USN-8280-2: Linux kernel (Azure)vulnerabilities
It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; - TLS protocol; (CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1163-azureto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-5.4.0-1163-azure-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-azure-5.4to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-azure-fipsto a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-azure-fips-5.4to a version that resolves this vulnerability.Fixed in FIPS-140 - Upgrade
Upgrade
ubuntu/linux-image-azure-lts-20.04to a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-image-azureto a version that resolves this vulnerability.Fixed in Ubuntu Pro - Upgrade
Upgrade
ubuntu/linux-azure-5.4to a version that resolves this vulnerability.Fixed in 5.4.0-1163.169~18.04.1 - Upgrade
Upgrade
ubuntu/linux-azureto a version that resolves this vulnerability.Fixed in 5.4.0-1163.169 - Upgrade
Upgrade
ubuntu/linux-azure-fipsto a version that resolves this vulnerability.Fixed in 5.4.0-1163.169+fips1 - Upgrade
Upgrade
linux-azure, linux-azure-5.4, linux-azure-fipsto a version that resolves this vulnerability.Patch USN-8280-2
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What is the severity of USN-8280-2?
The severity of USN-8280-2 vulnerabilities is rated as risk 58.
How do I fix USN-8280-2?
To fix USN-8280-2 vulnerabilities, apply the latest kernel updates provided by Canonical for your Ubuntu system.
What vulnerabilities are addressed in USN-8280-2?
USN-8280-2 addresses multiple vulnerabilities in the Linux kernel affecting Azure deployments.
Can I check if my system is affected by USN-8280-2?
Yes, you can verify the version of the Linux kernel running on your system against the details of USN-8280-2.
Is there a specific Ubuntu version affected by USN-8280-2?
USN-8280-2 affects specific versions of the Canonical Linux kernel for Azure, so it is important to check your version against the advisory.