Ubuntu 24.04 LTS patches NVIDIA Tegra kernel with io_uring fix, 100+ subsystem updates

Canonical has published USN-9002-1, a security update for the Linux kernel package targeting NVIDIA Tegra systems on Ubuntu 24.04 LTS (Noble). The update upgrades the linux-image-nvidia-tegra family to version 6.8.0-1038.42, addressing a specific denial-of-service vulnerability in the io_uring subsystem where canceled task work could execute in the wrong task context during certain wait operations. Beyond the publicly detailed CVE-2026-81010, the notice indicates additional undisclosed security issues that could lead to system compromise, with corrective patches applied across more than one hundred kernel subsystems.

The update carries an unavoidable ABI change, meaning all third-party kernel modules must be recompiled and reinstalled after the standard system update and reboot. Affected package variants include both standard and real-time kernel images for the NVIDIA Tegra platform. Users who have not manually removed standard kernel metapackages will receive the update automatically through normal system upgrades.

Kernel subsystems and ABI changes in USN-9002-1

• io_uring vulnerability (CVE-2026-81010): The subsystem failed to properly handle canceled task work during specific wait operations, causing execution in an incorrect task context that a local attacker could exploit to trigger a system crash.
• Architecture coverage: Patches apply to ARM32, ARM64, MIPS, OpenRISC, PowerPC, RISC-V, S390, and x86 architectures, indicating a broad upstream kernel sync rather than Tegra-specific changes alone.
• Driver and subsystem scope: The update touches NVIDIA Tegra SoC drivers, GPU drivers, Intel NPU Driver, CXL drivers, NVMe, Thunderbolt/USB4, multiple network drivers including Microsoft MANA and MediaTek, and the KVM virtualization subsystem.
• Networking and security modules: Corrections extend to Netfilter, BPF, MAC80211, Open vSwitch, AppArmor, Landlock, and the SMAcK framework, covering packet filtering, wireless, virtualization networking, and mandatory access control.
• ABI break and packaging: The kernel update introduces an unavoidable ABI change requiring recompilation of all out-of-tree modules; package versions move to 6.8.0-1038.42+2 for image packages and 6.8.0-1038.42 for metapackages.

Why it matters

For Ubuntu 24.04 LTS users on NVIDIA Tegra hardware, including embedded and edge devices, this update closes a locally exploitable denial-of-service path in io_uring while bringing a substantial cross-subsystem security refresh. The mandatory ABI change will affect organizations running custom kernel modules or vendor-supplied drivers, requiring rebuilds before systems can safely resume operation. The breadth of patched subsystems suggests this release incorporates a significant upstream stable kernel merge, improving security posture across storage, networking, and virtualization stacks for Tegra-based deployments.