USN-8351-1: Linux kernel (Low Latency) vulnerabilities

Q: Who is most directly exposed to the Copy Fail flaw?

Systems where a local attacker can execute code are directly exposed, because CVE-2026-31431 can be used for local privilege escalation. Container hosts are also relevant, as the flaw may allow a local attacker to escape a container.

Q: Which kernel areas are addressed by this update besides algif_aead?

The update addresses reported security issues in the Cryptographic API, Ethernet bonding driver, packet sockets, and TLS protocol. The listed CVEs are CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, and CVE-2026-46028.

Q: Which Ubuntu packages are covered by this advisory?

The affected software list includes linux-lowlatency and linux-image-lowlatency packages, including the 5.15 low-latency and 64k variants. It also specifically lists linux-image-5.15.0-179-lowlatency and linux-image-5.15.0-179-lowlatency-64k.

Published Jun 1, 2026

Updated

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Ethernet bonding driver; - Packet sockets; - TLS protocol; (CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-46028)

Affected Software

18 affected componentsFixes available

ubuntu/linux-lowlatency

All of the following

ubuntu/linux-image-5.15.0-179-lowlatency<5.15.0-179.189

5.15.0-179.189

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-5.15.0-179-lowlatency-64k<5.15.0-179.189

5.15.0-179.189

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-lowlatency<5.15.0.179.151

5.15.0.179.151

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-lowlatency-5.15<5.15.0.179.151

5.15.0.179.151

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-lowlatency-64k<5.15.0.179.151

5.15.0.179.151

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-lowlatency-64k-5.15<5.15.0.179.151

5.15.0.179.151

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-lowlatency-64k-hwe-20.04<5.15.0.179.151

5.15.0.179.151

Ubuntu Ubuntu=22.04

All of the following

ubuntu/linux-image-lowlatency-hwe-20.04<5.15.0.179.151

5.15.0.179.151

Ubuntu Ubuntu=22.04

ubuntu/linux-lowlatency<5.15.0-179.189

5.15.0-179.189

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-5.15.0-179-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-179.189
Upgrade
Upgrade ubuntu/linux-image-5.15.0-179-lowlatency-64k to a version that resolves this vulnerability.
Fixed in 5.15.0-179.189
Upgrade
Upgrade ubuntu/linux-image-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0.179.151
Upgrade
Upgrade ubuntu/linux-image-lowlatency-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0.179.151
Upgrade
Upgrade ubuntu/linux-image-lowlatency-64k to a version that resolves this vulnerability.
Fixed in 5.15.0.179.151
Upgrade
Upgrade ubuntu/linux-image-lowlatency-64k-5.15 to a version that resolves this vulnerability.
Fixed in 5.15.0.179.151
Upgrade
Upgrade ubuntu/linux-image-lowlatency-64k-hwe-20.04 to a version that resolves this vulnerability.
Fixed in 5.15.0.179.151
Upgrade
Upgrade ubuntu/linux-image-lowlatency-hwe-20.04 to a version that resolves this vulnerability.
Fixed in 5.15.0.179.151
Upgrade
Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.
Fixed in 5.15.0-179.189
Upgrade
Upgrade Linux kernel (Low Latency) to a version that resolves this vulnerability.
Patch USN-8351-1

Event History

Jun 1, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·12:45 PM

Data Sourced

via OSV·12:45 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is most directly exposed to the Copy Fail flaw?

Systems where a local attacker can execute code are directly exposed, because CVE-2026-31431 can be used for local privilege escalation. Container hosts are also relevant, as the flaw may allow a local attacker to escape a container.

Which kernel areas are addressed by this update besides algif_aead?

The update addresses reported security issues in the Cryptographic API, Ethernet bonding driver, packet sockets, and TLS protocol. The listed CVEs are CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, and CVE-2026-46028.

Which Ubuntu packages are covered by this advisory?

The affected software list includes linux-lowlatency and linux-image-lowlatency packages, including the 5.15 low-latency and 64k variants. It also specifically lists linux-image-5.15.0-179-lowlatency and linux-image-5.15.0-179-lowlatency-64k.

USN-8351-1: Linux kernel (Low Latency) vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is most directly exposed to the Copy Fail flaw?

Which kernel areas are addressed by this update besides algif_aead?

Which Ubuntu packages are covered by this advisory?

Company

Resources

Contact

Frequently Asked Questions

Who is most directly exposed to the Copy Fail flaw?

Which kernel areas are addressed by this update besides algif_aead?

Which Ubuntu packages are covered by this advisory?