Ubuntu 25.10 Kernel Critical Privilege Escalation USN-8374-1
ubuntu
June 2, 2026
Several security issues were fixed in the Linux kernel.
Summary
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-aws-6.17: Linux kernel for Amazon Web Services (AWS) systems - linux-gcp-6.17: Linux kernel for Google Cloud Platform (GCP) systems Details: It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431) It was discovered that the Linux kernel did not properly handle shared page fragments during socket buffer operations, collectively known as Dirty Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the RxRPC networking subsystem when processing paged fragments. A local attacker could use this to escalate privi...
Read the Full Advisory
Topics Covered
Update Instructions
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 linux-image-6.17.0-1018-gcp 6.17.0-1018.19 linux-image-6.17.0-1018-gcp-64k 6.17.0-1018.19 linux-image-gcp 6.17.0-1018.19 linux-image-gcp-6.17 6.17.0-1018.19 linux-image-gcp-64k 6.17.0-1018.19 linux-image-gcp-64k-6.17 6.17.0-1018.19 Ubuntu 24.04 LTS linux-image-6.17.0-1017-aws 6.17.0-1017.17~24.04.1 linux-image-6.17.0-1017-aws-64k 6.17.0-1017.17~24.04.1 linux-image-6.17.0-1018-gcp 6.17.0-1018.19~24.04.1 linux-image-6.17.0-1018-gcp-64k 6.17.0-1018.19~24.04.1 linux-image-aws 6.17.0-1017.17~24.04.1 linux-image-aws-6.17 6.17.0-1017.17~24.04.1 linux-image-aws-64k 6.17.0-1017.17~24.04.1 linux-image-aws-64k-6.17 6.17.0-1017.17~24.04.1 linux-image-gcp 6.17.0-1018.19~24.04.1 linux-image-gcp-6.17 6.17.0-1018.19~24.04.1 linux-image-gcp-64k 6.17.0-1018.19~24.04.1 linux-image-gcp-64k-6.17 6.17.0-1018.19~24.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
References
https://ubuntu.com/security/notices/USN-8374-1
CVE-2025-71088, CVE-2025-71090, CVE-2025-71127, CVE-2025-71134,
CVE-2025-71139, CVE-2025-71141, CVE-2025-71142, CVE-2025-71144,
CVE-2025-71152, CVE-2025-71155, CVE-2026-23274, CVE-2026-23351,
CVE-2026-23394, CVE-2026-31419, CVE-2026-31431, CVE-2026-31504,
CVE-2026-31533, CVE-2026-31676, CVE-2026-43033, CVE-2026-43077,
CVE-2026-43078, CVE-2026-43284, CVE-2026-43494, CVE-2026-43500,
CVE-2026-43503, CVE-2026-45966, CVE-2026-45998, CVE-2026-46000,
CVE-2026-46028, CVE-2026-46300, CVE-2026-46333, CVE-2026-47326,
CVE-2026-47327, CVE-2026-47328, CVE-2026-47329, CVE-2026-47330,
CVE-2026-47332, CVE-2026-47333, CVE-2026-47334, CVE-2026-47337
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Ubuntu Security Notice USN-8374-1
Topics Covered
Package Information
https://launchpad.net/ubuntu/+source/linux-gcp/6.17.0-1018.19 https://launchpad.net/ubuntu/+source/linux-aws-6.17/6.17.0-1017.17~24.04.1 https://launchpad.net/ubuntu/+source/linux-gcp-6.17/6.17.0-1018.19~24.04.1
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!