Home / mailings [USN-8903-1] Linux kernel vulnerabilities
Posted on 08 October 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-8903-1
October 08, 2026
linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-fips,
linux-realtime, linux-realtime-6.8 vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux: Linux kernel
- linux-aws: Linux kernel for Amazon Web Services (AWS) systems
- linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS
- linux-fips: Linux kernel with FIPS
- linux-realtime: Linux kernel for Real-time systems
- linux-aws-6.8: Linux kernel for Amazon Web Services (AWS) systems
- linux-realtime-6.8: Linux kernel for Real-time systems
Details:
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- x86 architecture;
- Intel NPU Driver;
- Auxiliary display drivers;
- Compressed RAM block device driver;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra SoC drivers;
- SPI subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB Device Class drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- Framebuffer layer;
- Ext4 file system;
- FUSE (File system in Userspace);
- File systems infrastructure;
- SMB network file system;
- Mellanox drivers;
- Network traffic control;
- Bluetooth subsystem;
- IPv4 networking;
- Netfilter;
- IPv6 networking;
- Network sockets;
- XFRM subsystem;
- IPC subsystem;
- Signal handling mechanism;
- Memory management;
- 6LoWPAN network protocol;
- IEEE 802 network protocols;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Networking core;
- Devlink API;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IEEE802154.4 network protocol;
- IUCV driver;
- L2TP protocol;
- MAC80211 subsystem;
- Management Component Transport Protocol (MCTP);
- Multipath TCP;
- NetLabel subsystem;
- NFC subsystem;
- Open vSwitch;
- Qualcomm IPC Router (QRTR);
- RDS protocol;
- RxRPC session sockets;
- SCTP protocol;
- SMC sockets;
- VMware vSockets driver;
- Wireless networking;
- ALSA framework;
- Simple audio multiplexer codec driver;
- Wolfson Microelectronics audio codecs;
- KVM subsystem;
(CVE-2025-68296, CVE-2025-68768, CVE-2026-23346, CVE-2026-31663,
CVE-2026-43116, CVE-2026-43219, CVE-2026-43240, CVE-2026-43303,
CVE-2026-43311, CVE-2026-43331, CVE-2026-45850, CVE-2026-45930,
CVE-2026-46203, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322,
CVE-2026-52908, CVE-2026-52910, CVE-2026-52913, CVE-2026-52917,
CVE-2026-52923, CVE-2026-52927, CVE-2026-52929, CVE-2026-52930,
CVE-2026-52934, CVE-2026-52935, CVE-2026-52939, CVE-2026-52942,
CVE-2026-52943, CVE-2026-52944, CVE-2026-52947, CVE-2026-52948,
CVE-2026-53080, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,
CVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,
CVE-2026-53140, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,
CVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,
CVE-2026-53154, CVE-2026-53156, CVE-2026-53158, CVE-2026-53159,
CVE-2026-53160, CVE-2026-53161, CVE-2026-53168, CVE-2026-53177,
CVE-2026-53181, CVE-2026-53182, CVE-2026-53183, CVE-2026-53184,
CVE-2026-53185, CVE-2026-53190, CVE-2026-53194, CVE-2026-53195,
CVE-2026-53196, CVE-2026-53198, CVE-2026-53199, CVE-2026-53202,
CVE-2026-53205, CVE-2026-53208, CVE-2026-53209, CVE-2026-53210,
CVE-2026-53213, CVE-2026-53214, CVE-2026-53217, CVE-2026-53218,
CVE-2026-53219, CVE-2026-53220, CVE-2026-53223, CVE-2026-53227,
CVE-2026-53229, CVE-2026-53230, CVE-2026-53232, CVE-2026-53236,
CVE-2026-53237, CVE-2026-53238, CVE-2026-53239, CVE-2026-53242,
CVE-2026-53245, CVE-2026-53249, CVE-2026-53251, CVE-2026-53252,
CVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,
CVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,
CVE-2026-53265, CVE-2026-53266, CVE-2026-53267, CVE-2026-53268,
CVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53274,
CVE-2026-53275, CVE-2026-53329, CVE-2026-53331, CVE-2026-53332,
CVE-2026-53336, CVE-2026-53337, CVE-2026-53339, CVE-2026-53343,
CVE-2026-53345, CVE-2026-53347, CVE-2026-53349, CVE-2026-53350,
CVE-2026-53352, CVE-2026-53353, CVE-2026-53356, CVE-2026-53358,
CVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,
CVE-2026-63871, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,
CVE-2026-63881, CVE-2026-63882, CVE-2026-63883, CVE-2026-63884,
CVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,
CVE-2026-63893, CVE-2026-63895, CVE-2026-63896, CVE-2026-63897,
CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,
CVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,
CVE-2026-63906, CVE-2026-63908, CVE-2026-63909, CVE-2026-63913,
CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917,
CVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63925,
CVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63930,
CVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942,
CVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,
CVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63952,
CVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,
CVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63964,
CVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63971,
CVE-2026-63973, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976,
CVE-2026-63980, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,
CVE-2026-64001, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004,
CVE-2026-64005, CVE-2026-64006, CVE-2026-64009, CVE-2026-64010,
CVE-2026-64011, CVE-2026-64012, CVE-2026-64014, CVE-2026-64026,
CVE-2026-64090, CVE-2026-64093, CVE-2026-64094, CVE-2026-64095,
CVE-2026-64099, CVE-2026-64123, CVE-2026-64131, CVE-2026-64222,
CVE-2026-64233, CVE-2026-64234, CVE-2026-64237, CVE-2026-64239,
CVE-2026-64240, CVE-2026-64242, CVE-2026-64243, CVE-2026-64524,
CVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-92502)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
linux-image-6.8.0-1066-aws 6.8.0-1066.69
linux-image-6.8.0-1066-aws-64k 6.8.0-1066.69
linux-image-6.8.0-1066-aws-fips 6.8.0-1066.69+fips1
Available with Ubuntu Pro
linux-image-6.8.0-146-fips 6.8.0-146.146+fips1
Available with Ubuntu Pro
linux-image-6.8.0-146-generic 6.8.0-146.146
linux-image-6.8.0-146-generic-64k 6.8.0-146.146
linux-image-6.8.1-1061-realtime 6.8.1-1061.62
Available with Ubuntu Pro
linux-image-aws-6.8 6.8.0-1066.69
linux-image-aws-64k-6.8 6.8.0-1066.69
linux-image-aws-64k-lts-24.04 6.8.0-1066.69
linux-image-aws-fips 6.8.0-1066.69+fips1
Available with Ubuntu Pro
linux-image-aws-fips-6.8 6.8.0-1066.69+fips1
Available with Ubuntu Pro
linux-image-aws-lts-24.04 6.8.0-1066.69
linux-image-fips 6.8.0-146.146+fips1
Available with Ubuntu Pro
linux-image-fips-6.8 6.8.0-146.146+fips1
Available with Ubuntu Pro
linux-image-generic 6.8.0-146.146
linux-image-generic-6.8 6.8.0-146.146
linux-image-generic-64k 6.8.0-146.146
linux-image-generic-64k-6.8 6.8.0-146.146
linux-image-generic-lpae 6.8.0-146.146
linux-image-intel-iot-realtime 6.8.1-1061.62
Available with Ubuntu Pro
linux-image-intel-iotg 6.8.0-146.146
linux-image-kvm 6.8.0-146.146
linux-image-laptop-23.10 6.8.0-146.146
linux-image-realtime 6.8.1-1061.62
Available with Ubuntu Pro
linux-image-realtime-6.8.1 6.8.1-1061.62
Available with Ubuntu Pro
linux-image-virtual 6.8.0-146.146
linux-image-virtual-6.8 6.8.0-146.146
Ubuntu 22.04 LTS
linux-image-6.8.0-1066-aws 6.8.0-1066.69~22.04.1
linux-image-6.8.0-1066-aws-64k 6.8.0-1066.69~22.04.1
linux-image-6.8.1-1061-realtime 6.8.1-1061.62~22.04.1
Available with Ubuntu Pro
linux-image-aws 6.8.0-1066.69~22.04.1
linux-image-aws-6.8 6.8.0-1066.69~22.04.1
linux-image-aws-64k 6.8.0-1066.69~22.04.1
linux-image-aws-64k-6.8 6.8.0-1066.69~22.04.1
linux-image-realtime-6.8.1 6.8.1-1061.62~22.04.1
Available with Ubuntu Pro
linux-image-realtime-hwe-22.04 6.8.1-1061.62~22.04.1
Available with Ubuntu Pro
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8903-1
CVE-2025-68296, CVE-2025-68768, CVE-2026-23346, CVE-2026-31663,
CVE-2026-43116, CVE-2026-43219, CVE-2026-43240, CVE-2026-43303,
CVE-2026-43311, CVE-2026-43331, CVE-2026-45850, CVE-2026-45930,
CVE-2026-46203, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322,
CVE-2026-52908, CVE-2026-52910, CVE-2026-52913, CVE-2026-52917,
CVE-2026-52923, CVE-2026-52927, CVE-2026-52929, CVE-2026-52930,
CVE-2026-52934, CVE-2026-52935, CVE-2026-52939, CVE-2026-52942,
CVE-2026-52943, CVE-2026-52944, CVE-2026-52947, CVE-2026-52948,
CVE-2026-53080, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,
CVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,
CVE-2026-53140, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,
CVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,
CVE-2026-53154, CVE-2026-53156, CVE-2026-53158, CVE-2026-53159,
CVE-2026-53160, CVE-2026-53161, CVE-2026-53168, CVE-2026-53177,
CVE-2026-53181, CVE-2026-53182, CVE-2026-53183, CVE-2026-53184,
CVE-2026-53185, CVE-2026-53190, CVE-2026-53194, CVE-2026-53195,
CVE-2026-53196, CVE-2026-53198, CVE-2026-53199, CVE-2026-53202,
CVE-2026-53205, CVE-2026-53208, CVE-2026-53209, CVE-2026-53210,
CVE-2026-53213, CVE-2026-53214, CVE-2026-53217, CVE-2026-53218,
CVE-2026-53219, CVE-2026-53220, CVE-2026-53223, CVE-2026-53227,
CVE-2026-53229, CVE-2026-53230, CVE-2026-53232, CVE-2026-53236,
CVE-2026-53237, CVE-2026-53238, CVE-2026-53239, CVE-2026-53242,
CVE-2026-53245, CVE-2026-53249, CVE-2026-53251, CVE-2026-53252,
CVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,
CVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,
CVE-2026-53265, CVE-2026-53266, CVE-2026-53267, CVE-2026-53268,
CVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53274,
CVE-2026-53275, CVE-2026-53329, CVE-2026-53331, CVE-2026-53332,
CVE-2026-53336, CVE-2026-53337, CVE-2026-53339, CVE-2026-53343,
CVE-2026-53345, CVE-2026-53347, CVE-2026-53349, CVE-2026-53350,
CVE-2026-53352, CVE-2026-53353, CVE-2026-53356, CVE-2026-53358,
CVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,
CVE-2026-63871, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,
CVE-2026-63881, CVE-2026-63882, CVE-2026-63883, CVE-2026-63884,
CVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,
CVE-2026-63893, CVE-2026-63895, CVE-2026-63896, CVE-2026-63897,
CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,
CVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,
CVE-2026-63906, CVE-2026-63908, CVE-2026-63909, CVE-2026-63913,
CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917,
CVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63925,
CVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63930,
CVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942,
CVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,
CVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63952,
CVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,
CVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63964,
CVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63971,
CVE-2026-63973, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976,
CVE-2026-63980, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,
CVE-2026-64001, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004,
CVE-2026-64005, CVE-2026-64006, CVE-2026-64009, CVE-2026-64010,
CVE-2026-64011, CVE-2026-64012, CVE-2026-64014, CVE-2026-64026,
CVE-2026-64090, CVE-2026-64093, CVE-2026-64094, CVE-2026-64095,
CVE-2026-64099, CVE-2026-64123, CVE-2026-64131, CVE-2026-64222,
CVE-2026-64233, CVE-2026-64234, CVE-2026-64237, CVE-2026-64239,
CVE-2026-64240, CVE-2026-64242, CVE-2026-64243, CVE-2026-64524,
CVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-92502
Package Information:
https://launchpad.net/ubuntu/+source/linux/6.8.0-146.146
https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1066.69
https://launchpad.net/ubuntu/+source/linux-aws-fips/6.8.0-1066.69+fips1
https://launchpad.net/ubuntu/+source/linux-fips/6.8.0-146.146+fips1
https://launchpad.net/ubuntu/+source/linux-realtime/6.8.1-1061.62
https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-1066.69~22.04.1
https://launchpad.net/ubuntu/+source/linux-realtime-6.8/6.8.1-1061.62~22.04.1
--===============7899056765089836978==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
