Home / mailingsPDF  

[USN-8226-2] kmod update

Posted on 30 April 2026
Ubuntu Security

==========================================================================Ubuntu Security Notice USN-8226-2
April 30, 2026

kmod update
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:

- Ubuntu 20.04 LTS
- Ubuntu 18.04 LTS
- Ubuntu 16.04 LTS
- Ubuntu 14.04 LTS

Summary:

kmod has been updated to block loading of the algif_aead kernel module.

Software Description:
- kmod: tools for managing Linux kernel modules

Details:

USN-8226-1 added a mitigation to kmod to disable loading the algif_aead
module. This update adds the same mitigation to Ubuntu 14.04 LTS,
Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that the Linux kernel algif_aead module contained a logic
flaw allowing a local attacker to escalate privileges to root. This update
to the kmod package disables loading the algif_aead module as a measure to
mitigate the issue until kernel updates are made available.

See the following URL for more information
https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available

Update instructions:

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 20.04 LTS
kmod 27-1ubuntu2.1+esm1
Available with Ubuntu Pro

Ubuntu 18.04 LTS
kmod 24-1ubuntu3.5+esm1
Available with Ubuntu Pro

Ubuntu 16.04 LTS
kmod 22-1ubuntu5.2+esm1
Available with Ubuntu Pro

Ubuntu 14.04 LTS
kmod 15-0ubuntu7+esm1
Available with Ubuntu Pro

After a standard system update you need to reboot your computer to make
all the necessary changes.

References:
https://ubuntu.com/security/notices/USN-8226-2
https://ubuntu.com/security/notices/USN-8226-1
CVE-2026-31431

--===============4922555935169636646==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature

 

TOP