Ubuntu 22.04 LTS Linux Kernel Critical Escalation Threats USN-8426-2

Several security issues were fixed in the Linux kernel.

Software Description:

- linux-azure: Linux kernel for Microsoft Azure Cloud systems

Details:

It was discovered that the Linux kernel algif_aead module did not properly

handle in-place cryptographic operations. This flaw is known as Copy Fail.

A local attacker could use this to escalate privileges, or possibly escape

a container. (CVE-2026-31431)

It was discovered that the Linux kernel did not properly handle shared page

fragments during socket buffer operations, collectively known as Dirty

Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the

RxRPC networking subsystem when processing paged fragments. A local

attacker could use this to escalate privileges, or possibly escape a

container. (CVE-2026-43284, CVE-2026-43500)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP

subsystem in the Linux kernel when handling socket buffer fragments. This

flaw is known as Fragnesia. A local attacker co...