USN-8070-2: Linux kernel vulnerabilities

Q: Which systems are covered by this update?

The advisory lists Ubuntu systems using linux-image-4.4.0-1152-aws, linux-image-4.4.0-278-generic, linux-image-4.4.0-278-lowlatency, linux-image-aws, linux-image-generic-lts-xenial, linux-image-lowlatency-lts-xenial, or linux-image-virtual-lts-xenial.

Q: Which kernel areas are affected?

The corrected issues span x86 architecture, MMC, network and USB device-class drivers, BTRFS and filesystem infrastructure, XFRM, IPv4 and IPv6 networking, MAC80211, and the Simplified Mandatory Access Control Kernel framework.

Q: Do all listed flaws have the same exposure conditions?

The advisory does not provide per-CVE exploit prerequisites, affected configurations, or exposure conditions. It states only that an attacker could possibly use the issues to compromise the system.

Published Mar 4, 2026

Updated

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

16 affected componentsFixes available

All of the following

ubuntu/linux-image-4.4.0-1152-aws<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-4.4.0-278-generic<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-4.4.0-278-lowlatency<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-aws<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-generic-lts-xenial<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-lowlatency-lts-xenial<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

All of the following

ubuntu/linux-image-virtual-lts-xenial<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=14.04

ubuntu/linux-aws<4.4.0-1152.158

4.4.0-1152.158

ubuntu/linux-lts-xenial<4.4.0-278.312~14.04.1

4.4.0-278.312~14.04.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-4.4.0-1152-aws to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.4.0-278-generic to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.4.0-278-lowlatency to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-generic-lts-xenial to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-lowlatency-lts-xenial to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-virtual-lts-xenial to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.4.0-1152.158
Upgrade
Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.
Fixed in 4.4.0-278.312~14.04.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8070-2

Event History

Mar 4, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·02:25 PM

Data Sourced

via OSV·02:25 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems are covered by this update?

The advisory lists Ubuntu systems using linux-image-4.4.0-1152-aws, linux-image-4.4.0-278-generic, linux-image-4.4.0-278-lowlatency, linux-image-aws, linux-image-generic-lts-xenial, linux-image-lowlatency-lts-xenial, or linux-image-virtual-lts-xenial.

Which kernel areas are affected?

The corrected issues span x86 architecture, MMC, network and USB device-class drivers, BTRFS and filesystem infrastructure, XFRM, IPv4 and IPv6 networking, MAC80211, and the Simplified Mandatory Access Control Kernel framework.

Do all listed flaws have the same exposure conditions?

The advisory does not provide per-CVE exploit prerequisites, affected configurations, or exposure conditions. It states only that an attacker could possibly use the issues to compromise the system.

USN-8070-2: Linux kernel vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems are covered by this update?

Which kernel areas are affected?

Do all listed flaws have the same exposure conditions?

Company

Resources

Contact

Frequently Asked Questions

Which systems are covered by this update?

Which kernel areas are affected?

Do all listed flaws have the same exposure conditions?