USN-8889-1: Linux kernel (OEM) vulnerabilities

Published Oct 6, 2026

Updated

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

9 affected componentsFixes available

Canonical Linux kernel (OEM)

All of the following

ubuntu/linux-image-7.0.0-1015-oem<7.0.0-1015.15

7.0.0-1015.15

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-oem-26.04<7.0.0-1015.15

7.0.0-1015.15

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-oem-26.04a<7.0.0-1015.15

7.0.0-1015.15

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-oem-7.0<7.0.0-1015.15

7.0.0-1015.15

Ubuntu Ubuntu=26.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-7.0.0-1015-oem to a version that resolves this vulnerability.
Fixed in 7.0.0-1015.15
Upgrade
Upgrade ubuntu/linux-image-oem-26.04 to a version that resolves this vulnerability.
Fixed in 7.0.0-1015.15
Upgrade
Upgrade ubuntu/linux-image-oem-26.04a to a version that resolves this vulnerability.
Fixed in 7.0.0-1015.15
Upgrade
Upgrade ubuntu/linux-image-oem-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1015.15
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-8889-1

Event History

Oct 6, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

USN-8889-1: Linux kernel (OEM) vulnerabilities

Affected Software

Remediation

Event History

Company

Resources

Contact