Ubuntu USN-8904-1 Kernel Vulnerability Advisory

Vulnerability Overview Vulnerability ID: USN-8904-1 Publication Date: October 8, 2026 Description: Multiple security issues have been discovered in the Linux kernel that could be exploited by attackers to compromise the system. Impact Scope Affected Systems: - ARM32 architecture - ARM64 architecture - MIPS architecture - x86 architecture - Intel MEU driver - Secondary display driver - zram block device driver - GPIO subsystem - CPU driver - HID subsystem - I2C subsystem - IIO subsystem - InfiniBand driver - Input device core driver - Input device (mouse) driver - Multiqueue driver - Media driver - FastRPC driver - Ethernet bonding driver - Network driver - Mellanox network driver - Microsoft Azure Network Adapter (MANA) driver - Texas Instruments network driver - NVMEM (Non-volatile Memory) driver - Parport Remediation Update Instructions: - After performing a standard system update, restart the computer to apply all necessary changes. - Due to inevitable ABI changes, the kernel update has been assigned a new version number, requiring all third-party kernel modules to be recompiled and reinstalled. This will be performed automatically during a standard system upgrade unless the standard kernel meta-packages (such as , , , ) are manually uninstalled. Specific Update Versions: - Ubuntu 24.04 LTS (Noble): - - 6.8.0-1068.75 - - 6.8.0-1069.77+fips1 - - 6.8.0-1070.78 - - 6.8.0-1070.78 - - 6.8.0-1068.75 - - 6.8.0-1068.75 - - 6.8.0-1069.77+fips1 - - 6.8.0-1069.77+fips1 - - 6.8.0-1070.78 - Ubuntu 22.04 LTS (Jammy): - - 6.8.0-1068.75-22.04.1 - - 6.8.0-1070.78-22.04.1 - - 6.8.0-1070.78-22.04.1 - - 6.8.0-1070.78-22.04.1 - - 6.8.0-1068.75-22.04.1 - - 6.8.0-1068.75-22.04.1 References CVE IDs: - CVE-2026-93502 - CVE-2026-72065 - CVE-2026-72064 - CVE-2026-64528 - CVE-2026-64527 - CVE-2026-64525 - CVE-2026-64524 - CVE-2026-64243 - CVE-2026-64242 - CVE-2026-64240 Related Notices USN IDs: - USN-8906-1 - USN-8905-1 - USN-8905-2 - USN-8903-1 - USN-8903-2 - USN-8889-1 - USN-8888-1 - USN-8888-2 - USN-8887-1 - USN-8887-2 Additional Information Reducing Security Risks: - Ubuntu Pro provides ten years of security coverage, encompassing packages from more than 25,000 main and universe repositories. It is free for use on up to five machines. Summary This page primarily outlines multiple security issues within the Linux kernel and their respective remediation solutions. It details the specific affected systems and updated versions, providing relevant CVE IDs and USN IDs for further reference.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8904-1 Kernel Vulnerability Advisory