USN-8289-1

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Cryptographic API; - Compute Acceleration Framework; - Drivers core; - Null block device driver; - Ublk userspace block driver; - Bluetooth drivers; - Counter interface drivers; - DMA engine subsystem; - DPLL subsystem; - GPU drivers; - HID subsystem; - Intel Trace Hub HW tracing drivers; - IIO ADC drivers; - IIO subsystem; - On-Chip Interconnect management framework; - IRQ chip drivers; - Modular ISDN driver; - LED subsystem; - Multiple devices driver; - UACCE accelerator framework; - MMC subsystem; - Ethernet bonding driver; - Network drivers; - Mellanox network drivers; - NVME drivers; - PHY drivers; - x86 platform drivers; - i.MX PM domains; - SCSI subsystem; - SLIMbus drivers; - SPI subsystem; - TCM subsystem; - W1 Dallas's 1-wire bus driver; - Xen hypervisor drivers; - BTRFS file system; - EFI Variable file system; - exFAT file system; - Ext4 file system; - HFS+ file system; - Network file system (NFS) client; - Network file system (NFS) server daemon; - NTFS3 file system; - SMB network file system; - Scheduler infrastructure; - Netfilter; - NFC subsystem; - Tracing infrastructure; - io_uring subsystem; - BPF subsystem; - Perf events; - Floating proportions library; - Memory management; - Bluetooth subsystem; - CAN network layer; - Ceph Core library; - Networking core; - IPv4 networking; - IPv6 networking; - L2TP protocol; - MAC80211 subsystem; - NET/ROM layer; - Packet sockets; - Network traffic control; - SCTP protocol; - TLS protocol; - Unix domain sockets; - VMware vSockets driver; - Wireless networking; - ALSA AC97 driver; - Generic PCM loopback sound driver; - Creative Sound Blaster X-Fi driver; - AMD SoC Alsa drivers; - Texas InstrumentS Audio (ASoC/HDA) drivers; - USB sound devices; - KVM subsystem; (CVE-2024-50004, CVE-2024-58096, CVE-2024-58097, CVE-2025-37926, CVE-2025-38201, CVE-2025-38591, CVE-2025-40039, CVE-2025-40082, CVE-2025-40149, CVE-2025-68351, CVE-2025-68358, CVE-2025-68365, CVE-2025-68725, CVE-2025-68749, CVE-2025-68803, CVE-2025-68823, CVE-2025-71160, CVE-2025-71162, CVE-2025-71163, CVE-2025-71180, CVE-2025-71182, CVE-2025-71183, CVE-2025-71184, CVE-2025-71185, CVE-2025-71186, CVE-2025-71188, CVE-2025-71189, CVE-2025-71190, CVE-2025-71191, CVE-2025-71192, CVE-2025-71193, CVE-2025-71194, CVE-2025-71195, CVE-2025-71196, CVE-2025-71197, CVE-2025-71198, CVE-2025-71199, CVE-2025-71200, CVE-2025-71220, CVE-2025-71222, CVE-2025-71224, CVE-2025-71225, CVE-2025-71268, CVE-2026-22976, CVE-2026-22977, CVE-2026-22978, CVE-2026-22979, CVE-2026-22980, CVE-2026-22982, CVE-2026-22984, CVE-2026-22990, CVE-2026-22991, CVE-2026-22992, CVE-2026-22994, CVE-2026-22996, CVE-2026-22997, CVE-2026-22998, CVE-2026-22999, CVE-2026-23000, CVE-2026-23001, CVE-2026-23003, CVE-2026-23005, CVE-2026-23006, CVE-2026-23010, CVE-2026-23011, CVE-2026-23019, CVE-2026-23020, CVE-2026-23021, CVE-2026-23025, CVE-2026-23026, CVE-2026-23030, CVE-2026-23031, CVE-2026-23032, CVE-2026-23033, CVE-2026-23035, CVE-2026-23037, CVE-2026-23038, CVE-2026-23047, CVE-2026-23049, CVE-2026-23050, CVE-2026-23053, CVE-2026-23054, CVE-2026-23056, CVE-2026-23057, CVE-2026-23058, CVE-2026-23059, CVE-2026-23061, CVE-2026-23062, CVE-2026-23063, CVE-2026-23064, CVE-2026-23065, CVE-2026-23068, CVE-2026-23069, CVE-2026-23071, CVE-2026-23073, CVE-2026-23075, CVE-2026-23076, CVE-2026-23078, CVE-2026-23080, CVE-2026-23083, CVE-2026-23084, CVE-2026-23085, CVE-2026-23086, CVE-2026-23087, CVE-2026-23088, CVE-2026-23089, CVE-2026-23090, CVE-2026-23091, CVE-2026-23093, CVE-2026-23094, CVE-2026-23095, CVE-2026-23096, CVE-2026-23097, CVE-2026-23098, CVE-2026-23099, CVE-2026-23101, CVE-2026-23102, CVE-2026-23103, CVE-2026-23105, CVE-2026-23107, CVE-2026-23108, CVE-2026-23110, CVE-2026-23113, CVE-2026-23116, CVE-2026-23119, CVE-2026-23120, CVE-2026-23121, CVE-2026-23123, CVE-2026-23124, CVE-2026-23125, CVE-2026-23126, CVE-2026-23128, CVE-2026-23129, CVE-2026-23131, CVE-2026-23133, CVE-2026-23135, CVE-2026-23136, CVE-2026-23139, CVE-2026-23140, CVE-2026-23141, CVE-2026-23142, CVE-2026-23144, CVE-2026-23145, CVE-2026-23146, CVE-2026-23148, CVE-2026-23150, CVE-2026-23151, CVE-2026-23156, CVE-2026-23159, CVE-2026-23160, CVE-2026-23163, CVE-2026-23164, CVE-2026-23166, CVE-2026-23167, CVE-2026-23168, CVE-2026-23170, CVE-2026-23172, CVE-2026-23173, CVE-2026-23176, CVE-2026-23178, CVE-2026-23179, CVE-2026-23180, CVE-2026-23182, CVE-2026-23187, CVE-2026-23190, CVE-2026-23191, CVE-2026-23193, CVE-2026-23198, CVE-2026-23200, CVE-2026-23204, CVE-2026-23205, CVE-2026-23206, CVE-2026-23212, CVE-2026-23213, CVE-2026-23214, CVE-2026-23215, CVE-2026-23216, CVE-2026-23254, CVE-2026-23256, CVE-2026-23257, CVE-2026-23258, CVE-2026-23260, CVE-2026-23261, CVE-2026-23262, CVE-2026-23264, CVE-2026-23274, CVE-2026-23351, CVE-2026-23394, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)

References

https://ubuntu.com/security/notices/USN-8289-1

Affected packages

Ubuntu:24.04:LTS / linux-nvidia

Package

Name: linux-nvidia
Purl: pkg:deb/ubuntu/linux-nvidia?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1054.57

Affected versions

6.*

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1022.25

6.8.0-1023.26

6.8.0-1024.27

6.8.0-1025.28

6.8.0-1026.29

6.8.0-1027.30

6.8.0-1028.31

6.8.0-1029.32

6.8.0-1030.33

6.8.0-1031.34

6.8.0-1032.35

6.8.0-1035.38

6.8.0-1036.39

6.8.0-1038.41

6.8.0-1039.42

6.8.0-1040.43

6.8.0-1041.44

6.8.0-1042.45

6.8.0-1043.46

6.8.0-1044.47

6.8.0-1045.48

6.8.0-1046.49

6.8.0-1047.50

6.8.0-1049.52

6.8.0-1050.53

6.8.0-1051.54

6.8.0-1052.55

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-buildinfo-6.8.0-1054-nvidia"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-buildinfo-6.8.0-1054-nvidia-64k"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-headers-6.8.0-1054-nvidia"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-headers-6.8.0-1054-nvidia-64k"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-image-unsigned-6.8.0-1054-nvidia"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-image-unsigned-6.8.0-1054-nvidia-64k"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-modules-6.8.0-1054-nvidia"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-modules-6.8.0-1054-nvidia-64k"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1054-nvidia"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1054-nvidia-64k"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-nvidia-headers-6.8.0-1054"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-nvidia-tools-6.8.0-1054"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-tools-6.8.0-1054-nvidia"
        },
        {
            "binary_version": "6.8.0-1054.57",
            "binary_name": "linux-tools-6.8.0-1054-nvidia-64k"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:24.04:LTS",
    "cves": []
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8289-1.json"

Ubuntu:24.04:LTS / linux-nvidia-lowlatency

Package

Name: linux-nvidia-lowlatency
Purl: pkg:deb/ubuntu/linux-nvidia-lowlatency?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1054.57.1

Affected versions

6.*

6.8.0-1009.9.1

6.8.0-1011.11.1

6.8.0-1012.12.1

6.8.0-1013.14.1

6.8.0-1014.15.1

6.8.0-1015.16.1

6.8.0-1017.19.1

6.8.0-1018.20.1

6.8.0-1019.21.1

6.8.0-1020.22.1

6.8.0-1021.23.1

6.8.0-1022.25.2

6.8.0-1023.26.1

6.8.0-1024.27.1

6.8.0-1025.28.1

6.8.0-1026.29.1

6.8.0-1027.30.1

6.8.0-1028.31.1

6.8.0-1029.32.1

6.8.0-1030.33.1

6.8.0-1031.34.1

6.8.0-1032.35.1

6.8.0-1035.38.1

6.8.0-1036.39.1

6.8.0-1038.41.1

6.8.0-1039.42.1

6.8.0-1040.43.1

6.8.0-1041.44.1

6.8.0-1042.45.1

6.8.0-1043.46.1

6.8.0-1044.47.1

6.8.0-1045.48.1

6.8.0-1046.49.1

6.8.0-1047.50.1

6.8.0-1049.52.1

6.8.0-1050.53.1

6.8.0-1051.54.1

6.8.0-1052.55.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-buildinfo-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-buildinfo-6.8.0-1054-nvidia-lowlatency-64k"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-headers-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-headers-6.8.0-1054-nvidia-lowlatency-64k"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-image-unsigned-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-image-unsigned-6.8.0-1054-nvidia-lowlatency-64k"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-modules-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-modules-6.8.0-1054-nvidia-lowlatency-64k"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-modules-extra-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1054-nvidia-lowlatency-64k"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-nvidia-lowlatency-headers-6.8.0-1054"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-nvidia-lowlatency-tools-6.8.0-1054"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-tools-6.8.0-1054-nvidia-lowlatency"
        },
        {
            "binary_version": "6.8.0-1054.57.1",
            "binary_name": "linux-tools-6.8.0-1054-nvidia-lowlatency-64k"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:24.04:LTS",
    "cves": []
}

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8289-1.json"