Back to vendor advisories
Ubuntu Security NoticesUSN-8960-1

USN-8960-1: Linux kernel (OEM) vulnerabilities

Severity not listed 0 CVEs Published Nov 3, 2026 at 11:03 AM UTC

Summary

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

- USB Gadget drivers;

- Memory management;

- Multiple devices driver;

- ARM64 architecture;

- EROFS file system;

- Networking core;

- eXpress Data Path;

- ARM32 architecture;

- M68K architecture;

- MIPS architecture;

- OpenRISC architecture;

- PA-RISC architecture;

- PowerPC architecture;

- RISC-V architecture;

- S390 architecture;

- User-Mode Linux (UML);

- x86 architecture;

- Block layer subsystem;

- Cryptographic API;

- Compute Acceleration Framework;

- Intel NPU Driver;

- Speakup Console Speech Driver;

- ACPI drivers;

- Serial ATA and Parallel ATA drivers;

- Auxiliary display drivers;

- Drivers core;

- Micron PCIe SSD driver;

- Null block device driver;

- Ublk userspace block driver;

- Compressed RAM block device driver;

- Bluetooth drivers;

- Bus devices;

- AMD CDX bus driver;

- Hardware random number generator core;

- Character device driver;

- TPM device driver;

- Clock framework and drivers;

- Clocksource drivers;

- CPU frequency scaling framework;

- CPU idle management framework;

- Hardware crypto device drivers;

- CXL (Compute Express Link) drivers;

- DAX dirext access to differentiated memory framework;

- DIBS (Direct Internal Buffer Sharing) drivers;

- Buffer Sharing and Synchronization framework;

- DMA engine subsystem;

- EDAC drivers;

- FireWire subsystem;

- ARM SCMI message protocol;

- ARM SCPI message protocol;

- Google firmware drivers;

- Qualcomm firmware drivers;

- FPGA Framework;

- GPIO subsystem;

- GPU drivers;

- HID subsystem;

- HSI subsystem;

- Microsoft Hyper-V drivers;

- Hardware monitoring drivers;

- CoreSight HW tracing drivers;

- I2C subsystem;

- I3C subsystem;

- IIO subsystem;

- InfiniBand drivers;

- Input Device core drivers;

- Input Device (Miscellaneous) drivers;

- Input Device (Mouse) drivers;

- On-Chip Interconnect management framework;

- IOMMU subsystem;

- Industry Pack bus drivers;

- IRQ chip drivers;

- Mailbox framework;

- Media drivers;

- MemoryStick subsystem;

- Multifunction device drivers;

- Analog Devices digital potentiometer driver;

- Broadcom VK accelerator driver;

- Fastrpc Driver;

- Amazon Nitro Secure Module driver;

- SGI GRU driver;

- MMC subsystem;

- MTD block device drivers;

- Network drivers;

- Ethernet bonding driver;

- Mellanox network drivers;

- Microsoft Azure Network Adapter (MANA) driver;

- STMicroelectronics network drivers;

- Texas Instruments network drivers;

- MediaTek network drivers;

- Near Field Communication (NFC) drivers;

- NTB driver;

- NVDIMM (Non-Volatile Memory Device) drivers;

- NVME drivers;

- Device tree and open firmware driver;

- Operating Performance Points (OPP) driver;

- PA-RISC drivers;

- PCI subsystem;

- Performance monitor drivers;

- PHY drivers;

- Pin controllers subsystem;

- Chrome hardware platform drivers;

- Mellanox platform drivers;

- Microsoft Surface platform drivers;

- x86 platform drivers;

- MediaTek PM domains;

- Power sequencing drivers;

- Power supply drivers;

- Powercap sysfs driver;

- PTP clock framework;

- PWM drivers;

- RapidIO drivers;

- Voltage and Current Regulator drivers;

- Remote Processor subsystem;

- MPAM driver;

- RPMSG subsystem;

- Real Time Clock drivers;

- S/390 drivers;

- SCSI subsystem;

- ASPEED SoC drivers;

- Samsung SoC drivers;

- SPI subsystem;

- small TFT LCD display modules;

- Greybus lights staging drivers;

- Media staging drivers;

- Realtek RTL8723BS SDIO drivers;

- TCM subsystem;

- Trusted Execution Environment drivers;

- Thermal drivers;

- Thunderbolt and USB4 drivers;

- TTY drivers;

- UFS subsystem;

- Userspace I/O drivers;

- USB DSL drivers;

- Cypress C67X00 USB driver;

- USB core drivers;

- DesignWare USB3 driver;

- USB Host Controller drivers;

- Mustek MDC800 USB digital camera driver;

- Intel La Jolla Cove Adapter USB driver;

- Intel USBIO USB I/O expander driver;

- USB Serial drivers;

- USB Mass Storage drivers;

- USB Type-C support driver;

- USB Type-C Port Controller Manager driver;

- USB Type-C Connector System Software Interface driver;

- USB over IP driver;

- vDPA drivers;

- VFIO drivers;

- Virtio Host (VHOST) subsystem;

- Framebuffer layer;

- ACRN Hypervisor Service Module driver;

- Virtio drivers;

- W1 Dallas's 1-wire bus driver;

- Watchdog drivers;

- Xen hypervisor drivers;

- 9P distributed file system;

- File systems infrastructure;

- AFS file system;

- BFS file system;

- BTRFS file system;

- Ceph distributed file system;

- debug file system;

- eCrypt file system;

- EFI Variable file system;

- exFAT file system;

- Ext4 file system;

- F2FS file system;

- FAT file system;

- FUSE (File system in Userspace);

- GFS2 file system;

- HFS+ file system;

- HugeTLB file system;

- Journaling layer for block devices (JBD2);

- JFS file system;

- Network file systems library;

- Network file system (NFS) client;

- Network file system (NFS) server daemon;

- NILFS2 file system;

- File system notification infrastructure;

- NTFS3 file system;

- OCFS2 file system;

- OrangeFS file system;

- Overlay file system;

- SMB network file system;

- SquashFS file system;

- Tracing file system;

- UBI file system;

- UDF file system;

- XFS file system;

- BPF subsystem;

- Tracing infrastructure;

- Kernel futex primitives;

- Memory Management;

- VLANs driver;

- IPv4 networking;

- io_uring subsystem;

- KProbes tracing;

- KVM subsystem;

- Live Update Orchestrator (LUO);

- Netfilter;

- Perf events;

- Scheduler infrastructure;

- Signal handling mechanism;

- Networking subsytem;

- Slab allocator;

- Sun RPC protocol;

- Vector I/O iterator library;

- Virtio network driver;

- Network traffic control;

- IPv6 networking;

- Bluetooth subsystem;

- IEEE 802.15.4 subsystem;

- IP tunnels definitions;

- MAC80211 subsystem;

- NFC subsystem;

- SCTP protocol;

- Network sockets;

- TCP network protocol;

- User-space API (UAPI);

- Kernel init infrastructure;

- Audit subsystem;

- Control group (cgroup);

- Kernel crash support code;

- DMA mapping infrastructure;

- Kernel exit() syscall;

- Kernel fork() syscall;

- IRQ subsystem;

- KCOV code coverage framework;

- Locking primitives;

- Kernel module support;

- Namespaces infrastructure;

- Kernel command line parsing driver;

- PID allocator;

- printk logging mechanism;

- System reboot mechanism;

- Timer subsystem;

- Workqueue subsystem;

- Kernel build system;

- Heterogeneous memory management;

- UCS-2 string library;

- KASAN memory debugging framework;

- 802.1Q VLAN protocol;

- Appletalk network protocol;

- Asynchronous Transfer Mode (ATM) subsystem;

- B.A.T.M.A.N. meshing protocol;

- Ethernet bridge;

- CAN network layer;

- Ceph Core library;

- Devlink API;

- Distributed Switch Architecture;

- HSR network protocol;

- IEEE802154.4 network protocol;

- IFE protocol;

- IUCV driver;

- KCM (Kernel Connection Multiplexor) sockets driver;

- L2TP protocol;

- Logical Link layer;

- Management Component Transport Protocol (MCTP);

- MultiProtocol Label Switching driver;

- Multipath TCP;

- NCSI (Network Controller Sideband Interface) driver;

- Netlink;

- Open vSwitch;

- Packet sockets;

- Phonet protocol;

- PSP security protocol;

- Qualcomm IPC Router (QRTR);

- RDS protocol;

- SMC sockets;

- TIPC protocol;

- TLS protocol;

- Unix domain sockets;

- VMware vSockets driver;

- Wireless networking;

- X.25 network layer;

- XFRM subsystem;

- AppArmor security module;

- Integrity Measurement Architecture(IMA) framework;

- Linux Security Modules (LSM) Framework;

- Key management;

- Landlock security;

- SELinux security module;

- Simplified Mandatory Access Control Kernel framework;

- ALSA framework;

- Generic PCM loopback sound driver;

- Generic sound devices;

- HD-audio driver;

- ESS ES18xx ALSA driver;

- ICE1712/ICE1724 (Envy24) ALSA driver;

- Digigram PCXHR ALSA driver;

- AMD SoC Alsa drivers;

- Cirrus Logic audio codecs;

- QCOM ASoC drivers;

- Realtek audio codecs;

- Texas InstrumentS Audio (ASoC/HDA) drivers;

- SoC Audio for Freescale CPUs drivers;

- Intel ASoC drivers;

- MediaTek ASoC drivers;

- Amlogic Meson SoC drivers;

- Rockchip ASoC drivers;

- SoundWire (SDCA) ASoC drivers;

- SoC audio core drivers;

- SOF drivers;

- Spreadtrum ASoC drivers;

- STI ASoC drivers;

- Xilinx ASoC drivers;

- USB sound devices;

- Virtio sound driver;

View 2889 CVE identifiers

Products covered

A separate affected-products list was not included in the collected bulletin.

Remediation

This update corrects flaws in the following subsystems:

  • USB Gadget drivers
  • Memory management
  • Multiple devices driver
  • ARM64 architecture
  • EROFS file system
  • Networking core
  • eXpress Data Path
  • ARM32 architecture
  • M68K architecture
  • MIPS architecture
  • OpenRISC architecture
  • PA-RISC architecture
  • PowerPC architecture
  • RISC-V architecture
  • S390 architecture
  • User-Mode Linux (UML)
  • x86 architecture
  • Block layer subsystem
  • Cryptographic API
  • Compute Acceleration Framework
  • Intel NPU Driver
  • Speakup Console Speech Driver
  • ACPI drivers
  • Serial ATA and Parallel ATA drivers
  • Auxiliary display drivers
  • Drivers core
  • Micron PCIe SSD driver
  • Null block device driver
  • Ublk userspace block driver
  • Compressed RAM block device driver
  • Bluetoo

CVEs in this advisory 0

No CVE identifiers were listed in the collected bulletin.

Updates

  1. Published by Ubuntu

    The publication date reported by the vendor.

  2. Added to SecurityAlert

    We collected the advisory from the official source.

  3. Confirmed at the source

    Our collector saw this advisory during a later source check.