Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 14 articles for you...
89
security advisoryfedoraimportantFedora 44 libinput Important Local Escalation Fix Advisory 2026-5e2446b30f
libinput 1.31.3, fixes a udev property inject via uinput devices that can lead to local privilege escalation. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-5e2446b30f 2026-06-06 01:02:02.289317+00:00 -------------------------------------------------------------------------------- Name : libinput Product : Fedora 44 Version : 1.31.3 Release : 1.fc44 URL : http://www.freedesktop.org/wiki/Software/libinput/ Summary : Input device library Description : libinput is a library that handles input devices for display servers and other applications that need to directly deal with input devices. It provides device detection, device handling, input device event processing and abstraction so minimize the amount of custom input code the user of libinput need to provide the common set of functionality that users expect. -------------------------------------------------------------------------------- Update Information: libinput 1.31.3, fixes a udev property inject via uinput devices that can lead to local privilege escalation -------------------------------------------------------------------------------- ChangeLog: * Thu Jun 4 2026 Peter Hutterer - 1.31.3-1 - libinput 1.31.3 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-5e2446b30f' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list
Jun 06, 2026
•Important
Fedora
172
security advisoryUbuntukernelUbuntu 18.04 Linux Kernel Critical Escalation Threat Fix USN-8392-1
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8392-1 June 04, 2026 linux-aws-5.4, linux-hwe-5.4 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 18.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-aws-5.4: Linux kernel for Amazon Web Services (AWS) systems - linux-hwe-5.4: Linux hardware enablement (HWE) kernel Details: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Packet sockets; - RDS protocol; - TLS protocol; (CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-43494, CVE-2026-46028) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS linux-image-5.4.0-1160-aws 5.4.0-1160.170~18.04.1 Available with Ubuntu Pro linux-image-5.4.0-231-generic 5.4.0-231.251~18.04.1 Available with Ubuntu Pro linux-image-5.4.0-231-lowlatency 5.4.0-231.251~18.04.1 Available with Ubuntu Pro linux-image-aws 5.4.0.1160.170~18.04.1 Available with Ubuntu Pro linux-image-aws-5.4 5.4.0.1160.170~18.04.1 Available with Ubuntu Pro linux-image-generic-5.4 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-generic-hwe-18.04 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-lowlatency-5.4 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-lowlatency-hwe-18.04 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-oem 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-oem-osp1 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-snapdragon-5.4 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-snapdragon-hwe-18.04 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-virtual-5.4 5.4.0.231.251~18.04.1 Available with Ubuntu Pro linux-image-virtual-hwe-18.04 5.4.0.231.251~18.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform thisas well. References: https://ubuntu.com/security/notices/USN-8392-1 CVE-2026-31431, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078, CVE-2026-43284, CVE-2026-43494, CVE-2026-43500, CVE-2026-46028 . Several critical issues fixed in the Linux kernel for Ubuntu 18.04. Update instructions and details provided.. Ubuntu kernel escalation privilege update. . Severity: Critical. LinuxSecurity.com Team
Jun 04, 2026
•Critical
Ubuntu
172
security advisoryUbuntulocal attackUbuntu 24.04 LTS Linux Kernel Critical Flaws USN-8373-1
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8373-1 June 02, 2026 linux, linux-aws, linux-aws-6.8, linux-aws-fips, linux-azure, linux-fips, linux-gcp, linux-gcp-6.8, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-6.8, linux-ibm, linux-ibm-6.8, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-nvidia-tegra, linux-oracle, linux-oracle-6.8, linux-raspi, linux-raspi-realtime, linux-realtime, linux-realtime-6.8 vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-fips: Linux kernel with FIPS - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-nvidia: Linux kernel for NVIDIA systems - linux-nvidia-lowlatency: Linux low latency kernel for NVIDIA systems - linux-nvidia-tegra: Linux kernel for NVIDIA Tegra systems - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-raspi-realtime: Linux kernel for Raspberry Pi Real-time systems - linux-realtime: Linux kernel for Real-time systems - linux-aws-6.8: Linux kernel for Amazon Web Services (AWS) systems - linux-gcp-6.8: Linux kernel for Google Cloud Platform (GCP) systems - linux-hwe-6.8: Linux hardware enablement (HWE) kernel -linux-ibm-6.8: Linux kernel for IBM cloud systems - linux-nvidia-6.8: Linux kernel for NVIDIA systems - linux-oracle-6.8: Linux kernel for Oracle Cloud systems - linux-realtime-6.8: Linux kernel for Real-time systems Details: It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43284, CVE-2026-43500, CVE-2026-45998, CVE-2026-46000) It was discovered that a logic flaw existed in the XFRM ESP-in-TCP subsystem in the Linux kernel when handling socket buffer fragments. This flaw is known as Fragnesia. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-43503, CVE-2026-46300) Qualys discovered that a race condition existed in the ptrace subsystem of the Linux kernel when privileged processes are exiting. An unprivileged local attacker could use this issue to expose sensitive information. (CVE-2026-46333) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a memory leak when handling AppArmor notifications. A local attacker could use this to cause resource exhaustion. (CVE-2026-47326) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contain a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel oops. (CVE-2026-47327) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an invalid free when handling AppArmor notifications. A local attacker could use this to corrupt kernel memory. (CVE-2026-47328) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained insufficient validation of AppArmor notification responses. A local attacker could use this to allow crafted responses to beprocessed. (CVE-2026-47329) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 used an uninitialized variable when handling AppArmor notifications. A local attacker could use this to cause incorrect caching of data. (CVE-2026-47330) Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a use- after-free (UAF) bug. A local attacker could use this to cause memory corruption and, theoretically, arbitrary code execution. (CVE-2026-47331) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained an out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause information disclosure of kernel memory. (CVE-2026-47332) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a out-of-bounds (OOB) read when handling AppArmor notifications. A local attacker could use this to cause kernel memory corruption and, theoretically, influence processing of AppArmor policies. (CVE-2026-47333) Tristan Madani discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained incorrect holding of locks when handling AppArmor notifications. A local attacker could use this to cause a kernel panic or deadlock. (CVE-2026-47334) Tristan Madani discovered that Ubuntu Linux kernel 6.8 contained a NULL pointer dereference when handling AppArmor notifications. A local attacker could use this to cause a kernel panic. (CVE-2026-47335) Tristan Madani discovered that Ubuntu Linux kernel 6.8 used an uninitialized variable when handling AppArmor AF_INET/AF_INET6 socket mediation. A local attacker could use this to influence processing of fine- grained network socket mediation. (CVE-2026-47336) Tristan Madani and Trevor Lawrence have each independently discovered that Ubuntu Linux kernel 6.8, 6.17 and 7.0 contained a NULL pointer dereference when handling AppArmor network socket mediation. A local attacker could use this to cause a kernel oops. (CVE-2026-47337) Several security issues were discovered in the Linux kernel. Anattacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - RDS protocol; - RxRPC session sockets; (CVE-2026-31676, CVE-2026-43494) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS linux-image-6.8.0-1026-nvidia-tegra 6.8.0-1026.26 linux-image-6.8.0-1026-nvidia-tegra-rt 6.8.0-1026.26 linux-image-6.8.0-1042-gkeop 6.8.0-1042.45 linux-image-6.8.0-1054-oracle 6.8.0-1054.55 linux-image-6.8.0-1054-oracle-64k 6.8.0-1054.55 linux-image-6.8.0-1055-gke 6.8.0-1055.61 linux-image-6.8.0-1055-gke-64k 6.8.0-1055.61 linux-image-6.8.0-1055-nvidia 6.8.0-1055.58 linux-image-6.8.0-1055-nvidia-64k 6.8.0-1055.58 linux-image-6.8.0-1055-nvidia-lowlatency 6.8.0-1055.58.1 linux-image-6.8.0-1055-nvidia-lowlatency-64k 6.8.0-1055.58.1 linux-image-6.8.0-1057-aws 6.8.0-1057.60 linux-image-6.8.0-1057-aws-64k 6.8.0-1057.60 linux-image-6.8.0-1057-aws-fips 6.8.0-1057.60+fips1 Available with Ubuntu Pro linux-image-6.8.0-1057-ibm 6.8.0-1057.58 linux-image-6.8.0-1057-raspi 6.8.0-1057.61 linux-image-6.8.0-1058-azure 6.8.0-1058.64 linux-image-6.8.0-1060-gcp 6.8.0-1060.63 linux-image-6.8.0-1060-gcp-64k 6.8.0-1060.63 linux-image-6.8.0-1060-gcp-fips 6.8.0-1060.63+fips1 Available with Ubuntu Pro linux-image-6.8.0-124-fips 6.8.0-124.124+fips1 Available with Ubuntu Pro linux-image-6.8.0-124-generic 6.8.0-124.124 linux-image-6.8.0-124-generic-64k 6.8.0-124.124 linux-image-6.8.0-2046-raspi-realtime 6.8.0-2046.47 Available with Ubuntu Pro linux-image-6.8.1-1052-realtime 6.8.1-1052.53 Available with Ubuntu Pro linux-image-aws-6.8 6.8.0-1057.60 linux-image-aws-64k-6.8 6.8.0-1057.60 linux-image-aws-64k-lts-24.04 6.8.0-1057.60 linux-image-aws-fips 6.8.0-1057.60+fips1 Available with Ubuntu Pro linux-image-aws-fips-6.8 6.8.0-1057.60+fips1 Available with Ubuntu Pro linux-image-aws-lts-24.04 6.8.0-1057.60 linux-image-azure-6.8 6.8.0-1058.64 linux-image-azure-lts-24.04 6.8.0-1058.64 linux-image-fips 6.8.0-124.124+fips1 Available with Ubuntu Pro linux-image-fips-6.8 6.8.0-124.124+fips1 Available with Ubuntu Pro linux-image-gcp-6.8 6.8.0-1060.63 linux-image-gcp-64k-6.8 6.8.0-1060.63 linux-image-gcp-64k-lts-24.04 6.8.0-1060.63 linux-image-gcp-fips 6.8.0-1060.63+fips1 Available with Ubuntu Pro linux-image-gcp-fips-6.8 6.8.0-1060.63+fips1 Available with Ubuntu Pro linux-image-gcp-lts-24.04 6.8.0-1060.63 linux-image-generic 6.8.0-124.124 linux-image-generic-6.8 6.8.0-124.124 linux-image-generic-64k 6.8.0-124.124 linux-image-generic-64k-6.8 6.8.0-124.124 linux-image-generic-lpae 6.8.0-124.124 linux-image-gke 6.8.0-1055.61 linux-image-gke-6.8 6.8.0-1055.61 linux-image-gke-64k 6.8.0-1055.61 linux-image-gke-64k-6.8 6.8.0-1055.61 linux-image-gkeop 6.8.0-1042.45 linux-image-gkeop-6.8 6.8.0-1042.45 linux-image-ibm 6.8.0-1057.58 linux-image-ibm-6.8 6.8.0-1057.58 linux-image-ibm-classic 6.8.0-1057.58 linux-image-ibm-lts-24.04 6.8.0-1057.58 linux-image-intel-iot-realtime 6.8.1-1052.53 Available with Ubuntu Pro linux-image-intel-iotg 6.8.0-124.124 linux-image-kvm 6.8.0-124.124 linux-image-nvidia 6.8.0-1055.58 linux-image-nvidia-6.8 6.8.0-1055.58 linux-image-nvidia-64k 6.8.0-1055.58 linux-image-nvidia-64k-6.8 6.8.0-1055.58 linux-image-nvidia-lowlatency 6.8.0-1055.58.1 linux-image-nvidia-lowlatency-6.8 6.8.0-1055.58.1 linux-image-nvidia-lowlatency-64k 6.8.0-1055.58.1 linux-image-nvidia-lowlatency-64k-6.8 6.8.0-1055.58.1 linux-image-nvidia-tegra 6.8.0-1026.26 linux-image-nvidia-tegra-6.8 6.8.0-1026.26 linux-image-nvidia-tegra-rt 6.8.0-1026.26 linux-image-nvidia-tegra-rt-6.8 6.8.0-1026.26 linux-image-oracle-6.8 6.8.0-1054.55 linux-image-oracle-64k-6.8 6.8.0-1054.55 linux-image-oracle-64k-lts-24.04 6.8.0-1054.55 linux-image-oracle-lts-24.04 6.8.0-1054.55 linux-image-raspi 6.8.0-1057.61 linux-image-raspi-6.8 6.8.0-1057.61 linux-image-raspi-realtime 6.8.0-2046.47 Available with Ubuntu Pro linux-image-raspi-realtime-6.8 6.8.0-2046.47 Available with Ubuntu Pro linux-image-realtime 6.8.1-1052.53 Available with Ubuntu Pro linux-image-realtime-6.8.1 6.8.1-1052.53 Available with Ubuntu Pro linux-image-virtual 6.8.0-124.124 linux-image-virtual-6.8 6.8.0-124.124 Ubuntu 22.04 LTS linux-image-6.8.0-1054-oracle 6.8.0-1054.55~22.04.1 linux-image-6.8.0-1054-oracle-64k 6.8.0-1054.55~22.04.1 linux-image-6.8.0-1055-nvidia 6.8.0-1055.58~22.04.1 linux-image-6.8.0-1055-nvidia-64k 6.8.0-1055.58~22.04.1 linux-image-6.8.0-1057-aws 6.8.0-1057.60~22.04.1 linux-image-6.8.0-1057-aws-64k 6.8.0-1057.60~22.04.1 linux-image-6.8.0-1057-ibm 6.8.0-1057.58~22.04.1 linux-image-6.8.0-1060-gcp 6.8.0-1060.63~22.04.1 linux-image-6.8.0-1060-gcp-64k 6.8.0-1060.63~22.04.1 linux-image-6.8.0-124-generic 6.8.0-124.124~22.04.1 linux-image-6.8.0-124-generic-64k 6.8.0-124.124~22.04.1 linux-image-6.8.1-1052-realtime 6.8.1-1052.53~22.04.1 Available with Ubuntu Pro linux-image-aws 6.8.0-1057.60~22.04.1 linux-image-aws-6.8 6.8.0-1057.60~22.04.1 linux-image-aws-64k 6.8.0-1057.60~22.04.1 linux-image-aws-64k-6.8 6.8.0-1057.60~22.04.1 linux-image-gcp 6.8.0-1060.63~22.04.1 linux-image-gcp-6.8 6.8.0-1060.63~22.04.1 linux-image-gcp-64k 6.8.0-1060.63~22.04.1 linux-image-gcp-64k-6.8 6.8.0-1060.63~22.04.1 linux-image-generic-6.8 6.8.0-124.124~22.04.1 linux-image-generic-64k-6.8 6.8.0-124.124~22.04.1 linux-image-generic-64k-hwe-22.04 6.8.0-124.124~22.04.1 linux-image-generic-hwe-22.04 6.8.0-124.124~22.04.1 linux-image-ibm-6.8 6.8.0-1057.58~22.04.1 linux-image-nvidia-6.8 6.8.0-1055.58~22.04.1 linux-image-nvidia-64k-6.8 6.8.0-1055.58~22.04.1 linux-image-nvidia-64k-hwe-22.04 6.8.0-1055.58~22.04.1 linux-image-nvidia-hwe-22.04 6.8.0-1055.58~22.04.1 linux-image-oem-22.04 6.8.0-124.124~22.04.1 linux-image-oem-22.04a 6.8.0-124.124~22.04.1 linux-image-oem-22.04b 6.8.0-124.124~22.04.1 linux-image-oem-22.04c 6.8.0-124.124~22.04.1 linux-image-oem-22.04d 6.8.0-124.124~22.04.1 linux-image-oracle 6.8.0-1054.55~22.04.1 linux-image-oracle-6.8 6.8.0-1054.55~22.04.1 linux-image-oracle-64k 6.8.0-1054.55~22.04.1 linux-image-oracle-64k-6.8 6.8.0-1054.55~22.04.1 linux-image-realtime-6.8.1 6.8.1-1052.53~22.04.1 Available with Ubuntu Pro linux-image-realtime-hwe-22.04 6.8.1-1052.53~22.04.1 Available with Ubuntu Pro linux-image-virtual-6.8 6.8.0-124.124~22.04.1 linux-image-virtual-hwe-22.04 6.8.0-124.124~22.04.1 After a standard system updateyou need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8373-1 CVE-2026-31676, CVE-2026-43284, CVE-2026-43494, CVE-2026-43500, CVE-2026-43503, CVE-2026-45998, CVE-2026-46000, CVE-2026-46300, CVE-2026-46333, CVE-2026-47326, CVE-2026-47327, CVE-2026-47328, CVE-2026-47329, CVE-2026-47330, CVE-2026-47331, CVE-2026-47332, CVE-2026-47333, CVE-2026-47334, CVE-2026-47335, CVE-2026-47336, CVE-2026-47337 Package Information: https://launchpad.net/ubuntu/+source/linux/6.8.0-124.124 https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1057.60 https://launchpad.net/ubuntu/+source/linux-aws-fips/6.8.0-1057.60+fips1 https://launchpad.net/ubuntu/+source/linux-azure/6.8.0-1058.64 https://launchpad.net/ubuntu/+source/linux-fips/6.8.0-124.124+fips1 https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1060.63 https://launchpad.net/ubuntu/+source/linux-gcp-fips/6.8.0-1060.63+fips1 https://launchpad.net/ubuntu/+source/linux-gke/6.8.0-1055.61 https://launchpad.net/ubuntu/+source/linux-gkeop/6.8.0-1042.45 https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1057.58 https://launchpad.net/ubuntu/+source/linux-nvidia/6.8.0-1055.58 https://launchpad.net/ubuntu/+source/linux-nvidia-lowlatency/6.8.0-1055.58.1 https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/6.8.0-1026.26 https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1054.55 https://launchpad.net/ubuntu/+source/linux-raspi/6.8.0-1057.61 https://launchpad.net/ubuntu/+source/linux-raspi-realtime/6.8.0-2046.47 https://launchpad.net/ubuntu/+source/linux-realtime/6.8.1-1052.53 https://launchpad.net/ubuntu/+source/linux-aws-6.8/6.8.0-1057.60~22.04.1 https://launchpad.net/ubuntu/+source/linux-gcp-6.8/6.8.0-1060.63~22.04.1 https://launchpad.net/ubuntu/+source/linux-hwe-6.8/6.8.0-124.124~22.04.1 https://launchpad.net/ubuntu/+source/linux-ibm-6.8/6.8.0-1057.58~22.04.1 https://launchpad.net/ubuntu/+source/linux-nvidia-6.8/6.8.0-1055.58~22.04.1 https://launchpad.net/ubuntu/+source/linux-oracle-6.8/6.8.0-1054.55~22.04.1 https://launchpad.net/ubuntu/+source/linux-realtime-6.8/6.8.1-1052.53~22.04.1 . Several security issues fixed in Linux kernel for Ubuntu 24.04 and 22.04 LTS, with updates required for local attack mitigations.. Ubuntu Security, Linux Kernel Update, Privilege Escalation, Vulnerability Fixes, Linux Security Notice. . Severity: Critical. LinuxSecurity.com Team
Jun 02, 2026
•Critical
Ubuntu
172
security advisorycriticalUbuntuUbuntu 22.04 LTS Security Advisory USN-8279-1 Linux Kernel Critical Update
Several security issues were fixed in the Linux kernel.. ========================================================================== Ubuntu Security Notice USN-8279-1 May 19, 2026 linux, linux-aws, linux-aws-5.15, linux-aws-fips, linux-fips, linux-gcp, linux-gcp-fips, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-kvm, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-realtime vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS - linux-gke: Linux kernel for Google Container Engine (GKE) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-intel-iotg: Linux kernel for Intel IoT platforms - linux-kvm: Linux kernel for cloud environments - linux-nvidia: Linux kernel for NVIDIA systems - linux-nvidia-tegra: Linux kernel for NVIDIA Tegra systems - linux-oracle: Linux kernel for Oracle Cloud systems - linux-raspi: Linux kernel for Raspberry Pi systems - linux-realtime: Linux kernel for Real-time systems - linux-aws-5.15: Linux kernel for Amazon Web Services (AWS) systems - linux-hwe-5.15: Linux hardware enablement (HWE) kernel - linux-ibm-5.15: Linux kernel for IBM cloud systems - linux-intel-iotg-5.15: Linux kernel for Intel IoT platforms - linux-nvidia-tegra-5.15: Linux kernel for NVIDIA Tegra systems Details: It was discovered that the Linuxkernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Ethernet bonding driver; - SMB network file system; - Netfilter; - io_uring subsystem; - Packet sockets; - TLS protocol; (CVE-2024-35862, CVE-2024-50060, CVE-2026-23274, CVE-2026-23351, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS linux-image-5.15.0-1060-nvidia-tegra 5.15.0-1060.60 linux-image-5.15.0-1060-nvidia-tegra-rt 5.15.0-1060.60 linux-image-5.15.0-1091-gkeop 5.15.0-1091.99 linux-image-5.15.0-1100-kvm 5.15.0-1100.105 linux-image-5.15.0-1102-ibm 5.15.0-1102.105 linux-image-5.15.0-1102-raspi 5.15.0-1102.105 linux-image-5.15.0-1103-intel-iotg 5.15.0-1103.109 linux-image-5.15.0-1103-nvidia 5.15.0-1103.104 linux-image-5.15.0-1103-nvidia-lowlatency 5.15.0-1103.104 linux-image-5.15.0-1104-gke 5.15.0-1104.110 linux-image-5.15.0-1105-oracle 5.15.0-1105.111 linux-image-5.15.0-1107-realtime 5.15.0-1107.116 Available with Ubuntu Pro linux-image-5.15.0-1108-aws 5.15.0-1108.115 linux-image-5.15.0-1108-aws-64k 5.15.0-1108.115 linux-image-5.15.0-1108-aws-fips 5.15.0-1108.115+fips1 Available with Ubuntu Pro linux-image-5.15.0-1108-gcp 5.15.0-1108.117 linux-image-5.15.0-1108-gcp-fips 5.15.0-1108.117+fips1 Available with Ubuntu Pro linux-image-5.15.0-179-fips 5.15.0-179.189+fips1 Available with Ubuntu Pro linux-image-5.15.0-179-generic 5.15.0-179.189 linux-image-5.15.0-179-generic-64k 5.15.0-179.189 linux-image-5.15.0-179-generic-lpae 5.15.0-179.189 linux-image-aws-5.15 5.15.0.1108.111 linux-image-aws-64k-5.15 5.15.0.1108.111 linux-image-aws-64k-lts-22.04 5.15.0.1108.111 linux-image-aws-fips 5.15.0.1108.104 Available with Ubuntu Pro linux-image-aws-fips-5.15 5.15.0.1108.104 Available with Ubuntu Pro linux-image-aws-lts-22.04 5.15.0.1108.111 linux-image-fips 5.15.0.179.105 Available with Ubuntu Pro linux-image-fips-5.15 5.15.0.179.105 Available with Ubuntu Pro linux-image-gcp-5.15 5.15.0.1108.104 linux-image-gcp-fips 5.15.0.1108.98 Available with Ubuntu Pro linux-image-gcp-fips-5.15 5.15.0.1108.98 Available with Ubuntu Pro linux-image-gcp-lts-22.04 5.15.0.1108.104 linux-image-generic 5.15.0.179.163 linux-image-generic-5.15 5.15.0.179.163 linux-image-generic-64k 5.15.0.179.163 linux-image-generic-64k-5.15 5.15.0.179.163 linux-image-generic-lpae 5.15.0.179.163 linux-image-generic-lpae-5.15 5.15.0.179.163 linux-image-gke 5.15.0.1104.103 linux-image-gke-5.15 5.15.0.1104.103 linux-image-gkeop 5.15.0.1091.90 linux-image-gkeop-5.15 5.15.0.1091.90 linux-image-ibm 5.15.0.1102.98 linux-image-ibm-5.15 5.15.0.1102.98 linux-image-intel-iotg 5.15.0.1103.102 linux-image-intel-iotg-5.15 5.15.0.1103.102 linux-image-kvm 5.15.0.1100.96 linux-image-kvm-5.15 5.15.0.1100.96 linux-image-nvidia 5.15.0.1103.103 linux-image-nvidia-5.15 5.15.0.1103.103 linux-image-nvidia-lowlatency 5.15.0.1103.103 linux-image-nvidia-lowlatency-5.15 5.15.0.1103.103 linux-image-nvidia-tegra 5.15.0.1060.60 linux-image-nvidia-tegra-5.15 5.15.0.1060.60 linux-image-nvidia-tegra-rt 5.15.0.1060.60 linux-image-nvidia-tegra-rt-5.15 5.15.0.1060.60 linux-image-oracle-5.15 5.15.0.1105.101 linux-image-oracle-lts-22.04 5.15.0.1105.101 linux-image-raspi 5.15.0.1102.100 linux-image-raspi-5.15 5.15.0.1102.100 linux-image-raspi-nolpae 5.15.0.1102.100 linux-image-realtime 5.15.0.1107.111 Available with Ubuntu Pro linux-image-realtime-5.15 5.15.0.1107.111 Available with Ubuntu Pro linux-image-virtual 5.15.0.179.163 linux-image-virtual-5.15 5.15.0.179.163 Ubuntu 20.04 LTS linux-image-5.15.0-1060-nvidia-tegra 5.15.0-1060.60~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1060-nvidia-tegra-rt 5.15.0-1060.60~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1102-ibm 5.15.0-1102.105~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1103-intel-iotg 5.15.0-1103.109~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-1108-aws 5.15.0-1108.115~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-179-generic 5.15.0-179.189~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-179-generic-64k 5.15.0-179.189~20.04.1 Available with Ubuntu Pro linux-image-5.15.0-179-generic-lpae 5.15.0-179.189~20.04.1 Available with Ubuntu Pro linux-image-aws 5.15.0.1108.115~20.04.1 Available with Ubuntu Pro linux-image-aws-5.15 5.15.0.1108.115~20.04.1 Available with Ubuntu Pro linux-image-generic-5.15 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-generic-64k-5.15 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-generic-64k-hwe-20.04 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-generic-hwe-20.04 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-generic-lpae-5.15 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-generic-lpae-hwe-20.04 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-ibm 5.15.0.1102.105~20.04.1 Available with Ubuntu Pro linux-image-ibm-5.15 5.15.0.1102.105~20.04.1 Available with Ubuntu Pro linux-image-intel 5.15.0.1103.109~20.04.1 Available with Ubuntu Pro linux-image-intel-iotg 5.15.0.1103.109~20.04.1 Available with Ubuntu Pro linux-image-intel-iotg-5.15 5.15.0.1103.109~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra 5.15.0.1060.60~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra-5.15 5.15.0.1060.60~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra-rt 5.15.0.1060.60~20.04.1 Available with Ubuntu Pro linux-image-nvidia-tegra-rt-5.15 5.15.0.1060.60~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04b 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04c 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-oem-20.04d 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-virtual-5.15 5.15.0.179.189~20.04.1 Available with Ubuntu Pro linux-image-virtual-hwe-20.04 5.15.0.179.189~20.04.1 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-8279-1 CVE-2024-35862, CVE-2024-50060, CVE-2026-23274, CVE-2026-23351, CVE-2026-31419, CVE-2026-31431, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078 Package Information: https://launchpad.net/ubuntu/+source/linux/5.15.0-179.189 https://launchpad.net/ubuntu/+source/linux-aws/5.15.0-1108.115 https://launchpad.net/ubuntu/+source/linux-aws-fips/5.15.0-1108.115+fips1 https://launchpad.net/ubuntu/+source/linux-fips/5.15.0-179.189+fips1 https://launchpad.net/ubuntu/+source/linux-gcp/5.15.0-1108.117 https://launchpad.net/ubuntu/+source/linux-gcp-fips/5.15.0-1108.117+fips1 https://launchpad.net/ubuntu/+source/linux-gke/5.15.0-1104.110 https://launchpad.net/ubuntu/+source/linux-gkeop/5.15.0-1091.99 https://launchpad.net/ubuntu/+source/linux-ibm/5.15.0-1102.105 https://launchpad.net/ubuntu/+source/linux-intel-iotg/5.15.0-1103.109 https://launchpad.net/ubuntu/+source/linux-kvm/5.15.0-1100.105 https://launchpad.net/ubuntu/+source/linux-nvidia/5.15.0-1103.104 https://launchpad.net/ubuntu/+source/linux-nvidia-tegra/5.15.0-1060.60 https://launchpad.net/ubuntu/+source/linux-oracle/5.15.0-1105.111 https://launchpad.net/ubuntu/+source/linux-raspi/5.15.0-1102.105 https://launchpad.net/ubuntu/+source/linux-realtime/5.15.0-1107.116 . Several security flaws in the Linux kernel addressed through Ubuntu's USN-8279-1 update require immediate action for users.. Linux Kernel Security, Ubuntu Security Update, Privilege Escalation Fix, Critical Security Patch. . Severity: Critical. LinuxSecurity.com Team
May 19, 2026
•Critical
Ubuntu
100
security advisorymoderateSuSESUSE Linux Micro 6.2 Advisory 2026-20758-1 CVE-2024-24853 Moderate Risk
An update that solves two vulnerabilities and has three fixes can now be installed.. # Security update for ucode-intel Announcement ID: SUSE-SU-2026:20758-1 Release Date: 2026-03-19T09:31:38Z Rating: moderate References: * bsc#1229129 * bsc#1230400 * bsc#1249138 * bsc#1253319 * bsc#1258046 Cross-References: * CVE-2024-24853 * CVE-2025-31648 CVSS scores: * CVE-2024-24853 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-24853 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2025-31648 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N * CVE-2025-31648 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.2 An update that solves two vulnerabilities and has three fixes can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): * CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129). * CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046). * Intel CPU Microcode was updated to the 20251111 release (bsc#1253319): * Update for functional issues. * switch the supplements to use supplements +kernel to allow moving a installation to Intel hardware (bsc#1249138) * Intel CPU Microcode was updated to the 20241029 release (bsc#1230400): * Update for functional issues. ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.2 zypper in -t patch SUSE-SL-Micro-6.2-415=1 ## Package List: * SUSE Linux Micro 6.2 (x86_64) * ucode-intel-20260210-160000.1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24853.html * https://www.suse.com/security/cve/CVE-2025-31648.html * https://bugzilla.suse.com/show_bug.cgi?id=1229129 * https://bugzilla.suse.com/show_bug.cgi?id=1230400 * https://bugzilla.suse.com/show_bug.cgi?id=1249138 * https://bugzilla.suse.com/show_bug.cgi?id=1253319 * https://bugzilla.suse.com/show_bug.cgi?id=1258046 . SUSE updates ucode-intel to resolve two issues including escalation of privilege. Reboot recommended post-installation.. SUSE Micro Update, Intel Microcode Fix, Privilege Escalation. . LinuxSecurity.com Team
Mar 24, 2026
SuSE
100
security advisorySuSEimportantSUSE Linux Micro 6.0 ucode-intel Important Escalation Issues 20522-1
An update that solves two vulnerabilities can now be installed.. # Security update for ucode-intel Announcement ID: SUSE-SU-2026:20522-1 Release Date: 2026-02-26T10:48:45Z Rating: important References: * bsc#1229129 * bsc#1258046 Cross-References: * CVE-2024-24853 * CVE-2025-31648 CVSS scores: * CVE-2024-24853 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-24853 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2025-31648 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N * CVE-2025-31648 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Micro 6.0 An update that solves two vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20260210 release (bsc#1258046): * CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access (bsc#1229129). * CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege (bsc#1258046). ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Micro 6.0 zypper in -t patch SUSE-SLE-Micro-6.0-598=1 ## Package List: * SUSE Linux Micro 6.0 (x86_64) * ucode-intel-20260210-1.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24853.html * https://www.suse.com/security/cve/CVE-2025-31648.html * https://bugzilla.suse.com/show_bug.cgi?id=1229129 * https://bugzilla.suse.com/show_bug.cgi?id=1258046 . SUSE's ucode-intel update addresses critical issues to ensure system security and stability. Reboot is required post-installation.. SUSE ucode-intel update, Intel CPU Microcode, privilege escalation fix. . Severity: Important. LinuxSecurity.com Team
Feb 27, 2026
•Important
SuSE
100
security advisorySuSEimportantSUSE 12 GA Intel Firmware Key Vulnerability Resolution SUSE-SU-2026-0735-2
An update that solves two vulnerabilities can now be installed.. # Security update for ucode-intel Announcement ID: SUSE-SU-2026:0670-1 Release Date: 2026-02-26T15:21:41Z Rating: important References: * bsc#1229129 * bsc#1258046 Cross-References: * CVE-2024-24853 * CVE-2025-31648 CVSS scores: * CVE-2024-24853 ( SUSE ): 7.3 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:P/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H * CVE-2024-24853 ( SUSE ): 7.2 CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H * CVE-2025-31648 ( SUSE ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( SUSE ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N * CVE-2025-31648 ( NVD ): 1.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:H/UI:N/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2025-31648 ( NVD ): 3.9 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N Affected Products: * SUSE Linux Enterprise Server 11 SP4 * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE An update that solves two vulnerabilities can now be installed. ## Description: This update for ucode-intel fixes the following issues: * Intel CPU Microcode was updated to the 20260210 release (bsc#1258046) * CVE-2024-24853: Updated fix for incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (bsc#1229129) * CVE-2025-31648: Improper handling of values in the microcode flow for some Intel Processor Family may allow an escalation of privilege. (bsc#1258046) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommendedinstallation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-670=1 * SUSE Linux Enterprise Server 11 SP4 zypper in -t patch SUSE-SLE-SERVER-11-SP4-LTSS-EXTREME-CORE-2026-670=1 ## Package List: * SUSE Linux Enterprise Server 11 SP4 LTSS EXTREME CORE (x86_64) * microcode_ctl-1.17-102.83.90.1 * SUSE Linux Enterprise Server 11 SP4 (x86_64) * microcode_ctl-1.17-102.83.90.1 ## References: * https://www.suse.com/security/cve/CVE-2024-24853.html * https://www.suse.com/security/cve/CVE-2025-31648.html * https://bugzilla.suse.com/show_bug.cgi?id=1229129 * https://bugzilla.suse.com/show_bug.cgi?id=1258046 . Critical security update for SUSE addressing important Intel microcode issues and potential privilege escalations now available.. SUSE Update, Intel Microcode, Important Fix, Security Patch, Privilege Escalation. . Severity: Important. LinuxSecurity.com Team
Feb 26, 2026
•Important
SuSE
203
security advisorylocal accessescalationMageia 9 Microcode Update Critical Escalation Fix MGASA-2026-0043
MGASA-2026-0043 - Updated microcode packages fix security vulnerabilities. MGASA-2026-0043 - Updated microcode packages fix security vulnerabilities Publication date: 18 Feb 2026 URL: https://advisories.mageia.org/MGASA-2026-0043.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-24853, CVE-2025-31648 Description: The updated package updates AMD CPUs microcodes and fixes security vulnerabilities in Intel CPUs microcodes: Incorrect behavior order in transition between executive monitor and SMI transfer monitor (STM) in some Intel(R) Processor may allow a privileged user to potentially enable escalation of privilege via local access. (CVE-2024-24853) Improper handling of values in the microcode flow for some Intel(R) Processor Family may allow an escalation of privilege. Startup code and smm adversary with a privileged user combined with a high complexity attack may enable escalation of privilege. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (low), integrity (low) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (low), integrity (low) and availability (none) impacts. (CVE-2025-31648) References: - https://bugs.mageia.org/show_bug.cgi?id=35130 - https://github.com/intel/Intel-Linux-Processor-Microcode-Data-Files/releases/tag/microcode-20260210-rev1 - https://www.cve.org/CVERecord?id=CVE-2024-24853 - https://www.cve.org/CVERecord?id=CVE-2025-31648 SRPMS: - 9/nonfree/microcode-0.20260210-1.mga9.nonfree . Mageia updates microcode packages addressing security issues in Intel CPUs, critical for system integrity and access escalation.. Mageia Microcode Update, CPU Security Fix, Intel Privilege Escalation, AMD Microcode, Mageia Security Advisory. . Severity: Critical. LinuxSecurity.com Team
Feb 18, 2026
•Critical
Mageia
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!