--- title: 'USN-8278-1: Linux kernel vulnerabilities | Ubuntu security notices' description: Ubuntu is an open source software operating system that runs from the desktop, to the cloud, to all your internet connected things. url: https://ubuntu.com/security/notices/USN-8278-1 --- 1. [Ubuntu Security Notices](https://ubuntu.com/security/notices) 2. USN-8278-1 --- # USN-8278-1: Linux kernel vulnerabilities Publication date 19 May 2026 Overview Several security issues were fixed in the Linux kernel. Releases [24.04 LTS](https://ubuntu.com/security/notices?release=noble) [22.04 LTS](https://ubuntu.com/security/notices?release=jammy) --- Open side navigation ## Packages * [linux](https://ubuntu.com/security/cves?package=linux) - Linux kernel * [linux-aws](https://ubuntu.com/security/cves?package=linux-aws) - Linux kernel for Amazon Web Services (AWS) systems * [linux-aws-fips](https://ubuntu.com/security/cves?package=linux-aws-fips) - Linux kernel for Amazon Web Services (AWS) systems with FIPS * [linux-gcp](https://ubuntu.com/security/cves?package=linux-gcp) - Linux kernel for Google Cloud Platform (GCP) systems * [linux-gcp-fips](https://ubuntu.com/security/cves?package=linux-gcp-fips) - Linux kernel for Google Cloud Platform (GCP) systems with FIPS * [linux-gke](https://ubuntu.com/security/cves?package=linux-gke) - Linux kernel for Google Container Engine (GKE) systems * [linux-gkeop](https://ubuntu.com/security/cves?package=linux-gkeop) - Linux kernel for Google Container Engine (GKE) systems * [linux-ibm](https://ubuntu.com/security/cves?package=linux-ibm) - Linux kernel for IBM cloud systems * [linux-ibm-6.8](https://ubuntu.com/security/cves?package=linux-ibm-6.8) - Linux kernel for IBM cloud systems * [linux-lowlatency](https://ubuntu.com/security/cves?package=linux-lowlatency) - Linux low latency kernel * [linux-lowlatency-hwe-6.8](https://ubuntu.com/security/cves?package=linux-lowlatency-hwe-6.8) - Linux low latency kernel * [linux-raspi](https://ubuntu.com/security/cves?package=linux-raspi) - Linux kernel for Raspberry Pi systems * [linux-raspi-realtime](https://ubuntu.com/security/cves?package=linux-raspi-realtime) - Linux kernel for Raspberry Pi Real-time systems * [linux-realtime](https://ubuntu.com/security/cves?package=linux-realtime) - Linux kernel for Real-time systems * [linux-realtime-6.8](https://ubuntu.com/security/cves?package=linux-realtime-6.8) - Linux kernel for Real-time systems ## Details It was discovered that the Linux kernel algif\_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. ([CVE-2026-31431](https://ubuntu.com/security/CVE-2026-31431)) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: * ARM64 architecture; * x86 architecture; * Cryptographic API; * Compute Acceleration Framework; * Drivers core; * Null block device driver; * Ublk userspace block driver; * Bluetooth drivers; * Counter interface drivers; * DMA engine subsystem; * DPLL subsystem; * GPU drivers; * HID subsystem; * Intel Trace Hub HW tracing drivers; * IIO ADC drivers; * IIO... --- Show more ## Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. [Learn more about how to get the fixes.](https://ubuntu.com/security/cves/about#security) ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. The problem can be corrected by updating your system to the following package versions: | Ubuntu Release | Package Version | | --- | --- | | 24.04 LTS noble | [linux-image-6.8.0-1041-gkeop](https://launchpad.net/ubuntu/+source/linux-signed-gkeop) –  [6.8.0-1041.44](https://launchpad.net/ubuntu/+source/linux-signed-gkeop/6.8.0-1041.44) | | | | [linux-image-6.8.0-1054-gke](https://launchpad.net/ubuntu/+source/linux-signed-gke) –  [6.8.0-1054.60](https://launchpad.net/ubuntu/+source/linux-signed-gke/6.8.0-1054.60) | | | | [linux-image-6.8.0-1054-gke-64k](https://launchpad.net/ubuntu/+source/linux-signed-gke) –  [6.8.0-1054.60](https://launchpad.net/ubuntu/+source/linux-signed-gke/6.8.0-1054.60) | | | | [linux-image-6.8.0-1055-aws](https://launchpad.net/ubuntu/+source/linux-signed-aws) –  [6.8.0-1055.58](https://launchpad.net/ubuntu/+source/linux-signed-aws/6.8.0-1055.58) | | | | [linux-image-6.8.0-1055-aws-64k](https://launchpad.net/ubuntu/+source/linux-signed-aws) –  [6.8.0-1055.58](https://launchpad.net/ubuntu/+source/linux-signed-aws/6.8.0-1055.58) | | | | [linux-image-6.8.0-1055-aws-fips](https://launchpad.net/ubuntu/+source/linux-signed-aws-fips) –  6.8.0-1055.58+fips1   FIPS Updates | | | | [linux-image-6.8.0-1055-ibm](https://launchpad.net/ubuntu/+source/linux-signed-ibm) –  [6.8.0-1055.56](https://launchpad.net/ubuntu/+source/linux-signed-ibm/6.8.0-1055.56) | | | | [linux-image-6.8.0-1056-raspi](https://launchpad.net/ubuntu/+source/linux-raspi) –  [6.8.0-1056.60](https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1056.60) | | | | [linux-image-6.8.0-1058-gcp](https://launchpad.net/ubuntu/+source/linux-signed-gcp) –  [6.8.0-1058.61](https://launchpad.net/ubuntu/+source/linux-signed-gcp/6.8.0-1058.61) | | | | [linux-image-6.8.0-1058-gcp-64k](https://launchpad.net/ubuntu/+source/linux-signed-gcp) –  [6.8.0-1058.61](https://launchpad.net/ubuntu/+source/linux-signed-gcp/6.8.0-1058.61) | | | | [linux-image-6.8.0-1058-gcp-fips](https://launchpad.net/ubuntu/+source/linux-signed-gcp-fips) –  6.8.0-1058.61+fips1   FIPS Updates | | | | [linux-image-6.8.0-117-generic](https://launchpad.net/ubuntu/+source/linux-signed) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-signed/6.8.0-117.117) | | | | [linux-image-6.8.0-117-generic-64k](https://launchpad.net/ubuntu/+source/linux-signed) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-signed/6.8.0-117.117) | | | | [linux-image-6.8.0-117-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency) –  [6.8.0-117.117.1](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency/6.8.0-117.117.1) | | | | [linux-image-6.8.0-117-lowlatency-64k](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency) –  [6.8.0-117.117.1](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency/6.8.0-117.117.1) | | | | [linux-image-6.8.0-2045-raspi-realtime](https://launchpad.net/ubuntu/+source/linux-raspi-realtime) –  6.8.0-2045.46   Real-time | | | | [linux-image-6.8.1-1051-realtime](https://launchpad.net/ubuntu/+source/linux-signed-realtime) –  6.8.1-1051.52   Real-time | | | | [linux-image-aws-6.8](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [6.8.0-1055.58](https://launchpad.net/ubuntu/+source/linux-meta-aws/6.8.0-1055.58) | | | | [linux-image-aws-64k-6.8](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [6.8.0-1055.58](https://launchpad.net/ubuntu/+source/linux-meta-aws/6.8.0-1055.58) | | | | [linux-image-aws-64k-lts-24.04](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [6.8.0-1055.58](https://launchpad.net/ubuntu/+source/linux-meta-aws/6.8.0-1055.58) | | | | [linux-image-aws-fips](https://launchpad.net/ubuntu/+source/linux-meta-aws-fips) –  6.8.0-1055.58+fips1   FIPS Updates | | | | [linux-image-aws-fips-6.8](https://launchpad.net/ubuntu/+source/linux-meta-aws-fips) –  6.8.0-1055.58+fips1   FIPS Updates | | | | [linux-image-aws-lts-24.04](https://launchpad.net/ubuntu/+source/linux-meta-aws) –  [6.8.0-1055.58](https://launchpad.net/ubuntu/+source/linux-meta-aws/6.8.0-1055.58) | | | | [linux-image-gcp-6.8](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [6.8.0-1058.61](https://launchpad.net/ubuntu/+source/linux-meta-gcp/6.8.0-1058.61) | | | | [linux-image-gcp-64k-6.8](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [6.8.0-1058.61](https://launchpad.net/ubuntu/+source/linux-meta-gcp/6.8.0-1058.61) | | | | [linux-image-gcp-64k-lts-24.04](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [6.8.0-1058.61](https://launchpad.net/ubuntu/+source/linux-meta-gcp/6.8.0-1058.61) | | | | [linux-image-gcp-fips](https://launchpad.net/ubuntu/+source/linux-meta-gcp-fips) –  6.8.0-1058.61+fips1   FIPS Updates | | | | [linux-image-gcp-fips-6.8](https://launchpad.net/ubuntu/+source/linux-meta-gcp-fips) –  6.8.0-1058.61+fips1   FIPS Updates | | | | [linux-image-gcp-lts-24.04](https://launchpad.net/ubuntu/+source/linux-meta-gcp) –  [6.8.0-1058.61](https://launchpad.net/ubuntu/+source/linux-meta-gcp/6.8.0-1058.61) | | | | [linux-image-generic](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-generic-6.8](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-generic-64k](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-generic-64k-6.8](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-generic-lpae](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-gke](https://launchpad.net/ubuntu/+source/linux-meta-gke) –  [6.8.0-1054.60](https://launchpad.net/ubuntu/+source/linux-meta-gke/6.8.0-1054.60) | | | | [linux-image-gke-6.8](https://launchpad.net/ubuntu/+source/linux-meta-gke) –  [6.8.0-1054.60](https://launchpad.net/ubuntu/+source/linux-meta-gke/6.8.0-1054.60) | | | | [linux-image-gke-64k](https://launchpad.net/ubuntu/+source/linux-meta-gke) –  [6.8.0-1054.60](https://launchpad.net/ubuntu/+source/linux-meta-gke/6.8.0-1054.60) | | | | [linux-image-gke-64k-6.8](https://launchpad.net/ubuntu/+source/linux-meta-gke) –  [6.8.0-1054.60](https://launchpad.net/ubuntu/+source/linux-meta-gke/6.8.0-1054.60) | | | | [linux-image-gkeop](https://launchpad.net/ubuntu/+source/linux-meta-gkeop) –  [6.8.0-1041.44](https://launchpad.net/ubuntu/+source/linux-meta-gkeop/6.8.0-1041.44) | | | | [linux-image-gkeop-6.8](https://launchpad.net/ubuntu/+source/linux-meta-gkeop) –  [6.8.0-1041.44](https://launchpad.net/ubuntu/+source/linux-meta-gkeop/6.8.0-1041.44) | | | | [linux-image-ibm](https://launchpad.net/ubuntu/+source/linux-meta-ibm) –  [6.8.0-1055.56](https://launchpad.net/ubuntu/+source/linux-meta-ibm/6.8.0-1055.56) | | | | [linux-image-ibm-6.8](https://launchpad.net/ubuntu/+source/linux-meta-ibm) –  [6.8.0-1055.56](https://launchpad.net/ubuntu/+source/linux-meta-ibm/6.8.0-1055.56) | | | | [linux-image-ibm-classic](https://launchpad.net/ubuntu/+source/linux-meta-ibm) –  [6.8.0-1055.56](https://launchpad.net/ubuntu/+source/linux-meta-ibm/6.8.0-1055.56) | | | | [linux-image-ibm-lts-24.04](https://launchpad.net/ubuntu/+source/linux-meta-ibm) –  [6.8.0-1055.56](https://launchpad.net/ubuntu/+source/linux-meta-ibm/6.8.0-1055.56) | | | | [linux-image-intel-iot-realtime](https://launchpad.net/ubuntu/+source/linux-meta-realtime) –  6.8.1-1051.52   Real-time | | | | [linux-image-intel-iotg](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-kvm](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-lowlatency](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency) –  [6.8.0-117.117.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency/6.8.0-117.117.1) | | | | [linux-image-lowlatency-6.8](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency) –  [6.8.0-117.117.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency/6.8.0-117.117.1) | | | | [linux-image-lowlatency-64k](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency) –  [6.8.0-117.117.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency/6.8.0-117.117.1) | | | | [linux-image-lowlatency-64k-6.8](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency) –  [6.8.0-117.117.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency/6.8.0-117.117.1) | | | | [linux-image-raspi](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [6.8.0-1056.60](https://launchpad.net/ubuntu/+source/linux-meta-raspi/6.8.0-1056.60) | | | | [linux-image-raspi-6.8](https://launchpad.net/ubuntu/+source/linux-meta-raspi) –  [6.8.0-1056.60](https://launchpad.net/ubuntu/+source/linux-meta-raspi/6.8.0-1056.60) | | | | [linux-image-raspi-realtime](https://launchpad.net/ubuntu/+source/linux-meta-raspi-realtime) –  6.8.0-2045.46   Real-time | | | | [linux-image-raspi-realtime-6.8](https://launchpad.net/ubuntu/+source/linux-meta-raspi-realtime) –  6.8.0-2045.46   Real-time | | | | [linux-image-realtime](https://launchpad.net/ubuntu/+source/linux-meta-realtime) –  6.8.1-1051.52   Real-time | | | | [linux-image-realtime-6.8.1](https://launchpad.net/ubuntu/+source/linux-meta-realtime) –  6.8.1-1051.52   Real-time | | | | [linux-image-virtual](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | [linux-image-virtual-6.8](https://launchpad.net/ubuntu/+source/linux-meta) –  [6.8.0-117.117](https://launchpad.net/ubuntu/+source/linux-meta/6.8.0-117.117) | | | | 22.04 LTS jammy | [linux-image-6.8.0-1055-ibm](https://launchpad.net/ubuntu/+source/linux-signed-ibm-6.8) –  [6.8.0-1055.56~22.04.1](https://launchpad.net/ubuntu/+source/linux-signed-ibm-6.8/6.8.0-1055.56~22.04.1) | | | | [linux-image-6.8.0-117-lowlatency](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency-hwe-6.8) –  [6.8.0-117.117.1~22.04.1](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency-hwe-6.8/6.8.0-117.117.1~22.04.1) | | | | [linux-image-6.8.0-117-lowlatency-64k](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency-hwe-6.8) –  [6.8.0-117.117.1~22.04.1](https://launchpad.net/ubuntu/+source/linux-signed-lowlatency-hwe-6.8/6.8.0-117.117.1~22.04.1) | | | | [linux-image-6.8.1-1051-realtime](https://launchpad.net/ubuntu/+source/linux-signed-realtime-6.8) –  6.8.1-1051.52~22.04.1   Real-time | | | | [linux-image-ibm-6.8](https://launchpad.net/ubuntu/+source/linux-meta-ibm-6.8) –  [6.8.0-1055.56~22.04.1](https://launchpad.net/ubuntu/+source/linux-meta-ibm-6.8/6.8.0-1055.56~22.04.1) | | | | [linux-image-lowlatency-6.8](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8) –  [6.8.0-117.117.1~22.04.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8/6.8.0-117.117.1~22.04.1) | | | | [linux-image-lowlatency-64k-6.8](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8) –  [6.8.0-117.117.1~22.04.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8/6.8.0-117.117.1~22.04.1) | | | | [linux-image-lowlatency-64k-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8) –  [6.8.0-117.117.1~22.04.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8/6.8.0-117.117.1~22.04.1) | | | | [linux-image-lowlatency-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8) –  [6.8.0-117.117.1~22.04.1](https://launchpad.net/ubuntu/+source/linux-meta-lowlatency-hwe-6.8/6.8.0-117.117.1~22.04.1) | | | | [linux-image-realtime-6.8.1](https://launchpad.net/ubuntu/+source/linux-meta-realtime-6.8) –  6.8.1-1051.52~22.04.1   Real-time | | | | [linux-image-realtime-hwe-22.04](https://launchpad.net/ubuntu/+source/linux-meta-realtime-6.8) –  6.8.1-1051.52~22.04.1   Real-time | | | --- ### Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. [Get Ubuntu Pro](https://ubuntu.com/pro) ## References *Search* * [CVE-2026-43078](https://ubuntu.com/security/CVE-2026-43078) * [CVE-2026-43077](https://ubuntu.com/security/CVE-2026-43077) * [CVE-2026-43033](https://ubuntu.com/security/CVE-2026-43033) * [CVE-2026-31533](https://ubuntu.com/security/CVE-2026-31533) * [CVE-2026-31504](https://ubuntu.com/security/CVE-2026-31504) * [CVE-2026-31431](https://ubuntu.com/security/CVE-2026-31431) * [CVE-2026-31419](https://ubuntu.com/security/CVE-2026-31419) * [CVE-2026-23394](https://ubuntu.com/security/CVE-2026-23394) * [CVE-2026-23351](https://ubuntu.com/security/CVE-2026-23351) * [CVE-2026-23274](https://ubuntu.com/security/CVE-2026-23274) --- Show 186 more references ## Related notices id="usn" *Search* * [USN-8669-1](https://ubuntu.com/security/notices/USN-8669-1) * [USN-8668-1](https://ubuntu.com/security/notices/USN-8668-1) * [USN-8668-2](https://ubuntu.com/security/notices/USN-8668-2) * [USN-8620-1](https://ubuntu.com/security/notices/USN-8620-1) * [USN-8620-2](https://ubuntu.com/security/notices/USN-8620-2) * [USN-8620-3](https://ubuntu.com/security/notices/USN-8620-3) * [USN-8620-4](https://ubuntu.com/security/notices/USN-8620-4) * [USN-8610-1](https://ubuntu.com/security/notices/USN-8610-1) * [USN-8605-1](https://ubuntu.com/security/notices/USN-8605-1) * [USN-8604-1](https://ubuntu.com/security/notices/USN-8604-1) --- Show 119 more references --- Have additional questions? [Talk to a member of the team ›](https://wiki.ubuntu.com/SecurityTeam/FAQ?_ga=2.242131138.1744859116.1742138161-1500419473.1726851136&_gl=1*161muja*_gcl_au*MzUyMTIzNjI1LjE3MzYyNDQ4NTE.#Contact)