Ubuntu releases security updates for Linux kernel across multiple LTS and cloud versions

Ubuntu has published security notice USN-8959-1 to address several discovered vulnerabilities within the Linux kernel. These flaws could potentially allow an attacker to compromise the integrity or security of a running system. The update covers a massive scope of the kernel, ranging from core memory management to specific hardware drivers.

The patches are being rolled out to several major Ubuntu release tracks, including the 24.04 LTS and 26.04 LTS series. Additionally, specialized kernel packages for cloud environments—such as those used in Amazon Web Services (AWS), Google Cloud Platform (GCP), IBM Cloud, and Oracle Cloud—are included in this security update to ensure infrastructure stability.

Scope of kernel subsystem and architecture fixes

• Architecture Support: The security fixes impact a wide range of instruction sets, including x86, ARM64, ARM32, RISC-V, MIPS, PowerPC, M68K, OpenRISC, PA-RISC, and S390.
• Subsystem Coverage: Vulnerabilities were addressed in critical areas such as memory management, the networking core, eXpress Data Path (XDP), the block layer, and the cryptographic API.
• Storage and File Systems: The update corrects flaws in various file systems including Ext4, BTRFS, F2FS, exFAT, NTFS3, and SquashFS, as well as NVMe and SCSI subsystems.
• Hardware and Driver Security: Fixes extend to diverse drivers including Intel NPU, AMD CDX bus, USB Gadget, Bluetooth, Thunderbolt/USB4, and various SoC-specific firmware drivers for Google and Qualcomm.
• Virtualization and Cloud: Security improvements target Microsoft Hyper-V drivers, Amazon Nitro Secure Module, Xen hypervisor drivers, and Virtio subsystems.

Why it matters

This update is vital for system administrators and cloud engineers managing Ubuntu-based infrastructure, as it mitigates risks across diverse hardware and virtualized environments. For Linux desktop users and developers, the broad coverage of file systems and architecture-specific fixes ensures stability and security across various hardware platforms, including RISC-V and ARM.