USN-8441-1: linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerabilities

Q: Who is most directly exposed to the Copy Fail issue?

Systems running the listed Ubuntu kernel packages are relevant. Exploitation requires a local attacker, and the issue may allow privilege escalation or a container escape.

Q: Can this issue affect containerized workloads?

Yes. CVE-2026-31431 may allow a local attacker to escape a container, in addition to escalating privileges on the host.

Q: Which kernel components are implicated by the other fixes in this update?

The update includes fixes in the Cryptographic API and packet sockets subsystems for CVE-2026-31504, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, and CVE-2026-46028.

Published Jun 17, 2026

Updated

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; (CVE-2026-31504, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-46028)

Affected Software

36 affected componentsFixes available

Linux Linux kernel

ubuntu/linux-aws-hwe<4.15.0-1192.205~16.04.1

4.15.0-1192.205~16.04.1

ubuntu/linux-azure<4.15.0-1201.216~16.04.1

4.15.0-1201.216~16.04.1

ubuntu/linux-gcp<4.15.0-1185.202~16.04.1

4.15.0-1185.202~16.04.1

ubuntu/linux-hwe<4.15.0-250.262~16.04.1

4.15.0-250.262~16.04.1

ubuntu/linux-oracle<4.15.0-1154.165~16.04.1

4.15.0-1154.165~16.04.1

All of the following

ubuntu/linux-image-4.15.0-1154-oracle<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-4.15.0-1185-gcp<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-4.15.0-1192-aws<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-4.15.0-1201-azure<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-4.15.0-250-generic<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-4.15.0-250-lowlatency<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-aws-hwe<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-azure<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-gcp<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-generic-hwe-16.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-gke<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-lowlatency-hwe-16.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-oem<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-oracle<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

All of the following

ubuntu/linux-image-virtual-hwe-16.04<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=16.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-1192.205~16.04.1
Upgrade
Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.
Fixed in 4.15.0-1201.216~16.04.1
Upgrade
Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.
Fixed in 4.15.0-1185.202~16.04.1
Upgrade
Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.
Fixed in 4.15.0-250.262~16.04.1
Upgrade
Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.
Fixed in 4.15.0-1154.165~16.04.1
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1154-oracle to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1185-gcp to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1192-aws to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-1201-azure to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-250-generic to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-4.15.0-250-lowlatency to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-aws-hwe to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-azure to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gcp to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-generic-hwe-16.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-gke to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-lowlatency-hwe-16.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-oem to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-oracle to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade ubuntu/linux-image-virtual-hwe-16.04 to a version that resolves this vulnerability.
Fixed in Ubuntu Pro
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8441-1

Event History

Jun 17, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·10:27 AM

Data Sourced

via OSV·10:27 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Who is most directly exposed to the Copy Fail issue?

Systems running the listed Ubuntu kernel packages are relevant. Exploitation requires a local attacker, and the issue may allow privilege escalation or a container escape.

Can this issue affect containerized workloads?

Yes. CVE-2026-31431 may allow a local attacker to escape a container, in addition to escalating privileges on the host.

Which kernel components are implicated by the other fixes in this update?

The update includes fixes in the Cryptographic API and packet sockets subsystems for CVE-2026-31504, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, and CVE-2026-46028.

USN-8441-1: linux-aws-hwe, linux-azure, linux-gcp, linux-hwe, linux-oracle vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Who is most directly exposed to the Copy Fail issue?

Can this issue affect containerized workloads?

Which kernel components are implicated by the other fixes in this update?

Company

Resources

Contact

Frequently Asked Questions

Who is most directly exposed to the Copy Fail issue?

Can this issue affect containerized workloads?

Which kernel components are implicated by the other fixes in this update?