<?xml version='1.0' encoding='UTF-8'?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0"><channel><title>Ubuntu security notices</title><link>https://ubuntu.com/security/notices/rss.xml</link><description>Recent content on Ubuntu security notices</description><atom:link href="https://ubuntu.com/security/notices/rss.xml" rel="self"/><copyright>2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd.</copyright><docs>http://www.rssboard.org/rss-specification</docs><generator>Feedgen</generator><lastBuildDate>Fri, 06 Nov 2026 12:02:44 +0000</lastBuildDate><item><title>USN-9003-1: Linux kernel (NVIDIA) vulnerabilities</title><link>https://ubuntu.com/security/notices/USN-9003-1</link><description>It was discovered that some AMD processors did not properly perform Reverse
Map Table (RMP) checks when the IOMMU accessed certain host buffers. A
local attacker with hypervisor access could possibly use this to trigger an
out-of-bounds condition and compromise the integrity of SEV-SNP guest
memory. (CVE-2023-20585)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
  - ARM64 architecture;
  - NVDIMM (Non-Volatile Memory Device) drivers;
  - Handshake API;
  - ARM32 architecture;
  - MIPS architecture;
  - OpenRISC architecture;
  - PowerPC architecture;
  - RISC-V architecture;
  - S390 architecture;
  - x86 architecture;
  - Cryptographic API;
  - Compute Acceleration Framework;
  - Intel NPU Driver;
  - ACPI drivers;
  - Android drivers;
  - Serial ATA and Parallel ATA drivers;
  - Drivers core;
  - DRBD Distributed Replicated Block Device drivers;
  - Rados block device (RBD) driver;
  - Ublk userspace block driver;
  - Bluetooth drivers;
  - Cdrom driver;
  - Character device driver;
  - TPM device driver;
  - Data acquisition framework and drivers;
  - Hardware crypto device drivers;
  - CXL (Compute Express Link) drivers;
  - DAX dirext access to differentiated memory framework;
  - DIBS (Direct Internal Buffer Sharing) drivers;
  - Buffer Sharing and Synchronization framework;
  - DMA engine subsystem;
  - DPLL subsystem;
  - EDAC drivers;
  - FireWire subsystem;
  - Arm Firmware Framework for ARMv8-A(FFA);
  - ARM SCMI message protocol;
  - Intel Stratix 10 firmware drivers;
  - FPGA Framework;
  - GPIB drivers;
  - GPIO subsystem;
  - GPU drivers;
  - HID subsystem;
  - Microsoft Hyper-V drivers;
  - Hardware monitoring drivers;
  - CoreSight HW tracing drivers;
  - Intel Trace Hub HW tracing drivers;
  - I2C subsystem;
  - I3C subsystem;
  - IIO subsystem;
  - IIO ADC drivers;
  - IIO Magnetometer sensors drivers;
  - InfiniBand drivers;
  - Input Device (Miscellaneous) drivers;
  - IOMMU subsystem;
  - IRQ chip drivers;
  - LED subsystem;
  - Mailbox framework;
  - Multiple devices driver;
  - Media drivers;
  - MemoryStick subsystem;
  - Multifunction device drivers;
  - Intel Management Engine Interface driver;
  - Amazon Nitro Secure Module driver;
  - MMC subsystem;
  - MTD block device drivers;
  - Network drivers;
  - Ethernet bonding driver;
  - Mellanox network drivers;
  - Microsoft Azure Network Adapter (MANA) driver;
  - Texas Instruments network drivers;
  - MediaTek network drivers;
  - NTB driver;
  - NVME drivers;
  - Device tree and open firmware driver;
  - Operating Performance Points (OPP) driver;
  - PCI subsystem;
  - Pin controllers subsystem;
  - x86 platform drivers;
  - i.MX PM domains;
  - MediaTek PM domains;
  - Power supply drivers;
  - PTP clock framework;
  - RapidIO drivers;
  - Voltage and Current Regulator drivers;
  - Remote Processor subsystem;
  - MPAM driver;
  - Reset controller framework;
  - Real Time Clock drivers;
  - S/390 drivers;
  - SCSI subsystem;
  - Xilinx SoC drivers;
  - SoundWire subsystem;
  - SPI subsystem;
  - Media staging drivers;
  - Media Oriented Systems Transport (MOST) driver;
  - NVIDIA Tegra embedded controller (NVEC) staging driver;
  - Realtek RTL8723BS SDIO drivers;
  - TCM subsystem;
  - TTY drivers;
  - UFS subsystem;
  - USB DSL drivers;
  - USB core drivers;
  - DesignWare USB3 driver;
  - USB Gadget drivers;
  - USB Host Controller drivers;
  - USB Dual Role (OTG-ready) Controller drivers;
  - USB Serial drivers;
  - vDPA drivers;
  - VFIO drivers;
  - Virtio Host (VHOST) subsystem;
  - Framebuffer layer;
  - Virtio drivers;
  - Watchdog drivers;
  - Xen hypervisor drivers;
  - 9P distributed file system;
  - AFS file system;
  - File systems infrastructure;
  - BTRFS file system;
  - Ceph distributed file system;
  - Ext4 file system;
  - F2FS file system;
  - FUSE (File system in Userspace);
  - Journaling layer for block devices (JBD2);
  - Network file systems library;
  - Network file system (NFS) client;
  - Network file system (NFS) server daemon;
  - NTFS3 file system;
  - OCFS2 file system;
  - OrangeFS file system;
  - Overlay file system;
  - Proc file system;
  - SMB network file system;
  - BPF subsystem;
  - File system encryption (fscrypt);
  - MAC80211 subsystem;
  - IPv4 networking;
  - Live Update Orchestrator (LUO);
  - Mellanox drivers;
  - Networking core;
  - Sun RPC protocol;
  - Memory Management;
  - Media input infrastructure;
  - IPv6 networking;
  - Bluetooth subsystem;
  - Wireless networking;
  - IP tunnels definitions;
  - Netfilter;
  - Network traffic control;
  - SCTP protocol;
  - TCP network protocol;
  - XFRM subsystem;
  - RDMA verbs API;
  - User-space API (UAPI);
  - Audit subsystem;
  - Control group (cgroup);
  - Kernel CPU control infrastructure;
  - Kernel exit() syscall;
  - Kernel fork() syscall;
  - Kexec HandOver (KHO);
  - Locking primitives;
  - Scheduler infrastructure;
  - Signal handling mechanism;
  - Timer subsystem;
  - Tracing infrastructure;
  - Codetag library;
  - Resizable hashtable library;
  - Memory management;
  - 9P file system network protocol;
  - Asynchronous Transfer Mode (ATM) subsystem;
  - B.A.T.M.A.N. meshing protocol;
  - Ethernet bridge;
  - CAN network layer;
  - Ceph Core library;
  - HSR network protocol;
  - IEEE802154.4 network protocol;
  - IFE protocol;
  - IUCV driver;
  - KCM (Kernel Connection Multiplexor) sockets driver;
  - Logical Link layer;
  - IEEE 802.15.4 subsystem;
  - MultiProtocol Label Switching driver;
  - Multipath TCP;
  - Open vSwitch;
  - Packet sockets;
  - Phonet protocol;
  - Packet sampling (psample);
  - Qualcomm IPC Router (QRTR);
  - RDS protocol;
  - RxRPC session sockets;
  - SMC sockets;
  - TIPC protocol;
  - TLS protocol;
  - X.25 network layer;
  - AppArmor security module;
  - Integrity Measurement Architecture(IMA) framework;
  - Landlock security;
  - SELinux security module;
  - ALSA framework;
  - HD-audio driver;
  - AMD SoC Alsa drivers;
  - Texas InstrumentS Audio (ASoC/HDA) drivers;
  - SoC Audio for Freescale CPUs drivers;
  - MediaTek ASoC drivers;
  - Amlogic Meson SoC drivers;
  - QCOM ASoC drivers;
  - SoundWire (SDCA) ASoC drivers;
  - SoC audio core drivers;
  - SOF drivers;
  - NVIDIA Tegra ASoC drivers;
  - USB sound devices;
  - Perf tools;
  - KVM subsystem;
(CVE-2026-64349, CVE-2026-64530, CVE-2026-64532, CVE-2026-64533,
CVE-2026-64534, CVE-2026-64535, CVE-2026-64537, CVE-2026-64538,
CVE-2026-64539, CVE-2026-64540, CVE-2026-64541, CVE-2026-64542,
CVE-2026-64543, CVE-2026-64544, CVE-2026-64545, CVE-2026-64546,
CVE-2026-64547, CVE-2026-64548, CVE-2026-64549, CVE-2026-64550,
CVE-2026-64551, CVE-2026-64552, CVE-2026-64553, CVE-2026-64554,
CVE-2026-64555, CVE-2026-64557, CVE-2026-64558, CVE-2026-64559,
CVE-2026-64560, CVE-2026-64561, CVE-2026-64562, CVE-2026-64563,
CVE-2026-64564, CVE-2026-64565, CVE-2026-64566, CVE-2026-64567,
CVE-2026-64568, CVE-2026-64569, CVE-2026-64570, CVE-2026-64571,
CVE-2026-64572, CVE-2026-64573, CVE-2026-64574, CVE-2026-64575,
CVE-2026-64576, CVE-2026-64577, CVE-2026-64578, CVE-2026-64579,
CVE-2026-64580, CVE-2026-64581, CVE-2026-64582, CVE-2026-64583,
CVE-2026-64584, CVE-2026-64585, CVE-2026-64586, CVE-2026-68081,
CVE-2026-68082, CVE-2026-68083, CVE-2026-68093, CVE-2026-68095,
CVE-2026-68096, CVE-2026-68097, CVE-2026-68098, CVE-2026-68099,
CVE-2026-68100, CVE-2026-68104, CVE-2026-68105, CVE-2026-68106,
CVE-2026-68107, CVE-2026-68108, CVE-2026-68109, CVE-2026-68110,
CVE-2026-68111, CVE-2026-68112, CVE-2026-68113, CVE-2026-68114,
CVE-2026-68115, CVE-2026-68116, CVE-2026-68117, CVE-2026-68118,
CVE-2026-68119, CVE-2026-68120, CVE-2026-68121, CVE-2026-68122,
CVE-2026-68123, CVE-2026-68124, CVE-2026-68125, CVE-2026-68126,
CVE-2026-68127, CVE-2026-68128, CVE-2026-68129, CVE-2026-68130,
CVE-2026-68131, CVE-2026-68132, CVE-2026-68133, CVE-2026-68134,
CVE-2026-68135, CVE-2026-68136, CVE-2026-68137, CVE-2026-68138,
CVE-2026-68139, CVE-2026-68140, CVE-2026-68141, CVE-2026-68142,
CVE-2026-68143, CVE-2026-68144, CVE-2026-68145, CVE-2026-68146,
CVE-2026-68147, CVE-2026-68148, CVE-2026-68149, CVE-2026-68150,
CVE-2026-68151, CVE-2026-68152, CVE-2026-68153, CVE-2026-68154,
CVE-2026-68155, CVE-2026-68156, CVE-2026-68157, CVE-2026-68158,
CVE-2026-68159, CVE-2026-68160, CVE-2026-68161, CVE-2026-68162,
CVE-2026-68163, CVE-2026-68164, CVE-2026-68165, CVE-2026-68166,
CVE-2026-68168, CVE-2026-68169, CVE-2026-68170, CVE-2026-68172,
CVE-2026-68173, CVE-2026-68174, CVE-2026-68175, CVE-2026-68176,
CVE-2026-68177, CVE-2026-68178, CVE-2026-68179, CVE-2026-68180,
CVE-2026-68181, CVE-2026-68182, CVE-2026-68183, CVE-2026-68184,
CVE-2026-68186, CVE-2026-68187, CVE-2026-68188, CVE-2026-68189,
CVE-2026-68190, CVE-2026-68191, CVE-2026-68192, CVE-2026-68193,
CVE-2026-68194, CVE-2026-68195, CVE-2026-68196, CVE-2026-68197,
CVE-2026-68198, CVE-2026-68199, CVE-2026-68200, CVE-2026-68201,
CVE-2026-68202, CVE-2026-68203, CVE-2026-68204, CVE-2026-68205,
CVE-2026-68206, CVE-2026-68207, CVE-2026-68208, CVE-2026-68209,
CVE-2026-68210, CVE-2026-68211, CVE-2026-68212, CVE-2026-68213,
CVE-2026-68214, CVE-2026-68215, CVE-2026-68216, CVE-2026-68217,
CVE-2026-68218, CVE-2026-68219, CVE-2026-68220, CVE-2026-68221,
CVE-2026-68222, CVE-2026-68223, CVE-2026-68224, CVE-2026-68225,
CVE-2026-68226, CVE-2026-68227, CVE-2026-68228, CVE-2026-68229,
CVE-2026-68230, CVE-2026-68231, CVE-2026-68232, CVE-2026-68233,
CVE-2026-68234, CVE-2026-68235, CVE-2026-68236, CVE-2026-68237,
CVE-2026-68238, CVE-2026-68239, CVE-2026-68240, CVE-2026-68241,
CVE-2026-68242, CVE-2026-68243, CVE-2026-68244, CVE-2026-68245,
CVE-2026-68246, CVE-2026-68247, CVE-2026-68248, CVE-2026-68249,
CVE-2026-68250, CVE-2026-68251, CVE-2026-68252, CVE-2026-68253,
CVE-2026-68254, CVE-2026-68255, CVE-2026-68256, CVE-2026-68257,
CVE-2026-68258, CVE-2026-68259, CVE-2026-68260, CVE-2026-68261,
CVE-2026-68262, CVE-2026-68263, CVE-2026-68264, CVE-2026-68265,
CVE-2026-68266, CVE-2026-68267, CVE-2026-68268, CVE-2026-68269,
CVE-2026-68270, CVE-2026-68271, CVE-2026-68272, CVE-2026-68273,
CVE-2026-68274, CVE-2026-68275, CVE-2026-68276, CVE-2026-68277,
CVE-2026-68278, CVE-2026-68279, CVE-2026-68280, CVE-2026-68281,
CVE-2026-68282, CVE-2026-68283, CVE-2026-68284, CVE-2026-68286,
CVE-2026-68287, CVE-2026-68288, CVE-2026-68289, CVE-2026-68290,
CVE-2026-68291, CVE-2026-68292, CVE-2026-68293, CVE-2026-68294,
CVE-2026-68296, CVE-2026-68297, CVE-2026-68298, CVE-2026-68299,
CVE-2026-68300, CVE-2026-68301, CVE-2026-68302, CVE-2026-68303,
CVE-2026-68304, CVE-2026-68306, CVE-2026-68307, CVE-2026-68308,
CVE-2026-68309, CVE-2026-68310, CVE-2026-68311, CVE-2026-68312,
CVE-2026-68313, CVE-2026-68314, CVE-2026-68315, CVE-2026-68316,
CVE-2026-68317, CVE-2026-68318, CVE-2026-68319, CVE-2026-68320,
CVE-2026-68321, CVE-2026-68322, CVE-2026-68323, CVE-2026-68324,
CVE-2026-68325, CVE-2026-68326, CVE-2026-68327, CVE-2026-68328,
CVE-2026-68329, CVE-2026-68330, CVE-2026-68331, CVE-2026-68332,
CVE-2026-68333, CVE-2026-68334, CVE-2026-68335, CVE-2026-68336,
CVE-2026-68337, CVE-2026-68338, CVE-2026-68339, CVE-2026-68340,
CVE-2026-68341, CVE-2026-68342, CVE-2026-68343, CVE-2026-68345,
CVE-2026-68346, CVE-2026-68347, CVE-2026-68348, CVE-2026-68349,
CVE-2026-68350, CVE-2026-68351, CVE-2026-68352, CVE-2026-68353,
CVE-2026-68354, CVE-2026-68355, CVE-2026-68356, CVE-2026-68357,
CVE-2026-68358, CVE-2026-68359, CVE-2026-68360, CVE-2026-68361,
CVE-2026-68362, CVE-2026-68363, CVE-2026-68364, CVE-2026-68365,
CVE-2026-68366, CVE-2026-68367, CVE-2026-68368, CVE-2026-68369,
CVE-2026-68370, CVE-2026-68371, CVE-2026-68372, CVE-2026-68373,
CVE-2026-68374, CVE-2026-68375, CVE-2026-68376, CVE-2026-68377,
CVE-2026-68378, CVE-2026-68379, CVE-2026-68380, CVE-2026-68381,
CVE-2026-68382, CVE-2026-68383, CVE-2026-68384, CVE-2026-68385,
CVE-2026-68386, CVE-2026-68387, CVE-2026-68388, CVE-2026-68389,
CVE-2026-68390, CVE-2026-68391, CVE-2026-68392, CVE-2026-68393,
CVE-2026-68394, CVE-2026-68395, CVE-2026-68396, CVE-2026-68397,
CVE-2026-68398, CVE-2026-68399, CVE-2026-68400, CVE-2026-68401,
CVE-2026-68402, CVE-2026-68403, CVE-2026-68404, CVE-2026-68405,
CVE-2026-68406, CVE-2026-68407, CVE-2026-68408, CVE-2026-68409,
CVE-2026-68410, CVE-2026-68411, CVE-2026-68412, CVE-2026-68413,
CVE-2026-68414, CVE-2026-68415, CVE-2026-68416, CVE-2026-68417,
CVE-2026-68418, CVE-2026-68419, CVE-2026-68420, CVE-2026-68421,
CVE-2026-68422, CVE-2026-68425, CVE-2026-68426, CVE-2026-68427,
CVE-2026-68428, CVE-2026-68429, CVE-2026-68430, CVE-2026-68431,
CVE-2026-68432, CVE-2026-68433, CVE-2026-68434, CVE-2026-68436,
CVE-2026-68437, CVE-2026-68439, CVE-2026-68440, CVE-2026-68441,
CVE-2026-68442, CVE-2026-68443, CVE-2026-68444, CVE-2026-68445,
CVE-2026-68446, CVE-2026-68447, CVE-2026-68448, CVE-2026-68449,
CVE-2026-68450, CVE-2026-68454, CVE-2026-68455, CVE-2026-68456,
CVE-2026-68457, CVE-2026-68458, CVE-2026-68463, CVE-2026-68464,
CVE-2026-68465, CVE-2026-68466, CVE-2026-68467, CVE-2026-68469,
CVE-2026-68470, CVE-2026-68471, CVE-2026-68472, CVE-2026-68473,
CVE-2026-68474, CVE-2026-68475, CVE-2026-68476, CVE-2026-68477,
CVE-2026-68478, CVE-2026-68479, CVE-2026-68480, CVE-2026-72003,
CVE-2026-72004, CVE-2026-72005, CVE-2026-72006, CVE-2026-72007,
CVE-2026-72008, CVE-2026-72009, CVE-2026-72010, CVE-2026-72011,
CVE-2026-72012, CVE-2026-72013, CVE-2026-72014, CVE-2026-72015,
CVE-2026-72016, CVE-2026-72017, CVE-2026-72018, CVE-2026-72019,
CVE-2026-72020, CVE-2026-72021, CVE-2026-72022, CVE-2026-72023,
CVE-2026-72024, CVE-2026-72025, CVE-2026-72026, CVE-2026-72027,
CVE-2026-72028, CVE-2026-72029, CVE-2026-72030, CVE-2026-72031,
CVE-2026-72032, CVE-2026-72033, CVE-2026-72034, CVE-2026-72035,
CVE-2026-72036, CVE-2026-72037, CVE-2026-72038, CVE-2026-72039,
CVE-2026-72040, CVE-2026-72041, CVE-2026-72042, CVE-2026-72045,
CVE-2026-72046, CVE-2026-72047, CVE-2026-72048, CVE-2026-72049,
CVE-2026-72050, CVE-2026-72051, CVE-2026-72052, CVE-2026-72053,
CVE-2026-72054, CVE-2026-72055, CVE-2026-72056, CVE-2026-72057,
CVE-2026-72058, CVE-2026-72059, CVE-2026-72060, CVE-2026-72061,
CVE-2026-72062, CVE-2026-72063, CVE-2026-72064, CVE-2026-72065,
CVE-2026-72066, CVE-2026-72067, CVE-2026-72068, CVE-2026-72069,
CVE-2026-72070, CVE-2026-72071, CVE-2026-72072, CVE-2026-72073,
CVE-2026-72074, CVE-2026-72075, CVE-2026-72076, CVE-2026-72077,
CVE-2026-72078, CVE-2026-72079, CVE-2026-72080, CVE-2026-72081,
CVE-2026-72082, CVE-2026-72083, CVE-2026-72084, CVE-2026-72085,
CVE-2026-72086, CVE-2026-72087, CVE-2026-72088, CVE-2026-72089,
CVE-2026-72090, CVE-2026-72091, CVE-2026-72092, CVE-2026-72093,
CVE-2026-72095, CVE-2026-72096, CVE-2026-72097, CVE-2026-72098,
CVE-2026-72099, CVE-2026-72100, CVE-2026-72101, CVE-2026-72102,
CVE-2026-72103, CVE-2026-72104, CVE-2026-72105, CVE-2026-72106,
CVE-2026-72107, CVE-2026-72108, CVE-2026-72109, CVE-2026-72110,
CVE-2026-72111, CVE-2026-72113, CVE-2026-72114, CVE-2026-72115,
CVE-2026-72116, CVE-2026-72117, CVE-2026-72118, CVE-2026-72119,
CVE-2026-72120, CVE-2026-72121, CVE-2026-72122, CVE-2026-72123,
CVE-2026-72124, CVE-2026-72125, CVE-2026-72126, CVE-2026-72127,
CVE-2026-72128, CVE-2026-72129, CVE-2026-72130, CVE-2026-72131,
CVE-2026-72132, CVE-2026-72133, CVE-2026-72134, CVE-2026-72135,
CVE-2026-72136, CVE-2026-72137, CVE-2026-72138, CVE-2026-72139,
CVE-2026-72140, CVE-2026-72141, CVE-2026-72142, CVE-2026-72143,
CVE-2026-72144, CVE-2026-72146, CVE-2026-72147, CVE-2026-72148,
CVE-2026-72149, CVE-2026-72150, CVE-2026-72151, CVE-2026-72152,
CVE-2026-72153, CVE-2026-72154, CVE-2026-72155, CVE-2026-72156,
CVE-2026-72157, CVE-2026-72158, CVE-2026-72159, CVE-2026-72160,
CVE-2026-72161, CVE-2026-72162, CVE-2026-72163, CVE-2026-72164,
CVE-2026-72165, CVE-2026-72166, CVE-2026-72167, CVE-2026-72168,
CVE-2026-72169, CVE-2026-72170, CVE-2026-72171, CVE-2026-72172,
CVE-2026-72173, CVE-2026-72174, CVE-2026-72175, CVE-2026-72176,
CVE-2026-72177, CVE-2026-72178, CVE-2026-72179, CVE-2026-72180,
CVE-2026-72181, CVE-2026-72182, CVE-2026-72183, CVE-2026-72191,
CVE-2026-72192, CVE-2026-72193, CVE-2026-72194, CVE-2026-72195,
CVE-2026-72196, CVE-2026-72197, CVE-2026-72212, CVE-2026-72213,
CVE-2026-72214, CVE-2026-72215, CVE-2026-72216, CVE-2026-72217,
CVE-2026-72218, CVE-2026-72219, CVE-2026-72220, CVE-2026-72221,
CVE-2026-72222, CVE-2026-72223, CVE-2026-72224, CVE-2026-72225,
CVE-2026-72226, CVE-2026-72227, CVE-2026-72228, CVE-2026-72229,
CVE-2026-72230, CVE-2026-72231, CVE-2026-72232, CVE-2026-72233,
CVE-2026-72234, CVE-2026-72235, CVE-2026-72236, CVE-2026-72237,
CVE-2026-72238, CVE-2026-72240, CVE-2026-72241, CVE-2026-72242,
CVE-2026-72243, CVE-2026-72244, CVE-2026-72245, CVE-2026-72247,
CVE-2026-72248, CVE-2026-72249, CVE-2026-72250, CVE-2026-72251,
CVE-2026-72252, CVE-2026-72253, CVE-2026-72254, CVE-2026-72255,
CVE-2026-72256, CVE-2026-72257, CVE-2026-72258, CVE-2026-72259,
CVE-2026-72260, CVE-2026-72261, CVE-2026-72262, CVE-2026-72263,
CVE-2026-72264, CVE-2026-72265, CVE-2026-72266, CVE-2026-72267,
CVE-2026-72268, CVE-2026-72269, CVE-2026-72270, CVE-2026-72271,
CVE-2026-72272, CVE-2026-72273, CVE-2026-72274, CVE-2026-72275,
CVE-2026-72276, CVE-2026-72277, CVE-2026-72278, CVE-2026-72279,
CVE-2026-72280, CVE-2026-72282, CVE-2026-72283, CVE-2026-72284,
CVE-2026-72285, CVE-2026-72286, CVE-2026-72287, CVE-2026-72288,
CVE-2026-72289, CVE-2026-72290, CVE-2026-72292, CVE-2026-72293,
CVE-2026-72296, CVE-2026-72297, CVE-2026-72298, CVE-2026-72299,
CVE-2026-72300, CVE-2026-72301, CVE-2026-72302, CVE-2026-72303,
CVE-2026-72304, CVE-2026-72305, CVE-2026-72306, CVE-2026-72307,
CVE-2026-72308, CVE-2026-72310, CVE-2026-72312, CVE-2026-72313,
CVE-2026-72314, CVE-2026-72315, CVE-2026-72316, CVE-2026-72317,
CVE-2026-72318, CVE-2026-72319, CVE-2026-72320, CVE-2026-72321,
CVE-2026-72322, CVE-2026-72323, CVE-2026-72324, CVE-2026-72325,
CVE-2026-72326, CVE-2026-72327, CVE-2026-72328, CVE-2026-72329,
CVE-2026-72330, CVE-2026-72331, CVE-2026-72332, CVE-2026-72333,
CVE-2026-72334, CVE-2026-72335, CVE-2026-72336, CVE-2026-72337,
CVE-2026-72338, CVE-2026-72339, CVE-2026-72340, CVE-2026-72341,
CVE-2026-72342, CVE-2026-72343, CVE-2026-72345, CVE-2026-72347,
CVE-2026-72348, CVE-2026-72349, CVE-2026-72350, CVE-2026-72351,
CVE-2026-72352, CVE-2026-72355, CVE-2026-72356, CVE-2026-72357,
CVE-2026-72360, CVE-2026-72361, CVE-2026-72362, CVE-2026-72363,
CVE-2026-72364, CVE-2026-72365, CVE-2026-72366, CVE-2026-72367,
CVE-2026-72368, CVE-2026-72369, CVE-2026-72370, CVE-2026-72371,
CVE-2026-72372, CVE-2026-72373, CVE-2026-72374, CVE-2026-72375,
CVE-2026-72376, CVE-2026-72377, CVE-2026-72378, CVE-2026-72379,
CVE-2026-72380, CVE-2026-72381, CVE-2026-72382, CVE-2026-72383,
CVE-2026-72384, CVE-2026-72385, CVE-2026-72386, CVE-2026-72387,
CVE-2026-72388, CVE-2026-72389, CVE-2026-72390, CVE-2026-72391,
CVE-2026-72392, CVE-2026-72393, CVE-2026-72394, CVE-2026-72395,
CVE-2026-72396, CVE-2026-72397, CVE-2026-72398, CVE-2026-72399,
CVE-2026-72400, CVE-2026-72401, CVE-2026-72402, CVE-2026-72403,
CVE-2026-72405, CVE-2026-72406, CVE-2026-72407, CVE-2026-72408,
CVE-2026-72409, CVE-2026-72410, CVE-2026-72412, CVE-2026-72413,
CVE-2026-72414, CVE-2026-72415, CVE-2026-72416, CVE-2026-72417,
CVE-2026-72418, CVE-2026-72419, CVE-2026-72420, CVE-2026-72421,
CVE-2026-72422, CVE-2026-72423, CVE-2026-72424, CVE-2026-72425,
CVE-2026-72427, CVE-2026-72428, CVE-2026-72429, CVE-2026-72430,
CVE-2026-72431, CVE-2026-72433, CVE-2026-72434, CVE-2026-72435,
CVE-2026-72436, CVE-2026-72437, CVE-2026-72438, CVE-2026-72439,
CVE-2026-72440, CVE-2026-72441, CVE-2026-72442, CVE-2026-72443,
CVE-2026-72444, CVE-2026-72445, CVE-2026-72446, CVE-2026-72447,
CVE-2026-72448, CVE-2026-72449, CVE-2026-72450, CVE-2026-72451,
CVE-2026-72452, CVE-2026-72453, CVE-2026-72454, CVE-2026-72455,
CVE-2026-72456, CVE-2026-72457, CVE-2026-72458, CVE-2026-72459,
CVE-2026-72460, CVE-2026-72461, CVE-2026-72462, CVE-2026-72463,
CVE-2026-72464, CVE-2026-72466, CVE-2026-72467, CVE-2026-72468,
CVE-2026-72469, CVE-2026-72470, CVE-2026-72471, CVE-2026-72472,
CVE-2026-72473, CVE-2026-72474, CVE-2026-72475, CVE-2026-72476,
CVE-2026-72477, CVE-2026-72478, CVE-2026-72479, CVE-2026-72480,
CVE-2026-72481, CVE-2026-72482, CVE-2026-72483, CVE-2026-72484,
CVE-2026-72485, CVE-2026-72486, CVE-2026-72487, CVE-2026-72488,
CVE-2026-72489, CVE-2026-72491, CVE-2026-72492, CVE-2026-72493,
CVE-2026-72494, CVE-2026-72495, CVE-2026-72496, CVE-2026-72498,
CVE-2026-72499, CVE-2026-72500, CVE-2026-72501, CVE-2026-72502,
CVE-2026-74255, CVE-2026-74256, CVE-2026-74257, CVE-2026-74258,
CVE-2026-74260, CVE-2026-74261, CVE-2026-74262, CVE-2026-74263,
CVE-2026-74264, CVE-2026-74265, CVE-2026-74266, CVE-2026-74267,
CVE-2026-74268, CVE-2026-74269, CVE-2026-74270, CVE-2026-74271,
CVE-2026-74272, CVE-2026-74273, CVE-2026-74274, CVE-2026-74276,
CVE-2026-74277, CVE-2026-74278, CVE-2026-74279, CVE-2026-74280,
CVE-2026-74281, CVE-2026-74282, CVE-2026-74283, CVE-2026-74284,
CVE-2026-74286, CVE-2026-74287, CVE-2026-74288, CVE-2026-74289,
CVE-2026-74290, CVE-2026-74291, CVE-2026-74292, CVE-2026-74293,
CVE-2026-74294, CVE-2026-74295, CVE-2026-74296, CVE-2026-74297,
CVE-2026-74300, CVE-2026-74301, CVE-2026-74302, CVE-2026-74303,
CVE-2026-74304, CVE-2026-74305, CVE-2026-74306, CVE-2026-74307,
CVE-2026-74308, CVE-2026-74309, CVE-2026-74310, CVE-2026-74311,
CVE-2026-74312, CVE-2026-74313, CVE-2026-74314, CVE-2026-74316,
CVE-2026-74317, CVE-2026-74318, CVE-2026-74320, CVE-2026-74321,
CVE-2026-74322, CVE-2026-74323, CVE-2026-74324, CVE-2026-74325,
CVE-2026-74327, CVE-2026-74328, CVE-2026-74329, CVE-2026-74330,
CVE-2026-74331, CVE-2026-74332, CVE-2026-74333, CVE-2026-74334,
CVE-2026-74335, CVE-2026-74336, CVE-2026-74337, CVE-2026-74338,
CVE-2026-74339, CVE-2026-74340, CVE-2026-74341, CVE-2026-74344,
CVE-2026-74345, CVE-2026-74346, CVE-2026-74347, CVE-2026-74348,
CVE-2026-74349, CVE-2026-74350, CVE-2026-74351, CVE-2026-74352,
CVE-2026-74353, CVE-2026-74354, CVE-2026-74355, CVE-2026-74356,
CVE-2026-74358, CVE-2026-74359, CVE-2026-74360, CVE-2026-74361,
CVE-2026-74362, CVE-2026-74363, CVE-2026-74364, CVE-2026-74365,
CVE-2026-74366, CVE-2026-74367, CVE-2026-74368, CVE-2026-74370,
CVE-2026-74371, CVE-2026-74372, CVE-2026-74373, CVE-2026-74374,
CVE-2026-74375, CVE-2026-74376, CVE-2026-74377, CVE-2026-74378,
CVE-2026-74379, CVE-2026-74380, CVE-2026-74381, CVE-2026-74382,
CVE-2026-74383, CVE-2026-74384, CVE-2026-74385, CVE-2026-74386,
CVE-2026-74387, CVE-2026-74388, CVE-2026-74389, CVE-2026-74390,
CVE-2026-74391, CVE-2026-74392, CVE-2026-74393, CVE-2026-74394,
CVE-2026-74395, CVE-2026-74396, CVE-2026-74397, CVE-2026-74398,
CVE-2026-74399, CVE-2026-74400, CVE-2026-74401, CVE-2026-74402,
CVE-2026-74403, CVE-2026-74404, CVE-2026-74405, CVE-2026-74406,
CVE-2026-74407, CVE-2026-74408, CVE-2026-74409, CVE-2026-74410,
CVE-2026-74411, CVE-2026-74412, CVE-2026-74413, CVE-2026-74415,
CVE-2026-74416, CVE-2026-74417, CVE-2026-74419, CVE-2026-74420,
CVE-2026-74421, CVE-2026-74422, CVE-2026-74423, CVE-2026-74424,
CVE-2026-74425, CVE-2026-74426, CVE-2026-74427, CVE-2026-74428,
CVE-2026-74429, CVE-2026-74430, CVE-2026-74431, CVE-2026-74432,
CVE-2026-74433, CVE-2026-74434, CVE-2026-74435, CVE-2026-74436,
CVE-2026-74437, CVE-2026-74438, CVE-2026-74439, CVE-2026-80592,
CVE-2026-80593, CVE-2026-80594, CVE-2026-80595, CVE-2026-80596,
CVE-2026-80597, CVE-2026-80598, CVE-2026-80599, CVE-2026-80600,
CVE-2026-80601, CVE-2026-80602, CVE-2026-80603, CVE-2026-80604,
CVE-2026-80605, CVE-2026-80606, CVE-2026-80607, CVE-2026-80609,
CVE-2026-80610, CVE-2026-80611, CVE-2026-80612, CVE-2026-80613,
CVE-2026-80614, CVE-2026-80615, CVE-2026-80616, CVE-2026-80617,
CVE-2026-80618, CVE-2026-80619, CVE-2026-80620, CVE-2026-80621,
CVE-2026-80622, CVE-2026-80623, CVE-2026-80624, CVE-2026-80625,
CVE-2026-80626, CVE-2026-80627, CVE-2026-80628, CVE-2026-80629,
CVE-2026-80630, CVE-2026-80631, CVE-2026-80634, CVE-2026-80635,
CVE-2026-80636, CVE-2026-80637, CVE-2026-80638, CVE-2026-80639,
CVE-2026-80640, CVE-2026-80641, CVE-2026-80642, CVE-2026-80643,
CVE-2026-80644, CVE-2026-80645, CVE-2026-80646, CVE-2026-80647,
CVE-2026-80648, CVE-2026-80649, CVE-2026-80650, CVE-2026-80651,
CVE-2026-80652, CVE-2026-80653, CVE-2026-80654, CVE-2026-80655,
CVE-2026-80657, CVE-2026-80658, CVE-2026-80659, CVE-2026-80660,
CVE-2026-80661, CVE-2026-80662, CVE-2026-80663, CVE-2026-80664,
CVE-2026-80665, CVE-2026-80666, CVE-2026-80667, CVE-2026-80668,
CVE-2026-80669, CVE-2026-80670, CVE-2026-80671, CVE-2026-80675,
CVE-2026-80676, CVE-2026-80677, CVE-2026-80865, CVE-2026-80866,
CVE-2026-80867, CVE-2026-80868, CVE-2026-80870, CVE-2026-80871,
CVE-2026-80872, CVE-2026-80873, CVE-2026-80874, CVE-2026-80875,
CVE-2026-80876, CVE-2026-80877, CVE-2026-80878, CVE-2026-80879,
CVE-2026-80880, CVE-2026-80881, CVE-2026-80882, CVE-2026-80883,
CVE-2026-80884, CVE-2026-80885, CVE-2026-80886, CVE-2026-89774,
CVE-2026-92502)
</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-9003-1</guid><pubDate>Fri, 06 Nov 2026 11:30:38 +0000</pubDate></item><item><title>USN-9002-1: Linux kernel (NVIDIA Tegra) vulnerabilities</title><link>https://ubuntu.com/security/notices/USN-9002-1</link><description>It was discovered that the io_uring subsystem in the Linux kernel did not
properly handle canceled task work when processing certain wait operations,
leading to the operation being performed in the wrong task context. A local
attacker could possibly use this to cause a denial of service (system
crash). (CVE-2026-81010)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
  - ARM32 architecture;
  - ARM64 architecture;
  - MIPS architecture;
  - OpenRISC architecture;
  - PowerPC architecture;
  - RISC-V architecture;
  - S390 architecture;
  - x86 architecture;
  - Intel NPU Driver;
  - ACPI drivers;
  - Serial ATA and Parallel ATA drivers;
  - Auxiliary display drivers;
  - Ublk userspace block driver;
  - Bluetooth drivers;
  - Character device driver;
  - CPU idle management framework;
  - Hardware crypto device drivers;
  - CXL (Compute Express Link) drivers;
  - ARM SCMI message protocol;
  - GPIO subsystem;
  - GPU drivers;
  - HID subsystem;
  - HSI subsystem;
  - Hardware monitoring drivers;
  - I2C subsystem;
  - I3C subsystem;
  - IIO subsystem;
  - InfiniBand drivers;
  - Input Device core drivers;
  - On-Chip Interconnect management framework;
  - IOMMU subsystem;
  - Multiple devices driver;
  - Media drivers;
  - Fastrpc Driver;
  - Amazon Nitro Secure Module driver;
  - MMC subsystem;
  - MTD block device drivers;
  - Ethernet bonding driver;
  - Network drivers;
  - Microsoft Azure Network Adapter (MANA) driver;
  - Texas Instruments network drivers;
  - MediaTek network drivers;
  - NTB driver;
  - NVDIMM (Non-Volatile Memory Device) drivers;
  - NVME drivers;
  - NVMEM (Non Volatile Memory) drivers;
  - PCI subsystem;
  - Chrome hardware platform drivers;
  - x86 platform drivers;
  - Power supply drivers;
  - RapidIO drivers;
  - Voltage and Current Regulator drivers;
  - S/390 drivers;
  - SCSI subsystem;
  - SLIMbus drivers;
  - NVIDIA Tegra SoC drivers;
  - Realtek RTL8723BS SDIO drivers;
  - TCM subsystem;
  - Trusted Execution Environment drivers;
  - Thunderbolt and USB4 drivers;
  - TTY drivers;
  - USB Device Class drivers;
  - Faraday FOTG210 USB2 dual-role controller driver;
  - USB Gadget drivers;
  - USB Host Controller drivers;
  - Siemens ID Mouse USB driver;
  - IOWarrior USB driver;
  - LD Didactic USB driver;
  - LEGO USB Tower driver;
  - USB Serial drivers;
  - USB Type-C support driver;
  - USB Type-C Port Controller Manager driver;
  - USB Type-C Connector System Software Interface driver;
  - USB over IP driver;
  - VFIO drivers;
  - Framebuffer layer;
  - W1 Dallas's 1-wire bus driver;
  - AFS file system;
  - BTRFS file system;
  - Ceph distributed file system;
  - eCrypt file system;
  - File systems infrastructure;
  - Ext4 file system;
  - F2FS file system;
  - FUSE (File system in Userspace);
  - Network file system (NFS) server daemon;
  - NILFS2 file system;
  - NTFS3 file system;
  - OCFS2 file system;
  - OrangeFS file system;
  - SMB network file system;
  - UBI file system;
  - Drivers core;
  - Tracing infrastructure;
  - KProbes tracing;
  - Networking core;
  - Netfilter;
  - Sun RPC protocol;
  - IPv6 networking;
  - Bluetooth subsystem;
  - IPv4 networking;
  - IP tunnels definitions;
  - SCTP protocol;
  - User-space API (UAPI);
  - IPC subsystem;
  - Audit subsystem;
  - BPF subsystem;
  - DMA mapping infrastructure;
  - Kernel futex primitives;
  - Scheduler infrastructure;
  - Signal handling mechanism;
  - Memory management;
  - 6LoWPAN network protocol;
  - IEEE 802 network protocols;
  - B.A.T.M.A.N. meshing protocol;
  - Ethernet bridge;
  - CAN network layer;
  - Ceph Core library;
  - Devlink API;
  - HSR network protocol;
  - IEEE802154.4 network protocol;
  - IUCV driver;
  - MAC80211 subsystem;
  - Management Component Transport Protocol (MCTP);
  - MultiProtocol Label Switching driver;
  - Multipath TCP;
  - NetLabel subsystem;
  - Open vSwitch;
  - Packet sockets;
  - RDS protocol;
  - Network traffic control;
  - SMC sockets;
  - Network sockets;
  - VMware vSockets driver;
  - XFRM subsystem;
  - AppArmor security module;
  - Key management;
  - Landlock security;
  - Simplified Mandatory Access Control Kernel framework;
  - ALSA framework;
  - Digigram PCXHR ALSA driver;
  - Wolfson Microelectronics audio codecs;
  - USB sound devices;
  - KVM subsystem;
(CVE-2024-40954, CVE-2025-38261, CVE-2025-68296, CVE-2025-68730,
CVE-2025-68768, CVE-2026-23346, CVE-2026-43219, CVE-2026-43240,
CVE-2026-43311, CVE-2026-43331, CVE-2026-45930, CVE-2026-52913,
CVE-2026-52930, CVE-2026-52939, CVE-2026-52944, CVE-2026-52948,
CVE-2026-52953, CVE-2026-53080, CVE-2026-53134, CVE-2026-53135,
CVE-2026-53140, CVE-2026-53144, CVE-2026-53150, CVE-2026-53154,
CVE-2026-53158, CVE-2026-53168, CVE-2026-53177, CVE-2026-53178,
CVE-2026-53179, CVE-2026-53181, CVE-2026-53190, CVE-2026-53208,
CVE-2026-53210, CVE-2026-53213, CVE-2026-53214, CVE-2026-53218,
CVE-2026-53219, CVE-2026-53220, CVE-2026-53227, CVE-2026-53236,
CVE-2026-53237, CVE-2026-53238, CVE-2026-53242, CVE-2026-53245,
CVE-2026-53249, CVE-2026-53251, CVE-2026-53252, CVE-2026-53261,
CVE-2026-53263, CVE-2026-53265, CVE-2026-53274, CVE-2026-53331,
CVE-2026-53332, CVE-2026-53336, CVE-2026-53337, CVE-2026-53339,
CVE-2026-53343, CVE-2026-53345, CVE-2026-53347, CVE-2026-53349,
CVE-2026-53350, CVE-2026-53352, CVE-2026-53353, CVE-2026-63868,
CVE-2026-63871, CVE-2026-63876, CVE-2026-63877, CVE-2026-63882,
CVE-2026-63883, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892,
CVE-2026-63895, CVE-2026-63896, CVE-2026-63897, CVE-2026-63898,
CVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902,
CVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63908,
CVE-2026-63928, CVE-2026-63931, CVE-2026-63933, CVE-2026-63934,
CVE-2026-63943, CVE-2026-63949, CVE-2026-63956, CVE-2026-63957,
CVE-2026-63958, CVE-2026-63959, CVE-2026-63960, CVE-2026-63961,
CVE-2026-63964, CVE-2026-63967, CVE-2026-63969, CVE-2026-63973,
CVE-2026-63990, CVE-2026-63991, CVE-2026-64001, CVE-2026-64006,
CVE-2026-64012, CVE-2026-64014, CVE-2026-64078, CVE-2026-64090,
CVE-2026-64094, CVE-2026-64131, CVE-2026-64233, CVE-2026-64234,
CVE-2026-64240, CVE-2026-64305, CVE-2026-64329, CVE-2026-64330,
CVE-2026-64340, CVE-2026-64341, CVE-2026-64342, CVE-2026-64343,
CVE-2026-64344, CVE-2026-64346, CVE-2026-64348, CVE-2026-64352,
CVE-2026-64362, CVE-2026-64363, CVE-2026-64365, CVE-2026-64407,
CVE-2026-64421, CVE-2026-64424, CVE-2026-64433, CVE-2026-64446,
CVE-2026-64525, CVE-2026-64527, CVE-2026-64528, CVE-2026-74506,
CVE-2026-80590, CVE-2026-80591, CVE-2026-80593, CVE-2026-80598,
CVE-2026-80599, CVE-2026-80600, CVE-2026-80601, CVE-2026-80603,
CVE-2026-80609, CVE-2026-80613, CVE-2026-80619, CVE-2026-80622,
CVE-2026-80628, CVE-2026-80630, CVE-2026-80631, CVE-2026-80634,
CVE-2026-80635, CVE-2026-80637, CVE-2026-80644, CVE-2026-80645,
CVE-2026-80646, CVE-2026-80649, CVE-2026-80653, CVE-2026-80662,
CVE-2026-80663, CVE-2026-80664, CVE-2026-80668, CVE-2026-80677,
CVE-2026-80678, CVE-2026-80680, CVE-2026-80681, CVE-2026-80684,
CVE-2026-80691, CVE-2026-80692, CVE-2026-80693, CVE-2026-80694,
CVE-2026-80700, CVE-2026-80702, CVE-2026-80706, CVE-2026-80707,
CVE-2026-80709, CVE-2026-80710, CVE-2026-80714, CVE-2026-80716,
CVE-2026-80717, CVE-2026-80718, CVE-2026-80722, CVE-2026-80725,
CVE-2026-80731, CVE-2026-80732, CVE-2026-80737, CVE-2026-80738,
CVE-2026-80747, CVE-2026-80752, CVE-2026-80754, CVE-2026-80840,
CVE-2026-80928, CVE-2026-80931, CVE-2026-80932, CVE-2026-80933,
CVE-2026-80935, CVE-2026-80937, CVE-2026-80944, CVE-2026-80945,
CVE-2026-80947, CVE-2026-80952, CVE-2026-80967, CVE-2026-80971,
CVE-2026-80976, CVE-2026-80977, CVE-2026-80978, CVE-2026-80980,
CVE-2026-80982, CVE-2026-80987, CVE-2026-80989, CVE-2026-80990,
CVE-2026-80991, CVE-2026-80992, CVE-2026-80994, CVE-2026-81000,
CVE-2026-81001, CVE-2026-81002, CVE-2026-81003, CVE-2026-81007,
CVE-2026-81008, CVE-2026-81011, CVE-2026-81012, CVE-2026-81016,
CVE-2026-81017, CVE-2026-89440, CVE-2026-89441, CVE-2026-89442,
CVE-2026-89443, CVE-2026-89448, CVE-2026-89452, CVE-2026-89456,
CVE-2026-89465, CVE-2026-89466, CVE-2026-89469, CVE-2026-89470,
CVE-2026-89471, CVE-2026-89472, CVE-2026-89476, CVE-2026-89477,
CVE-2026-89478, CVE-2026-89479, CVE-2026-89480, CVE-2026-89481,
CVE-2026-89482, CVE-2026-89483, CVE-2026-89485, CVE-2026-89487,
CVE-2026-89488, CVE-2026-89489, CVE-2026-89492, CVE-2026-89493,
CVE-2026-89494, CVE-2026-89495, CVE-2026-89497, CVE-2026-89500,
CVE-2026-89501, CVE-2026-89502, CVE-2026-89503, CVE-2026-89504,
CVE-2026-89508, CVE-2026-89510, CVE-2026-89511, CVE-2026-89520,
CVE-2026-89524, CVE-2026-89526, CVE-2026-89528, CVE-2026-89530,
CVE-2026-89532, CVE-2026-89533, CVE-2026-89536, CVE-2026-89537,
CVE-2026-89538, CVE-2026-89540, CVE-2026-89541, CVE-2026-89542,
CVE-2026-89544, CVE-2026-89545, CVE-2026-89547, CVE-2026-89548,
CVE-2026-89549, CVE-2026-89550, CVE-2026-89551, CVE-2026-89553,
CVE-2026-89554, CVE-2026-89555, CVE-2026-89557, CVE-2026-89559,
CVE-2026-89560, CVE-2026-89561, CVE-2026-89562, CVE-2026-89563,
CVE-2026-89564, CVE-2026-89569, CVE-2026-89573, CVE-2026-89574,
CVE-2026-89579, CVE-2026-89580, CVE-2026-89583, CVE-2026-89585,
CVE-2026-89586, CVE-2026-89587, CVE-2026-89594, CVE-2026-89596,
CVE-2026-89597, CVE-2026-89599, CVE-2026-89601, CVE-2026-89605,
CVE-2026-89606, CVE-2026-89607, CVE-2026-89608, CVE-2026-89609,
CVE-2026-89615, CVE-2026-89616, CVE-2026-89617, CVE-2026-89622,
CVE-2026-89626, CVE-2026-89631, CVE-2026-89633, CVE-2026-89634,
CVE-2026-89636, CVE-2026-89637, CVE-2026-89638, CVE-2026-89640,
CVE-2026-89643, CVE-2026-89647, CVE-2026-89648, CVE-2026-89649,
CVE-2026-89650, CVE-2026-89652, CVE-2026-89653, CVE-2026-89654,
CVE-2026-89655, CVE-2026-89656, CVE-2026-89657, CVE-2026-89659,
CVE-2026-89662, CVE-2026-89663, CVE-2026-89665, CVE-2026-89669,
CVE-2026-89671, CVE-2026-89672, CVE-2026-89674, CVE-2026-89676,
CVE-2026-89680, CVE-2026-89682, CVE-2026-89684, CVE-2026-89685,
CVE-2026-89686, CVE-2026-89690, CVE-2026-89691, CVE-2026-89694,
CVE-2026-89696, CVE-2026-89697, CVE-2026-89699, CVE-2026-89702,
CVE-2026-89704, CVE-2026-89705, CVE-2026-89706, CVE-2026-89707,
CVE-2026-89708, CVE-2026-89709, CVE-2026-89711, CVE-2026-89712,
CVE-2026-89713, CVE-2026-89720, CVE-2026-89723, CVE-2026-89724,
CVE-2026-89725, CVE-2026-89729, CVE-2026-89731, CVE-2026-89733,
CVE-2026-89736, CVE-2026-89738, CVE-2026-89742, CVE-2026-89743,
CVE-2026-89747, CVE-2026-89750, CVE-2026-89755, CVE-2026-89761,
CVE-2026-89762, CVE-2026-89763, CVE-2026-89774, CVE-2026-89777,
CVE-2026-89778, CVE-2026-89779, CVE-2026-89781, CVE-2026-89782,
CVE-2026-89783, CVE-2026-89786, CVE-2026-89788, CVE-2026-89789,
CVE-2026-89792, CVE-2026-89793, CVE-2026-89795, CVE-2026-89799,
CVE-2026-89801, CVE-2026-89803, CVE-2026-89806, CVE-2026-89808,
CVE-2026-89810, CVE-2026-89811, CVE-2026-89819, CVE-2026-89823,
CVE-2026-89832, CVE-2026-89838, CVE-2026-89840, CVE-2026-89844,
CVE-2026-89846, CVE-2026-89847, CVE-2026-89848, CVE-2026-89849,
CVE-2026-89854, CVE-2026-89856, CVE-2026-89857, CVE-2026-89860,
CVE-2026-89861, CVE-2026-89863, CVE-2026-89870, CVE-2026-89877,
CVE-2026-89880, CVE-2026-89883, CVE-2026-89887, CVE-2026-89888,
CVE-2026-89890, CVE-2026-89893, CVE-2026-89894, CVE-2026-89897,
CVE-2026-89899, CVE-2026-89902, CVE-2026-89903, CVE-2026-89908,
CVE-2026-89912, CVE-2026-89920, CVE-2026-89922, CVE-2026-89927,
CVE-2026-89929, CVE-2026-89930, CVE-2026-89932, CVE-2026-89938,
CVE-2026-89951, CVE-2026-89954, CVE-2026-89957, CVE-2026-89959,
CVE-2026-89960, CVE-2026-89961, CVE-2026-89965, CVE-2026-89968,
CVE-2026-89969, CVE-2026-89970, CVE-2026-89972, CVE-2026-89973,
CVE-2026-89979, CVE-2026-89988, CVE-2026-89992, CVE-2026-89995,
CVE-2026-89997, CVE-2026-89998, CVE-2026-89999, CVE-2026-90000,
CVE-2026-90002, CVE-2026-90003, CVE-2026-90007, CVE-2026-90011,
CVE-2026-90013, CVE-2026-90016, CVE-2026-90017, CVE-2026-90018,
CVE-2026-90022, CVE-2026-90025, CVE-2026-90026, CVE-2026-90027,
CVE-2026-90032, CVE-2026-90036, CVE-2026-90037, CVE-2026-90041,
CVE-2026-90042, CVE-2026-90044, CVE-2026-90045, CVE-2026-90048,
CVE-2026-90049, CVE-2026-90170, CVE-2026-92502, CVE-2026-93221)
</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-9002-1</guid><pubDate>Fri, 06 Nov 2026 11:22:23 +0000</pubDate></item><item><title>USN-9001-1: ca-certificates update</title><link>https://ubuntu.com/security/notices/USN-9001-1</link><description>It was discovered that the ca-certificates JKS integration was not working
properly, resulting in CA certificates removed from the system bundle not
being removed from the JKS keystore. This update corrects the feature and
resyncs the keystore with the system CA certificates list.</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-9001-1</guid><pubDate>Thu, 05 Nov 2026 14:46:13 +0000</pubDate></item><item><title>USN-8955-2: nginx vulnerabilities</title><link>https://ubuntu.com/security/notices/USN-8955-2</link><description>USN-8955-1 fixed vulnerabilities in nginx in Ubuntu 26.10, Ubuntu 26.04
LTS, Ubuntu 24.04 LTS, and Ubuntu 22.04 LTS. This update provides the
corresponding update for Ubuntu 20.04 LTS, Ubuntu 18.04 LTS, Ubuntu 16.04
LTS, and Ubuntu 14.04 LTS.

In addition, this update fixes CVE-2026-42533 for these releases.

It was discovered that nginx incorrectly handled certain map directives
using regex matching and capture variables. A remote attacker could
possibly use this issue to crash nginx, resulting in a denial of
service, or possibly execute arbitrary code. (CVE-2026-42533)

Original advisory details:

 It was discovered that nginx incorrectly handled certain configurations
using the alias directive together with rewrite rules. A remote attacker
could possibly use this issue to cause nginx to crash, resulting in a
denial of service, or execute arbitrary code.  (CVE-2026-15176)

 It was discovered that nginx incorrectly handled map directives using
regex matching under certain circumstances. A remote attacker could
possibly use this issue to cause nginx to crash, resulting in a denial  of
service, or execute arbitrary code.  (CVE-2026-93479)

 It was discovered that nginx incorrectly handled HTTP/3 requests when
proxy_request_buffering was enabled. This issue only affected  Ubuntu 26.04
LTS and Ubuntu 26.10. A remote attacker could possibly use  this issue to
inject data into proxied requests.  (CVE-2026-95101)

 It was discovered that nginx incorrectly handled asynchronous file I/O  in
certain configurations with Server Side Includes pages. A remote  attacker
could possibly use this issue to cause nginx to crash,  resulting in a
denial of service, or execute arbitrary code.  (CVE-2026-97205)

 It was discovered that nginx incorrectly handled SSL session ticket keys
when configured with a shared session cache but without explicit ticket
key rotation. This issue only affected Ubuntu 24.04 LTS, Ubuntu 26.04 LTS,
and Ubuntu 26.10. A remote attacker  could possibly use this issue to forge
client SSL sessions and bypass  client certificate verification.
(CVE-2026-97629)</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-8955-2</guid><pubDate>Thu, 05 Nov 2026 14:40:26 +0000</pubDate></item><item><title>USN-7230-3: FRR regression</title><link>https://ubuntu.com/security/notices/USN-7230-3</link><description>USN-7230-2 fixed vulnerabilities in FRR. Unfortunately, the fix for
CVE-2024-55553 introduced a regression in RPKI support, causing FRR to stop
processing RPKI updates after the first one, so routes were not revalidated
when RPKI data changed. In Ubuntu 20.04 LTS, the BGP daemon also failed to
start when the RPKI module was enabled. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

 Iggy Frankovic discovered that FRR incorrectly handled certain BGP
 messages. A remote attacker could possibly use this issue to cause FRR to
 crash, resulting in a denial of service. This issue only affected Ubuntu
 20.04 LTS. (CVE-2024-44070)

 It was discovered that FRR re-validated all routes in certain instances
 when the internal socket's buffer size overflowed. A remote attacker could
 possibly use this issue to impact the performance of FRR, resulting in a
 denial of service. (CVE-2024-55553)</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-7230-3</guid><pubDate>Thu, 05 Nov 2026 13:39:13 +0000</pubDate></item><item><title>USN-8972-2: HAProxy regression</title><link>https://ubuntu.com/security/notices/USN-8972-2</link><description>USN-8972-1 fixed vulnerabilities in HAProxy. On Ubuntu 22.04 LTS, the
update caused a regression when processing certain chunked requests. This
update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

 It was discovered that HAProxy incorrectly handled truncated HTTP/2
 PING frames. A remote attacker could possibly use this issue to cause
 HAProxy to consume excessive CPU resources, leading to a denial of
 service. (CVE-2026-110353)

 It was discovered that HAProxy incorrectly handled certain HTTP/1.1
 chunked requests. A remote attacker could possibly use this issue to
 cause HAProxy to consume excessive CPU resources, leading to a denial
 of service. (CVE-2026-110354)</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-8972-2</guid><pubDate>Thu, 05 Nov 2026 12:52:52 +0000</pubDate></item><item><title>USN-9000-1: Twisted vulnerability</title><link>https://ubuntu.com/security/notices/USN-9000-1</link><description>It was discovered that Twisted's IMAP server mishandled wildcard
patterns in mailbox list commands. An authenticated remote attacker
could possibly use this issue to cause Twisted to use excessive
resources, leading to a denial of service.</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-9000-1</guid><pubDate>Wed, 04 Nov 2026 16:24:47 +0000</pubDate></item><item><title>USN-8999-1: Pillow vulnerabilities</title><link>https://ubuntu.com/security/notices/USN-8999-1</link><description>It was discovered that Pillow incorrectly handled map stride values
when loading certain McIdas AREA images. An attacker could possibly
use this issue to obtain sensitive information or cause a denial of
service. (CVE-2026-54058)

It was discovered that Pillow did not properly check for decompression
bombs when processing font files. An attacker could possibly use this
issue to cause Pillow to consume excessive memory, resulting in a
denial of service. (CVE-2026-54059, CVE-2026-54060, CVE-2026-55379)

It was discovered that Pillow did not properly check for decompression
bombs when loading GD image files. An attacker could possibly use this
issue to cause Pillow to consume excessive memory, resulting in a
denial of service. (CVE-2026-55380)

It was discovered that Pillow incorrectly validated filter sizes in
the rank filter implementation. An attacker could possibly use this
issue to cause Pillow to crash or execute arbitrary code.
(CVE-2026-59197)

It was discovered that Pillow incorrectly handled image coordinate
calculations. An attacker could possibly use this issue to cause
Pillow to crash. (CVE-2026-59199)

It was discovered that Pillow did not properly limit the size of
decompressed PDF stream data. An attacker could possibly use this
issue to cause Pillow to consume excessive memory, resulting in a
denial of service. (CVE-2026-59200)

It was discovered that Pillow incorrectly parsed EPS files containing
a negative byte count in the BeginBinary directive. An attacker could
possibly use this issue to cause Pillow to hang, resulting in a denial
of service. This issue only affected Ubuntu 26.04 LTS.
(CVE-2026-59203)

It was discovered that Pillow incorrectly accumulated JPEG2000 tile
component widths. An attacker could possibly use this issue to cause
Pillow to consume excessive memory, resulting in a denial of service.
(CVE-2026-59204)

It was discovered that Pillow incorrectly validated image mode
compatibility in color management transforms. An attacker could
possibly use this issue to cause Pillow to crash or execute arbitrary
code. (CVE-2026-59205)</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-8999-1</guid><pubDate>Wed, 04 Nov 2026 15:49:54 +0000</pubDate></item><item><title>USN-8998-1: Squid vulnerability</title><link>https://ubuntu.com/security/notices/USN-8998-1</link><description>It was discovered that Squid incorrectly handled certain HTTP Transfer-
Encoding headers. An attacker could possibly use this issue to perform
HTTP request smuggling attacks, bypass security mechanisms, or poison
web caches.</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-8998-1</guid><pubDate>Wed, 04 Nov 2026 15:32:22 +0000</pubDate></item><item><title>USN-8997-1: Net-SNMP vulnerability</title><link>https://ubuntu.com/security/notices/USN-8997-1</link><description>It was discovered that Net-SNMP incorrectly handled newly accepted
connections in the SMUX module. An unauthenticated remote attacker could
possibly use this issue to cause Net-SNMP to block indefinitely,
resulting in a denial of service.</description><guid isPermaLink="false">https://ubuntu.com/security/notices/USN-8997-1</guid><pubDate>Wed, 04 Nov 2026 15:25:21 +0000</pubDate></item></channel></rss>