USN-8279-2: Linux kernel (GCP) vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Ethernet bonding driver; - SMB network file system; - Netfilter; - iouring subsystem; - Packet sockets; - TLS protocol; (CVE-2024-35862, CVE-2024-50060, CVE-2026-23274, CVE-2026-23351, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.15.0-1108-gcpto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-gcpto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-gcp-5.15to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-gcp-5.15to a version that resolves this vulnerability.Fixed in 5.15.0-1108.117~20.04.1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8279-2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
- CVE-2026-43078
- CVE-2026-43077
- CVE-2026-43033
- CVE-2026-31533
- CVE-2026-31504
- CVE-2026-31431
- CVE-2026-31419
- CVE-2026-23351
- CVE-2026-23274
- CVE-2024-50060
- CVE-2024-35862
- UBUNTU-CVE-2024-35862
- UBUNTU-CVE-2024-50060
- UBUNTU-CVE-2026-23274
- UBUNTU-CVE-2026-23351
- UBUNTU-CVE-2026-31419
- UBUNTU-CVE-2026-31431
- UBUNTU-CVE-2026-31504
- UBUNTU-CVE-2026-31533
- UBUNTU-CVE-2026-43033
- UBUNTU-CVE-2026-43077
- UBUNTU-CVE-2026-43078
Frequently Asked Questions
What is the severity of USN-8279-2?
USN-8279-2 has a risk rating of 50, indicating moderate severity.
What vulnerabilities are addressed in USN-8279-2?
USN-8279-2 addresses multiple vulnerabilities in the Linux kernel including CVE-2026-43078, CVE-2026-43077, and CVE-2026-43033.
How do I fix USN-8279-2?
To fix USN-8279-2, it is recommended to update your Ubuntu Linux kernel (GCP) to the latest version.
What are the potential impacts of USN-8279-2 if left unpatched?
If left unpatched, the vulnerabilities in USN-8279-2 could lead to system instability or unauthorized access.
Is there a workaround for USN-8279-2?
There are no specific workarounds recommended for USN-8279-2; updating the kernel is the best course of action.