Ubuntu USN-8888-1: AMD IOMMU RMP Check Bypass Affecting SEV-SNP Memory Integrity

Vulnerability Overview Vulnerability ID: USN-8888-1 Publication Date: October 6, 2026 Description: Certain AMD processors fail to correctly perform Reverse Mapping Table (RMP) checks when IOMMU accesses specific host buffers. Local attackers can exploit this vulnerability to trigger out-of-bounds conditions, compromising the integrity of SEV-SNP guest memory. Affected Systems Affected Systems: - ARM64 Architecture - NVDIMM (Non-Volatile DIMM) Drivers - Handshake API - ARM32 Architecture - MIPS Architecture - OpenRISC Architecture - PowerPC Architecture - RISC-V Architecture - S390 Architecture - x86 Architecture - Cryptographic API - Compute Acceleration Framework - Intel NPU Drivers - ACPI Remediation Update Notes: - A system restart is required after applying standard system updates to implement all necessary changes. - Due to unavoidable ABI changes, kernel updates have been assigned new version numbers, requiring all third-party kernel modules to be recompiled and reinstalled. Standard system upgrades will perform this action automatically unless the standard kernel meta-packages (e.g., , , , ) are manually removed. Specific Update Versions: - Ubuntu 26.04 LTS: - - 7.0.0-1016.16 - - 7.0.0-1017.17 - - 7.0.0-1017.17 - - 7.0.0-1017.17 - - 7.0.0-1016.16 - - 7.0.0-1016.16 - - 7.0.0-1016.16 - - 7.0.0-1017.17 References CVE IDs: - CVE-2026-92502 - CVE-2026-89774 - CVE-2026-80886 - CVE-2026-80885 - CVE-2026-80884 - CVE-2026-80883 - CVE-2026-80882 - CVE-2026-80881 - CVE-2026-80880 - CVE-2026-80879 Related Advisories Related Advisory IDs: - USN-8906-1 - USN-8905-1 - USN-8904-1 - USN-8903-1 - USN-8903-2 - USN-8889-1 - USN-8888-2 - USN-8887-1 - USN-8887-2 - USN-8886-1 Additional Information Mitigating Security Risks: - Ubuntu Pro provides ten years of security coverage, including 25,000+ packages from the Main and Universe repositories, free for up to five machines. Contact Information For Further Questions: - Contact the support team for assistance. Footer Information Copyright: - © 2026 Canonical Ltd. - Ubuntu and Canonical are trademarks of Canonical Ltd. Other Links Legal Information: - Data Privacy - Manage Your Tracker Settings - Report Bugs on This Site Social Media Links Social Media Icons: - Facebook - Twitter - LinkedIn - Instagram - YouTube - GitHub - GitLab Summary This page primarily details several security vulnerabilities within the Linux Kernel (Azure), providing descriptions of the impact, remediation steps, and related references. Users can resolve these vulnerabilities by updating their systems to the specified versions, with additional security recommendations provided.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8888-1: AMD IOMMU RMP Check Bypass Affecting SEV-SNP Memory Integrity