Skip to content
OpenAdvisories

Source

Ubuntu Security Notices (USN)

Source: https://ubuntu.com/security/notices

1,460 results · Clear filters · Feed

  • Critical max 9.8
    USN-8492-1 299 CVEs

    linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-ibm, linux-nvidia, linux-nvidia-6.8, linux-oracle, linux-realtime, linux-realtime-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 archit…

    first Jul 1, 2026
  • Critical max 9.8
    USN-8492-2 299 CVEs

    linux-aws-6.8, linux-gcp-6.8, linux-gke, linux-gkeop, linux-ibm-6.8, linux-nvidia-lowlatency, linux-oracle-6.8 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 archit…

    first Jul 2, 2026
  • Critical max 9.8
    USN-8818-1 20 CVEs

    linux-aws, linux-aws-fips, linux-azure, linux-azure-fde, linux-azure-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-intel-iot-realtime, linux-intel-iotg, linux-kvm, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-oracle, linux-realtime, linux-xilinx-zynqmp vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 24, 2026
  • Critical max 9.8
    USN-8871-1 21 CVEs

    linux-raspi vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Oct 5, 2026
  • Critical max 9.8
    USN-8818-3 20 CVEs

    linux-aws-5.15, linux-azure-5.15, linux-azure-fde-5.15, linux-intel-iotg-5.15 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 29, 2026
  • Critical max 9.8
    USN-8817-3 20 CVEs

    linux-aws, linux-aws-6.8 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 30, 2026
  • Critical max 9.8
    USN-8817-2 20 CVEs

    linux-aws-fips vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 30, 2026
  • Critical max 9.8
    USN-8669-1 227 CVEs

    linux-nvidia-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer s…

    first Aug 21, 2026
  • Critical max 9.8
    USN-8842-1 18 CVEs

    linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - InfiniBand drivers; - Network drivers; - TCM subsystem; - B.A.T.M.A.N. meshin…

    first Sep 29, 2026
  • Critical max 9.8
    USN-8636-2 24 CVEs

    linux-oracle-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; -…

    first Aug 18, 2026
  • Critical max 9.8
    USN-8818-4 20 CVEs

    linux, linux-nvidia vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 30, 2026
  • Critical max 9.8
    USN-8849-1 18 CVEs

    linux-nvidia-tegra-5.15 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 30, 2026
  • Critical max 9.8
    USN-8818-6 20 CVEs

    linux-fips vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Oct 2, 2026
  • Critical max 9.8
    USN-8818-5 20 CVEs

    linux-nvidia-tegra, linux-nvidia-tegra-igx vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 30, 2026
  • Critical max 9.8
    USN-8818-2 20 CVEs

    linux-ibm-5.15 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 25, 2026
  • Critical max 9.8
    USN-8570-2 203 CVEs

    linux-oracle-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer s…

    first Jul 28, 2026
  • Critical max 9.8
    USN-8570-1 203 CVEs

    linux-gcp-6.17, linux-realtime-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer s…

    first Jul 20, 2026
  • Critical max 9.8
    USN-8498-1 297 CVEs

    linux-nvidia-tegra vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 archit…

    first Jul 2, 2026
  • Critical max 9.8
    USN-8636-1 24 CVEs

    linux-azure-6.17, linux-gcp-6.17, linux-hwe-6.17, linux-oem-6.17, linux-realtime-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - InfiniBand drivers; - Media drivers; - Network drivers; -…

    first Aug 12, 2026
  • Critical max 9.8
    USN-8492-3 299 CVEs

    linux-raspi-realtime vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 archit…

    first Jul 6, 2026
  • Critical max 9.8
    USN-8392-1 10 CVEs 1 exploited

    linux-aws-5.4, linux-hwe-5.4 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It w…

    first Jun 4, 2026
  • Critical max 9.8
    USN-8492-5 299 CVEs

    linux-azure-fips, linux-fips vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 archit…

    first Jul 10, 2026
  • Critical max 9.8
    USN-8492-4 299 CVEs

    linux-raspi vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - x86 archit…

    first Jul 9, 2026
  • Critical max 9.8
    USN-8528-1 82 CVEs 2 exploited

    linux-xilinx-zynqmp vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It w…

    first Jul 10, 2026
  • Critical max 9.8
    USN-8594-1 203 CVEs

    linux-oem-6.17 vulnerabilities

    Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer s…

    first Jul 23, 2026
  • Critical max 9.8
    USN-8462-1 14 CVEs 2 exploited

    linux-oracle-5.15 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It w…

    first Jun 22, 2026
  • Critical max 9.8
    USN-8426-2 18 CVEs 2 exploited

    linux-azure vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It w…

    first Jun 16, 2026
  • Critical max 9.8
    USN-8351-1 8 CVEs 1 exploited

    linux-lowlatency vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first Jun 1, 2026
  • Critical max 9.1
    USN-8801-1 5 CVEs 1 exploited

    linux-azure-fde, linux-azure-fde-7.0 vulnerabilities

    It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to me…

    first Sep 22, 2026
  • Critical max 9.8
    USN-8426-1 18 CVEs 2 exploited

    linux-azure-5.15, linux-azure-fips vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It w…

    first Jun 11, 2026
  • Critical max 9.8
    USN-8391-1 13 CVEs 1 exploited

    linux-raspi, linux-raspi-5.4 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It w…

    first Jun 4, 2026
  • Critical max 9.8
    USN-8350-1 8 CVEs 1 exploited

    linux-nvidia-tegra vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first Jun 1, 2026
  • Critical max 9.8
    USN-7230-2 2 CVEs

    frr vulnerabilities

    Iggy Frankovic discovered that FRR incorrectly handled certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2024-44070) It was discovered…

    first Jan 27, 2025
  • Critical max 9.8
    USN-8278-1 196 CVEs 1 exploited

    linux, linux-aws, linux-aws-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 19, 2026
  • Critical max 9.8
    USN-8310-1 22 CVEs 1 exploited

    linux-azure, linux-azure-6.17 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 26, 2026
  • Critical max 9.8
    USN-8289-1 195 CVEs 1 exploited

    linux-nvidia, linux-nvidia-lowlatency vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 20, 2026
  • Critical max 9.8
    USN-8305-1 7 CVEs 1 exploited

    linux-intel-iot-realtime vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 25, 2026
  • Critical max 9.8
    USN-8289-2 195 CVEs 1 exploited

    linux-nvidia-6.8 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 25, 2026
  • Critical max 9.8
    USN-8305-2 7 CVEs 1 exploited

    linux-lowlatency-hwe-5.15 vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 26, 2026
  • Critical max 9.8
    USN-8280-1 6 CVEs 1 exploited

    linux, linux-aws, linux-aws-fips, linux-bluefield, linux-fips, linux-gcp, linux-gcp-5.4, linux-gcp-fips, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-xilinx-zynqmp vulnerabilities

    It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Seve…

    first May 19, 2026