Ubuntu releases kernel security updates for NVIDIA BlueField platforms

Ubuntu has issued a security notice (USN-8965-1) addressing several vulnerabilities within the Linux kernel specifically tailored for NVIDIA BlueField platforms. These flaws affect the 20.04 LTS release and could potentially allow an attacker to compromise the target system.

The update targets the linux-bluefield package, specifically the 5.4.0-1125 kernel series. Due to an unavoidable Application Binary Interface (ABI) change, users must recompile and reinstall any third-party kernel modules after applying the update to ensure system stability.

Vulnerability details and subsystem impact

• Affected Subsystems: The security fixes cover a wide range of critical components including the io_uring subsystem, networking core, Ethernet bonding driver, and the SCSI subsystem.
• File System and Network Protocols: Vulnerabilities were identified in the F2FS file system, the Network File System (NFS) client, and RxRPC session sockets.
• Driver and Infrastructure Fixes: The update addresses flaws in the IUCV driver, various network drivers, and the kernel's tracing infrastructure.
• ABI Change Requirement: The kernel update involves a version change that necessitates the recompilation of all non-standard, third-party kernel modules.
• CVE Coverage: The release addresses 11 identified CVEs, including CVE-2026-52910, CVE-2026-43456, and CVE-2025-39730.

Why it matters

This update is critical for administrators managing NVIDIA BlueField DPU-based infrastructure, as it secures core networking and storage paths. The ABI change introduces operational overhead, requiring careful management of custom drivers to prevent system breakage during the update process.