Home / mailings [USN-8904-1] Linux kernel (Azure) vulnerabilities
Posted on 08 October 2026
Ubuntu Security==========================================================================Ubuntu Security Notice USN-8904-1
October 08, 2026
linux-azure, linux-azure-6.8, linux-azure-fde, linux-azure-fde-6.8,
linux-azure-fips vulnerabilities
==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 24.04 LTS
- Ubuntu 22.04 LTS
Summary:
Several security issues were fixed in the Linux kernel.
Software Description:
- linux-azure: Linux kernel for Microsoft Azure Cloud systems
- linux-azure-fde: Linux kernel for Microsoft Azure CVM cloud systems
- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS
- linux-azure-6.8: Linux kernel for Microsoft Azure cloud systems
- linux-azure-fde-6.8: Linux kernel for Microsoft Azure CVM cloud systems
Details:
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM32 architecture;
- ARM64 architecture;
- MIPS architecture;
- x86 architecture;
- Intel NPU Driver;
- Auxiliary display drivers;
- Compressed RAM block device driver;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra SoC drivers;
- SPI subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB Device Class drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- Framebuffer layer;
- Ext4 file system;
- FUSE (File system in Userspace);
- File systems infrastructure;
- SMB network file system;
- Mellanox drivers;
- Network traffic control;
- Bluetooth subsystem;
- IPv4 networking;
- Netfilter;
- IPv6 networking;
- Network sockets;
- XFRM subsystem;
- IPC subsystem;
- Signal handling mechanism;
- Memory management;
- 6LoWPAN network protocol;
- IEEE 802 network protocols;
- B.A.T.M.A.N. meshing protocol;
- Ethernet bridge;
- Networking core;
- Devlink API;
- Ethtool driver;
- Handshake API;
- HSR network protocol;
- IEEE802154.4 network protocol;
- IUCV driver;
- L2TP protocol;
- MAC80211 subsystem;
- Management Component Transport Protocol (MCTP);
- Multipath TCP;
- NetLabel subsystem;
- NFC subsystem;
- Open vSwitch;
- Qualcomm IPC Router (QRTR);
- RDS protocol;
- RxRPC session sockets;
- SCTP protocol;
- SMC sockets;
- VMware vSockets driver;
- Wireless networking;
- ALSA framework;
- Simple audio multiplexer codec driver;
- Wolfson Microelectronics audio codecs;
- KVM subsystem;
(CVE-2025-68296, CVE-2025-68768, CVE-2026-23346, CVE-2026-31663,
CVE-2026-43116, CVE-2026-43219, CVE-2026-43240, CVE-2026-43303,
CVE-2026-43311, CVE-2026-43331, CVE-2026-45850, CVE-2026-45930,
CVE-2026-46203, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322,
CVE-2026-52908, CVE-2026-52910, CVE-2026-52913, CVE-2026-52917,
CVE-2026-52923, CVE-2026-52927, CVE-2026-52929, CVE-2026-52930,
CVE-2026-52934, CVE-2026-52935, CVE-2026-52939, CVE-2026-52942,
CVE-2026-52943, CVE-2026-52944, CVE-2026-52947, CVE-2026-52948,
CVE-2026-53080, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,
CVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,
CVE-2026-53140, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,
CVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,
CVE-2026-53154, CVE-2026-53156, CVE-2026-53158, CVE-2026-53159,
CVE-2026-53160, CVE-2026-53161, CVE-2026-53168, CVE-2026-53177,
CVE-2026-53181, CVE-2026-53182, CVE-2026-53183, CVE-2026-53184,
CVE-2026-53185, CVE-2026-53190, CVE-2026-53194, CVE-2026-53195,
CVE-2026-53196, CVE-2026-53198, CVE-2026-53199, CVE-2026-53202,
CVE-2026-53205, CVE-2026-53208, CVE-2026-53209, CVE-2026-53210,
CVE-2026-53213, CVE-2026-53214, CVE-2026-53217, CVE-2026-53218,
CVE-2026-53219, CVE-2026-53220, CVE-2026-53223, CVE-2026-53227,
CVE-2026-53229, CVE-2026-53230, CVE-2026-53232, CVE-2026-53236,
CVE-2026-53237, CVE-2026-53238, CVE-2026-53239, CVE-2026-53242,
CVE-2026-53245, CVE-2026-53249, CVE-2026-53251, CVE-2026-53252,
CVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,
CVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,
CVE-2026-53265, CVE-2026-53266, CVE-2026-53267, CVE-2026-53268,
CVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53274,
CVE-2026-53275, CVE-2026-53329, CVE-2026-53331, CVE-2026-53332,
CVE-2026-53336, CVE-2026-53337, CVE-2026-53339, CVE-2026-53343,
CVE-2026-53345, CVE-2026-53347, CVE-2026-53349, CVE-2026-53350,
CVE-2026-53352, CVE-2026-53353, CVE-2026-53356, CVE-2026-53358,
CVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,
CVE-2026-63871, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,
CVE-2026-63881, CVE-2026-63882, CVE-2026-63883, CVE-2026-63884,
CVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,
CVE-2026-63893, CVE-2026-63895, CVE-2026-63896, CVE-2026-63897,
CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,
CVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,
CVE-2026-63906, CVE-2026-63908, CVE-2026-63909, CVE-2026-63913,
CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917,
CVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63925,
CVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63930,
CVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942,
CVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,
CVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63952,
CVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,
CVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63964,
CVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63971,
CVE-2026-63973, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976,
CVE-2026-63980, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,
CVE-2026-64001, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004,
CVE-2026-64005, CVE-2026-64006, CVE-2026-64009, CVE-2026-64010,
CVE-2026-64011, CVE-2026-64012, CVE-2026-64014, CVE-2026-64026,
CVE-2026-64090, CVE-2026-64093, CVE-2026-64094, CVE-2026-64095,
CVE-2026-64099, CVE-2026-64123, CVE-2026-64131, CVE-2026-64222,
CVE-2026-64233, CVE-2026-64234, CVE-2026-64237, CVE-2026-64239,
CVE-2026-64240, CVE-2026-64242, CVE-2026-64243, CVE-2026-64524,
CVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-72064,
CVE-2026-72065, CVE-2026-92502)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 24.04 LTS
linux-image-6.8.0-1068-azure-fde 6.8.0-1068.75
linux-image-6.8.0-1069-azure-fips 6.8.0-1069.77+fips1
Available with Ubuntu Pro
linux-image-6.8.0-1070-azure 6.8.0-1070.78
linux-image-azure-6.8 6.8.0-1070.78
linux-image-azure-fde-6.8 6.8.0-1068.75
linux-image-azure-fde-lts-24.04 6.8.0-1068.75
linux-image-azure-fips 6.8.0-1069.77+fips1
Available with Ubuntu Pro
linux-image-azure-fips-6.8 6.8.0-1069.77+fips1
Available with Ubuntu Pro
linux-image-azure-lts-24.04 6.8.0-1070.78
Ubuntu 22.04 LTS
linux-image-6.8.0-1068-azure-fde 6.8.0-1068.75~22.04.1
linux-image-6.8.0-1070-azure 6.8.0-1070.78~22.04.1
linux-image-azure 6.8.0-1070.78~22.04.1
linux-image-azure-6.8 6.8.0-1070.78~22.04.1
linux-image-azure-fde 6.8.0-1068.75~22.04.1
linux-image-azure-fde-6.8 6.8.0-1068.75~22.04.1
After a standard system update you need to reboot your computer to make
all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.
References:
https://ubuntu.com/security/notices/USN-8904-1
CVE-2025-68296, CVE-2025-68768, CVE-2026-23346, CVE-2026-31663,
CVE-2026-43116, CVE-2026-43219, CVE-2026-43240, CVE-2026-43303,
CVE-2026-43311, CVE-2026-43331, CVE-2026-45850, CVE-2026-45930,
CVE-2026-46203, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322,
CVE-2026-52908, CVE-2026-52910, CVE-2026-52913, CVE-2026-52917,
CVE-2026-52923, CVE-2026-52927, CVE-2026-52929, CVE-2026-52930,
CVE-2026-52934, CVE-2026-52935, CVE-2026-52939, CVE-2026-52942,
CVE-2026-52943, CVE-2026-52944, CVE-2026-52947, CVE-2026-52948,
CVE-2026-53080, CVE-2026-53132, CVE-2026-53133, CVE-2026-53134,
CVE-2026-53135, CVE-2026-53136, CVE-2026-53137, CVE-2026-53138,
CVE-2026-53140, CVE-2026-53143, CVE-2026-53144, CVE-2026-53146,
CVE-2026-53147, CVE-2026-53148, CVE-2026-53149, CVE-2026-53150,
CVE-2026-53154, CVE-2026-53156, CVE-2026-53158, CVE-2026-53159,
CVE-2026-53160, CVE-2026-53161, CVE-2026-53168, CVE-2026-53177,
CVE-2026-53181, CVE-2026-53182, CVE-2026-53183, CVE-2026-53184,
CVE-2026-53185, CVE-2026-53190, CVE-2026-53194, CVE-2026-53195,
CVE-2026-53196, CVE-2026-53198, CVE-2026-53199, CVE-2026-53202,
CVE-2026-53205, CVE-2026-53208, CVE-2026-53209, CVE-2026-53210,
CVE-2026-53213, CVE-2026-53214, CVE-2026-53217, CVE-2026-53218,
CVE-2026-53219, CVE-2026-53220, CVE-2026-53223, CVE-2026-53227,
CVE-2026-53229, CVE-2026-53230, CVE-2026-53232, CVE-2026-53236,
CVE-2026-53237, CVE-2026-53238, CVE-2026-53239, CVE-2026-53242,
CVE-2026-53245, CVE-2026-53249, CVE-2026-53251, CVE-2026-53252,
CVE-2026-53253, CVE-2026-53254, CVE-2026-53255, CVE-2026-53256,
CVE-2026-53261, CVE-2026-53262, CVE-2026-53263, CVE-2026-53264,
CVE-2026-53265, CVE-2026-53266, CVE-2026-53267, CVE-2026-53268,
CVE-2026-53269, CVE-2026-53270, CVE-2026-53273, CVE-2026-53274,
CVE-2026-53275, CVE-2026-53329, CVE-2026-53331, CVE-2026-53332,
CVE-2026-53336, CVE-2026-53337, CVE-2026-53339, CVE-2026-53343,
CVE-2026-53345, CVE-2026-53347, CVE-2026-53349, CVE-2026-53350,
CVE-2026-53352, CVE-2026-53353, CVE-2026-53356, CVE-2026-53358,
CVE-2026-63867, CVE-2026-63868, CVE-2026-63869, CVE-2026-63870,
CVE-2026-63871, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877,
CVE-2026-63881, CVE-2026-63882, CVE-2026-63883, CVE-2026-63884,
CVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,
CVE-2026-63893, CVE-2026-63895, CVE-2026-63896, CVE-2026-63897,
CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901,
CVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905,
CVE-2026-63906, CVE-2026-63908, CVE-2026-63909, CVE-2026-63913,
CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917,
CVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63925,
CVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63930,
CVE-2026-63931, CVE-2026-63933, CVE-2026-63934, CVE-2026-63942,
CVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946,
CVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63952,
CVE-2026-63954, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958,
CVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63964,
CVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63971,
CVE-2026-63973, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976,
CVE-2026-63980, CVE-2026-63985, CVE-2026-63990, CVE-2026-63991,
CVE-2026-64001, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004,
CVE-2026-64005, CVE-2026-64006, CVE-2026-64009, CVE-2026-64010,
CVE-2026-64011, CVE-2026-64012, CVE-2026-64014, CVE-2026-64026,
CVE-2026-64090, CVE-2026-64093, CVE-2026-64094, CVE-2026-64095,
CVE-2026-64099, CVE-2026-64123, CVE-2026-64131, CVE-2026-64222,
CVE-2026-64233, CVE-2026-64234, CVE-2026-64237, CVE-2026-64239,
CVE-2026-64240, CVE-2026-64242, CVE-2026-64243, CVE-2026-64524,
CVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-72064,
CVE-2026-72065, CVE-2026-92502
Package Information:
https://launchpad.net/ubuntu/+source/linux-azure/6.8.0-1070.78
https://launchpad.net/ubuntu/+source/linux-azure-fde/6.8.0-1068.75
https://launchpad.net/ubuntu/+source/linux-azure-fips/6.8.0-1069.77+fips1
https://launchpad.net/ubuntu/+source/linux-azure-6.8/6.8.0-1070.78~22.04.1
https://launchpad.net/ubuntu/+source/linux-azure-fde-6.8/6.8.0-1068.75~22.04.1
--===============3262851334788333967==Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
