USN-8281-1: linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle vulnerabilities

Q: Who is most directly exposed to the Copy Fail flaw?

Systems where a local attacker can interact with the Linux kernel's algif_aead cryptographic module are directly exposed. The issue may allow local privilege escalation and could possibly permit a container escape.

Q: Does the advisory identify remote exploitation for the Copy Fail issue?

No. The Copy Fail issue is described as requiring a local attacker; the provided information does not identify a remote attack path for that flaw.

Q: Which kernel areas are covered by the additional security fixes?

The update addresses issues in the Cryptographic API and packet sockets. The provided information states that an attacker could possibly use these issues to compromise the system, but does not provide exploitation prerequisites or impact details for each CVE.

Published May 19, 2026

Updated

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; (CVE-2026-31504, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)

Affected Software

57 affected componentsFixes available

Linux Linux kernel

ubuntu/linux<4.15.0-250.262

4.15.0-250.262

ubuntu/linux-aws<4.15.0-1192.205

4.15.0-1192.205

ubuntu/linux-gcp-4.15<4.15.0-1185.202

4.15.0-1185.202

ubuntu/linux-kvm<4.15.0-1174.179

4.15.0-1174.179

ubuntu/linux-oracle<4.15.0-1154.165

4.15.0-1154.165

ubuntu/linux-aws-fips<4.15.0-2130.136

4.15.0-2130.136

ubuntu/linux-fips<4.15.0-1147.159

4.15.0-1147.159

ubuntu/linux-gcp-fips<4.15.0-2093.99

4.15.0-2093.99

All of the following

ubuntu/linux-image-4.15.0-1147-fips<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1154-oracle<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1174-kvm<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1185-gcp<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-1192-aws<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-2093-gcp-fips<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-2130-aws-fips<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-250-generic<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-4.15.0-250-lowlatency<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-aws-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-aws-fips<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-aws-fips-4.15<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-aws-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-fips<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-gcp-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-gcp-fips<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-gcp-fips-4.15<FIPS-140

FIPS-140

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-gcp-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-generic<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-kvm<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-lowlatency<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-oracle-4.15<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-oracle-lts-18.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

All of the following

ubuntu/linux-image-virtual<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=18.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux to a version that resolves this vulnerability.
Fixed in 4.15.0-250.262
Upgrade
Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.
Fixed in 4.15.0-1192.205
Upgrade
Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.
Fixed in 4.15.0-1185.202
Upgrade
Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.
Fixed in 4.15.0-1174.179
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1154.165
Upgrade
Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2130.136
Upgrade
Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-1147.159
Upgrade
Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.
Fixed in 4.15.0-2093.99
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1147-fips to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1154-oracle to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1174-kvm to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1185-gcp to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1192-aws to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-2093-gcp-fips to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-4.15.0-2130-aws-fips to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-4.15.0-250-generic to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-250-lowlatency to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws-fips to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-aws-fips-4.15 to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-aws-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-fips to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-gcp-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gcp-fips to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-gcp-fips-4.15 to a version that resolves this vulnerability.
Fixed in FIPS-140
Upgrade
Upgrade ubuntu/linux-image-gcp-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-generic to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-kvm to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-lowlatency to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-oracle-4.15 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-oracle-lts-18.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-virtual to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8281-1

Event History

May 19, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·10:56 PM

Data Sourced

via OSV·10:56 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is most directly exposed to the Copy Fail flaw?

Systems where a local attacker can interact with the Linux kernel's algif_aead cryptographic module are directly exposed. The issue may allow local privilege escalation and could possibly permit a container escape.

Does the advisory identify remote exploitation for the Copy Fail issue?

No. The Copy Fail issue is described as requiring a local attacker; the provided information does not identify a remote attack path for that flaw.

Which kernel areas are covered by the additional security fixes?

The update addresses issues in the Cryptographic API and packet sockets. The provided information states that an attacker could possibly use these issues to compromise the system, but does not provide exploitation prerequisites or impact details for each CVE.

USN-8281-1: linux, linux-aws, linux-aws-fips, linux-fips, linux-gcp-4.15, linux-gcp-fips, linux-kvm, linux-oracle vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is most directly exposed to the Copy Fail flaw?

Does the advisory identify remote exploitation for the Copy Fail issue?

Which kernel areas are covered by the additional security fixes?

Company

Resources

Contact

Frequently Asked Questions

Who is most directly exposed to the Copy Fail flaw?

Does the advisory identify remote exploitation for the Copy Fail issue?

Which kernel areas are covered by the additional security fixes?