Ubuntu Kernel USN-8906-1: ARM TLB Invalidation Vulnerability Advisory

Vulnerability Overview Vulnerability ID: USN-8906-1 Publication Date: October 8, 2026 Description: It has been discovered that some ARM processors may complete Translation Lookaside Buffer (TLB) invalidation broadcasts before globally observable invalid memory writes are completed. A local attacker could exploit this vulnerability to write to memory after permissions have been revoked, bypassing memory protections or gaining elevated privileges. Affected Systems Affected System: Linux Kernel (IBM) Affected Architectures: - ARM64 architecture - ARM32 architecture - MIPS architecture - PowerPC architecture - x86 architecture - Intel NPU driver - Compute acceleration framework - Auxiliary display driver - Driver core - Compressed RAM block device driver - Bluetooth Remediation Update Instructions: - A system reboot is required after standard system updates to apply all necessary changes. - Due to unavoidable ABI changes, the kernel update has been assigned a new version number, requiring all third-party kernel modules to be recompiled and reinstalled. Standard system upgrades will perform this automatically unless the standard kernel meta-packages (such as , , , ) are manually uninstalled. Fixed Versions: - Ubuntu 22.04 LTS (Jammy) - linux-image-6.8.0-1066-ibm – 6.8.0-1066.67–22.04.1 - linux-image-ibm-6.8 – 6.8.0-1066.67–22.04.1 References CVE ID: - CVE-2026-92502 - CVE-2026-64528 - CVE-2026-64527 - CVE-2026-64525 - CVE-2026-64524 - CVE-2026-64518 - CVE-2026-64243 - CVE-2026-64242 - CVE-2026-64240 - CVE-2026-64239 - See the bottom of the page for more references. Related Advisories Related USN IDs: - USN-8911-1 - USN-8905-1 - USN-8905-2 - USN-8904-1 - USN-8903-1 - USN-8903-2 - USN-8889-1 - USN-8888-1 - USN-8888-2 - USN-8887-1 - See the bottom of the page for more references. Reduce Security Exposure Ubuntu Pro: Provides ten years of security coverage for over 25,000 packages in the Main and Universe repositories, and can be used for free on up to five machines. Additional Information Contact Team: For further questions, please contact the team members. Footer Information Copyright: © 2026 Canonical Ltd. Trademarks: Ubuntu and Canonical are registered trademarks of Canonical Ltd. Legal Information: Legal information, data privacy, manage your tracker settings, report bugs on this site.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu Kernel USN-8906-1: ARM TLB Invalidation Vulnerability Advisory