38561 Public exploit

    ksmbd: fix Preauh_HashValue race condition

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashVal…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40019 Public exploit

    crypto: essiv - Check ssize for decryption and in-place encryption

    In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-38561
  • report
    https://ubuntu.com/security/CVE-2025-40019