USN-8965-1: Linux kernel (BlueField) vulnerabilities

Q: Which systems should be prioritized for this update?

Prioritize Ubuntu systems using the BlueField Linux kernel packages, including linux-image-5.4.0-1125-bluefield, linux-image-bluefield, linux-image-bluefield-5.4, and linux-bluefield. The fixes cover multiple kernel areas, including networking, storage, filesystems, tracing, and io_uring.

Q: Does the advisory identify a single affected kernel subsystem or exploit path?

No. It aggregates fixes for issues across Ethernet bonding, network drivers and networking core, SCSI, F2FS, the NFS client, tracing, io_uring, IUCV, and RxRPC session sockets. The provided information does not specify exploit prerequisites or which configurations enable each individual issue.

Q: How can I determine whether a host is in scope?

Check whether the host has one of the listed Ubuntu BlueField kernel packages installed. The advisory does not provide fixed package versions or configuration-specific indicators beyond the affected package names.

Published Nov 3, 2026

Updated

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

7 affected componentsFixes available

All of the following

ubuntu/linux-image-5.4.0-1125-bluefield<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/linux-image-bluefield<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

All of the following

ubuntu/linux-image-bluefield-5.4<Ubuntu Pro

Ubuntu Pro

Ubuntu Ubuntu=20.04

ubuntu/linux-bluefield<5.4.0-1125.132

5.4.0-1125.132

Event History

Nov 3, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·11:02 AM

Data Sourced

via OSV·11:02 AM

DescriptionAffected Software

Frequently Asked Questions

Which systems should be prioritized for this update?

Prioritize Ubuntu systems using the BlueField Linux kernel packages, including linux-image-5.4.0-1125-bluefield, linux-image-bluefield, linux-image-bluefield-5.4, and linux-bluefield. The fixes cover multiple kernel areas, including networking, storage, filesystems, tracing, and io_uring.

Does the advisory identify a single affected kernel subsystem or exploit path?

No. It aggregates fixes for issues across Ethernet bonding, network drivers and networking core, SCSI, F2FS, the NFS client, tracing, io_uring, IUCV, and RxRPC session sockets. The provided information does not specify exploit prerequisites or which configurations enable each individual issue.

How can I determine whether a host is in scope?

Check whether the host has one of the listed Ubuntu BlueField kernel packages installed. The advisory does not provide fixed package versions or configuration-specific indicators beyond the affected package names.

USN-8965-1: Linux kernel (BlueField) vulnerabilities

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which systems should be prioritized for this update?

Does the advisory identify a single affected kernel subsystem or exploit path?

How can I determine whether a host is in scope?

Company

Resources

Contact

Frequently Asked Questions

Which systems should be prioritized for this update?

Does the advisory identify a single affected kernel subsystem or exploit path?

How can I determine whether a host is in scope?