Ubuntu USN-8661-2 Linux Kernel Security Update

Vulnerability Overview Vulnerability ID: USN-8661-2 Publication Date: August 21, 2026 Vulnerability Description: Siebe Devroe, Hélène Gollier, and Mathy Vanhoef discovered that the Linux kernel's WiFi implementation does not correctly handle aggregation frames, resulting in a vulnerability in mesh networks (CVE-2020-24588). Attackers with physical proximity can exploit this issue to inject packets (CVE-2025-27588). Additionally, several other security issues were found that attackers could leverage to compromise the system. Affected Scope Affected Systems: Linux Kernel Affected Subsystems: - x86 Architecture - InfiniBand Driver - Network Drivers - NVMe Driver - Ext4 Filesystem - SMB Network File System - IPv4 Network - Network Traffic Control - TCP Network Protocol - Locking Primitives - IPv6 Network - Multipath TCP - Netfilter - Open vSwitch - SCTP Remediation Update Instructions: - A system restart is required after standard system updates to apply all necessary changes. - Due to inevitable ABI changes, kernel updates have been assigned new version numbers, requiring the recompilation and reinstallation of all third-party kernel modules. This process is performed automatically during standard system upgrades unless standard kernel meta-packages (such as , , , ) are manually removed. Fixed Versions: - Ubuntu 22.04 LTS (Jammy) - linux-image-5.15.0-190-lowlatency – 5.15.0-190.200 - linux-image-5.15.0-190-lowlatency-64k – 5.15.0-190.200 - linux-image-lowlatency – 5.15.0.190.157 - linux-image-lowlatency-5.15 – 5.15.0.190.157 - linux-image-lowlatency-64k – 5.15.0.190.157 - linux-image-lowlatency-64k-5.15 – 5.15.0.190.157 References CVE-2026-64531 CVE-2026-53359 CVE-2026-53246 CVE-2026-53228 CVE-2026-53225 CVE-2026-53224 CVE-2026-53215 CVE-2026-53212 CVE-2026-53176 CVE-2026-53086 Related Notices USN-8669-1 USN-8667-1 USN-8666-1 USN-8665-1 USN-8664-1 USN-8663-1 USN-8662-2 USN-8662-1 USN-8661-1 USN-8660-1 Additional Information Risk Reduction: Ubuntu Pro provides ten years of security coverage for over 25,000 packages covering Main and Universe repositories, and is available free of charge for up to five machines. Summary This advisory addresses multiple security issues within the Linux kernel, specifically highlighting vulnerabilities in the WiFi implementation. Remediation involves updating to specific versions of the Linux kernel and may require recompiling and reinstalling third-party kernel modules. Users are advised to update their systems as soon as possible to patch these vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8661-2 Linux Kernel Security Update

More from this source