USN-8145-1: Linux kernel vulnerabilities

Q: Which systems should be prioritized for review?

Review Ubuntu systems running the Linux kernel packages listed in the notice, including linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle, linux-image-4.15.0-1190-aws, and linux-image-4.15.0-1152-oracle. The corrected areas include ARM64, cryptographic APIs, UDF, NFC, and network traffic control.

Q: Does the available information say whether a default installation is exploitable?

No. The notice does not identify required configuration, local versus remote attacker access, or whether any affected subsystem is enabled by default.

Q: Can affected status be determined from the supplied package list alone?

Only partially. The listed package names identify deployments that should be reviewed, but the supplied data does not include affected or fixed package versions, so it cannot confirm whether a particular installed kernel is patched.

Published Apr 2, 2026

Updated

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

35 affected componentsFixes available

ubuntu/linux-aws-hwe<4.15.0-1190.203~16.04.1

4.15.0-1190.203~16.04.1

ubuntu/linux<4.15.0-248.260

4.15.0-248.260

ubuntu/linux-aws<4.15.0-1190.203

4.15.0-1190.203

ubuntu/linux-kvm<4.15.0-1172.177

4.15.0-1172.177

ubuntu/linux-oracle<4.15.0-1152.163

4.15.0-1152.163

All of the following

ubuntu/linux-image-4.15.0-1152-oracle<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1172-kvm<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1190-aws<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-248-generic<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-248-lowlatency<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-aws-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-aws-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-generic<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-kvm<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-lowlatency<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-oracle-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-oracle-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-virtual<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1190-aws<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-aws-hwe<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1190.203~16.04.1
Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-248.260
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1190.203
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1172.177
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1152.163
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1152-oracle to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1172-kvm to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1190-aws to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-248-generic to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-248-lowlatency to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-generic to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-kvm to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-lowlatency to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-oracle-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-oracle-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-virtual to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws-hwe to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8145-1

Event History

Apr 2, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·02:06 PM

Data Sourced

via OSV·02:06 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which systems should be prioritized for review?

Review Ubuntu systems running the Linux kernel packages listed in the notice, including linux, linux-aws, linux-aws-hwe, linux-kvm, linux-oracle, linux-image-4.15.0-1190-aws, and linux-image-4.15.0-1152-oracle. The corrected areas include ARM64, cryptographic APIs, UDF, NFC, and network traffic control.

Does the available information say whether a default installation is exploitable?

No. The notice does not identify required configuration, local versus remote attacker access, or whether any affected subsystem is enabled by default.

Can affected status be determined from the supplied package list alone?

Only partially. The listed package names identify deployments that should be reviewed, but the supplied data does not include affected or fixed package versions, so it cannot confirm whether a particular installed kernel is patched.

USN-8145-1: Linux kernel vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for review?

Does the available information say whether a default installation is exploitable?

Can affected status be determined from the supplied package list alone?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for review?

Does the available information say whether a default installation is exploitable?

Can affected status be determined from the supplied package list alone?