Ubuntu USN-8877-1: Linux Kernel Null Pointer Dereference RCE Fix

Vulnerability Overview Vulnerability ID: USN-8877-1 Publication Date: 6 October 2026 Vulnerability Description: Multiple security issues exist within the Linux kernel, specifically including: - The LMX clock driver fails to properly handle certain memory allocation failure conditions, resulting in a null pointer dereference vulnerability. A local attacker may exploit this vulnerability to cause a denial of service (system crash). - Other security issues could be exploited by attackers to take control of the system. Impact Scope Affected Systems: Google Cloud Platform (GCP) systems Affected Subsystems: - User space API (JAPI) - ARM32 architecture - ARM64 architecture - MIPS architecture - PowerPC architecture - RISC-V architecture - User-mode Linux (UML) - x86 architecture - Block layer subsystem - Crypto API - ACPI driver - Android driver - Serial ATA and Parallel ATA drivers - Driver core - DRBD distributed replication... Remediation Update Instructions: - A computer restart is required after a standard system update to apply all necessary changes. - Due to inevitable ABI changes, the kernel update has been assigned a new version number, requiring all third-party kernel modules to be recompiled and reinstalled. - Standard system upgrades will automatically perform this action unless the standard kernel meta-packages (such as , , , ) are manually uninstalled. Remediation Versions: - Ubuntu 22.04 LTS (Jammy): - - 5.15.0-1118.128 - - 5.15.0-1118.128+fips1 - - 5.15.0.1118.115 - - 5.15.0.1118.107 - - 5.15.0.1118.107 - - 5.15.0.1118.115 References CVE IDs: - CVE-2026-89774 - CVE-2026-89002 - CVE-2026-80890 - CVE-2026-80886 - CVE-2026-80881 - CVE-2026-80880 - CVE-2026-80879 - CVE-2026-80877 - CVE-2026-80876 - CVE-2026-80875 Related Advisories USN IDs: - USN-8906-1 - USN-8905-1 - USN-8904-1 - USN-8903-1 - USN-8889-1 - USN-8888-1 - USN-8888-2 - USN-8887-1 - USN-8887-2 - USN-8886-1 Risk Mitigation Ubuntu Pro: Provides ten years of security coverage, encompassing packages in the main and universe repositories (25,000+), free for use on up to five machines. Additional Information Contact: For any additional questions, please contact the team members. Footer Information Copyright: © 2026 Canonical Ltd. Trademarks: Ubuntu and Canonical are registered trademarks of Canonical Ltd. Legal Information: Legal Information, Data Privacy, Manage Your Tracker Settings, Report Bugs on This Site.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8877-1: Linux Kernel Null Pointer Dereference RCE Fix