Skip to content
OpenAdvisories
Critical USN-8015-4 3 CVEs

linux-aws, linux-aws-6.8, linux-gcp, linux-gcp-6.8, linux-ibm, linux-ibm-6.8, linux-lowlatency-hwe-6.8 vulnerabilities

Published Feb 11, 2026 · Updated Nov 3, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- SMB network file system;
- io_uring subsystem;
(CVE-2025-38561, CVE-2025-39698, CVE-2025-40019)

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-aws-6.8 6.8.0-1045.47~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp-6.8 6.8.0-1046.49~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm-6.8 6.8.0-1043.43~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency-hwe-6.8 6.8.0-94.96.1~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux-aws 6.8.0-1045.47
Ubuntu · 24.04 LTS 24.04:LTS linux-gcp 6.8.0-1046.49
Ubuntu · 24.04 LTS 24.04:LTS linux-ibm 6.8.0-1043.43

Vulnerabilities 3

  • Critical 9.8
    CVE-2025-38561 Public exploit

    ksmbd: fix Preauh_HashValue race condition

    In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix Preauh_HashValue race condition If client send multiple session setup requests to ksmbd, Preauh_HashValue race condition could happen. There is no need to free sess->Preauh_HashVal…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • High 7.8
    CVE-2025-39698

    io_uring/futex: ensure io_futex_wait() cleans up properly on failure

    In the Linux kernel, the following vulnerability has been resolved: io_uring/futex: ensure io_futex_wait() cleans up properly on failure The io_futex_data is allocated upfront and assigned to the io_kiocb async_data field, but the request isn't marked with RE…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Unscored —
    CVE-2025-40019 Public exploit

    crypto: essiv - Check ssize for decryption and in-place encryption

    In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-38561
  • report
    https://ubuntu.com/security/CVE-2025-39698
  • report
    https://ubuntu.com/security/CVE-2025-40019