USN-9003-1: Linux kernel (NVIDIA) vulnerabilities

Q: Which environments are exposed to the documented RMP-check issue?

The issue applies to systems using affected AMD processors where SEV-SNP guest memory is in use. Exploitation requires a local attacker with hypervisor access.

Q: What could an attacker achieve with this issue?

An attacker meeting the stated access requirements could trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory.

Q: Which Ubuntu kernel package families are covered by this update?

The update covers the NVIDIA BOS kernel package families, including linux-image-7.0.0-2022-nvidia-bos, its 64k variant, linux-image-nvidia-bos and its related 7.0 and 64k packages, and linux-image-nvidia-64k-hwe-26.04.

Published Nov 6, 2026

Updated

It was discovered that some AMD processors did not properly perform Reverse Map Table (RMP) checks when the IOMMU accessed certain host buffers. A local attacker with hypervisor access could possibly use this to trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory. (CVE-2023-20585) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

28 affected componentsFixes available

All of the following

ubuntu/linux-image-7.0.0-2022-nvidia-bos<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-7.0.0-2022-nvidia-bos-64k<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-nvidia-64k-hwe-26.04<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-nvidia-bos<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-nvidia-bos-64k<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-nvidia-bos-64k-7.0<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-nvidia-bos-7.0<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-nvidia-hwe-26.04<7.0.0-2022.23

7.0.0-2022.23

Ubuntu Ubuntu=26.04

All of the following

ubuntu/linux-image-7.0.0-1024-nvidia<7.0.0-1024.25~24.04.1

7.0.0-1024.25~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-7.0.0-1024-nvidia-64k<7.0.0-1024.25~24.04.1

7.0.0-1024.25~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-nvidia-64k-7.0<7.0.0-1024.25~24.04.1

7.0.0-1024.25~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-nvidia-64k-hwe-24.04<7.0.0-1024.25~24.04.1

7.0.0-1024.25~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-nvidia-7.0<7.0.0-1024.25~24.04.1

7.0.0-1024.25~24.04.1

Ubuntu Ubuntu=24.04

All of the following

ubuntu/linux-image-nvidia-hwe-24.04<7.0.0-1024.25~24.04.1

7.0.0-1024.25~24.04.1

Ubuntu Ubuntu=24.04

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-image-7.0.0-2022-nvidia-bos to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-7.0.0-2022-nvidia-bos-64k to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-nvidia-64k-hwe-26.04 to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-nvidia-bos to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-nvidia-bos-64k to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-nvidia-bos-64k-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-nvidia-bos-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-nvidia-hwe-26.04 to a version that resolves this vulnerability.
Fixed in 7.0.0-2022.23
Upgrade
Upgrade ubuntu/linux-image-7.0.0-1024-nvidia to a version that resolves this vulnerability.
Fixed in 7.0.0-1024.25~24.04.1
Upgrade
Upgrade ubuntu/linux-image-7.0.0-1024-nvidia-64k to a version that resolves this vulnerability.
Fixed in 7.0.0-1024.25~24.04.1
Upgrade
Upgrade ubuntu/linux-image-nvidia-64k-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1024.25~24.04.1
Upgrade
Upgrade ubuntu/linux-image-nvidia-64k-hwe-24.04 to a version that resolves this vulnerability.
Fixed in 7.0.0-1024.25~24.04.1
Upgrade
Upgrade ubuntu/linux-image-nvidia-7.0 to a version that resolves this vulnerability.
Fixed in 7.0.0-1024.25~24.04.1
Upgrade
Upgrade ubuntu/linux-image-nvidia-hwe-24.04 to a version that resolves this vulnerability.
Fixed in 7.0.0-1024.25~24.04.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch USN-9003-1

Event History

Nov 6, 2026

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Frequently Asked Questions

Which environments are exposed to the documented RMP-check issue?

The issue applies to systems using affected AMD processors where SEV-SNP guest memory is in use. Exploitation requires a local attacker with hypervisor access.

What could an attacker achieve with this issue?

An attacker meeting the stated access requirements could trigger an out-of-bounds condition and compromise the integrity of SEV-SNP guest memory.

Which Ubuntu kernel package families are covered by this update?

The update covers the NVIDIA BOS kernel package families, including linux-image-7.0.0-2022-nvidia-bos, its 64k variant, linux-image-nvidia-bos and its related 7.0 and 64k packages, and linux-image-nvidia-64k-hwe-26.04.

USN-9003-1: Linux kernel (NVIDIA) vulnerabilities

Affected Software

Remediation

Event History

Frequently Asked Questions

Which environments are exposed to the documented RMP-check issue?

What could an attacker achieve with this issue?

Which Ubuntu kernel package families are covered by this update?

Company

Resources

Contact

Frequently Asked Questions

Which environments are exposed to the documented RMP-check issue?

What could an attacker achieve with this issue?

Which Ubuntu kernel package families are covered by this update?