USN-8904-1: Linux kernel (Azure) vulnerabilities

Publication date

8 October 2026

Overview

Several security issues were fixed in the Linux kernel.


Packages

Details

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • x86 architecture;
  • Intel NPU Driver;
  • Auxiliary display drivers;
  • Compressed RAM block device driver;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport...

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

  • ARM32 architecture;
  • ARM64 architecture;
  • MIPS architecture;
  • x86 architecture;
  • Intel NPU Driver;
  • Auxiliary display drivers;
  • Compressed RAM block device driver;
  • GPIO subsystem;
  • GPU drivers;
  • HID subsystem;
  • I2C subsystem;
  • IIO subsystem;
  • InfiniBand drivers;
  • Input Device core drivers;
  • Input Device (Mouse) drivers;
  • Multiple devices driver;
  • Media drivers;
  • Fastrpc Driver;
  • Ethernet bonding driver;
  • Network drivers;
  • Mellanox network drivers;
  • Microsoft Azure Network Adapter (MANA) driver;
  • Texas Instruments network drivers;
  • NVMEM (Non Volatile Memory) drivers;
  • Parport drivers;
  • SCSI subsystem;
  • SLIMbus drivers;
  • NVIDIA Tegra SoC drivers;
  • SPI subsystem;
  • Trusted Execution Environment drivers;
  • Thunderbolt and USB4 drivers;
  • TTY drivers;
  • USB Device Class drivers;
  • DesignWare USB2 driver;
  • USB Gadget drivers;
  • USB Dual Role (OTG-ready) Controller drivers;
  • USB Serial drivers;
  • USB Type-C support driver;
  • USB Type-C Port Controller Manager driver;
  • USB Type-C Connector System Software Interface driver;
  • USB over IP driver;
  • Framebuffer layer;
  • Ext4 file system;
  • FUSE (File system in Userspace);
  • File systems infrastructure;
  • SMB network file system;
  • Mellanox drivers;
  • Network traffic control;
  • Bluetooth subsystem;
  • IPv4 networking;
  • Netfilter;
  • IPv6 networking;
  • Network sockets;
  • XFRM subsystem;
  • IPC subsystem;
  • Signal handling mechanism;
  • Memory management;
  • 6LoWPAN network protocol;
  • IEEE 802 network protocols;
  • B.A.T.M.A.N. meshing protocol;
  • Ethernet bridge;
  • Networking core;
  • Devlink API;
  • Ethtool driver;
  • Handshake API;
  • HSR network protocol;
  • IEEE802154.4 network protocol;
  • IUCV driver;
  • L2TP protocol;
  • MAC80211 subsystem;
  • Management Component Transport Protocol (MCTP);
  • Multipath TCP;
  • NetLabel subsystem;
  • NFC subsystem;
  • Open vSwitch;
  • Qualcomm IPC Router (QRTR);
  • RDS protocol;
  • RxRPC session sockets;
  • SCTP protocol;
  • SMC sockets;
  • VMware vSockets driver;
  • Wireless networking;
  • ALSA framework;
  • Simple audio multiplexer codec driver;
  • Wolfson Microelectronics audio codecs;
  • KVM subsystem


Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release Package Version
24.04 LTS noble linux-image-6.8.0-1068-azure-fde –  6.8.0-1068.75
linux-image-6.8.0-1069-azure-fips –  6.8.0-1069.77+fips1  
linux-image-6.8.0-1070-azure –  6.8.0-1070.78
linux-image-azure-6.8 –  6.8.0-1070.78
linux-image-azure-fde-6.8 –  6.8.0-1068.75
linux-image-azure-fde-lts-24.04 –  6.8.0-1068.75
linux-image-azure-fips –  6.8.0-1069.77+fips1  
linux-image-azure-fips-6.8 –  6.8.0-1069.77+fips1  
linux-image-azure-lts-24.04 –  6.8.0-1070.78
22.04 LTS jammy linux-image-6.8.0-1068-azure-fde –  6.8.0-1068.75~22.04.1
linux-image-6.8.0-1070-azure –  6.8.0-1070.78~22.04.1
linux-image-azure –  6.8.0-1070.78~22.04.1
linux-image-azure-6.8 –  6.8.0-1070.78~22.04.1
linux-image-azure-fde –  6.8.0-1068.75~22.04.1
linux-image-azure-fde-6.8 –  6.8.0-1068.75~22.04.1

Reduce your security exposure

Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.

References



Have additional questions?

Talk to a member of the team ›