Ubuntu USN-8887-3: Linux Kernel Multiple CVE Vulnerability Patch Advisory

Vulnerability Overview Vulnerability ID: USN-8887-3 Publication Date: October 9, 2026 Description: Several security issues exist in the Linux kernel, specifically including: - Certain AMD processors do not properly execute Reverse Mapping Table (RMP) checks. When the IOMMU accesses specific host buffers, a local attacker may exploit this issue to trigger out-of-bounds conditions, compromising the integrity of SEV-SNP guest memory. - Other security issues involve multiple subsystems, such as the ARM64 architecture, NVDIMM drivers, Handshake API, etc. Impact Scope Affected Systems: - Multiple versions and architectures of the Linux kernel, including but not limited to ARM64, ARM32, MIPS, OpenRISC, PowerPC, RISC-V, S390, and x86. - Linux kernels on specific cloud platforms, such as Google Cloud Platform (GCP) and Oracle Cloud. Remediation Update Instructions: - A restart is required after standard system updates to apply all necessary changes. - Due to ABI changes, kernel updates have been assigned new version numbers, requiring all third-party kernel modules to be recompiled and reinstalled. - Standard system upgrades will automatically handle this unless the standard kernel meta-packages (such as linux-generic, linux-generic-lts-release, etc.) have been manually removed. Specific Package Versions: - The 24.04 LTS (noble) version requires updates to the following package versions: - linux-image-7.0.0-1013-oracle – 7.0.0-1013.13~24.04.1 - linux-image-7.0.0-1013-oracle-64k – 7.0.0-1013.13~24.04.1 - linux-image-7.0.0-1014-gcp – 7.0.0-1014.14~24.04.1 - linux-image-7.0.0-1014-gcp-64k – 7.0.0-1014.14~24.04.1 - linux-image-7.0.0-38-generic – 7.0.0-38.38~24.04.4 - linux-image-7.0.0-38-generic-64k – 7.0.0-38.38~24.04.4 - linux-image-gcp – 7.0.0-1014.14~24.04.1 - linux-image-gcp-64k – 7.0.0-1014.14~24.04.1 - linux-image-gcp-64k-7.0 – 7.0.0-1014.14~24.04.1 - linux-image-gcp-7.0 – 7.0.0-1014.14~24.04.1 - linux-image-generic-64k-7.0 – 7.0.0-38.38~24.04.4 - linux-image-generic-64k-hwe-24.04 – 7.0.0-38.38~24.04.4 - linux-image-generic-hwe-24.04 – 7.0.0-38.38~24.04.4 - linux-image-generic-hwe-24.04 – 7.0.0-38.38~24.04.4 - linux-image-oracle – 7.0.0-1013.13~24.04.1 - linux-image-oracle-64k – 7.0.0-1013.13~24.04.1 - linux-image-oracle-64k-7.0 – 7.0.0-1013.13~24.04.1 - linux-image-oracle-7.0 – 7.0.0-1013.13~24.04.1 - linux-image-virtual-7.0 – 7.0.0-38.38~24.04.4 - linux-image-virtual-hwe-24.04 – 7.0.0-38.38~24.04.4 References CVE Numbers: CVE-2026-92502, CVE-2026-99774, CVE-2026-80886, CVE-2026-80885, CVE-2026-80884, CVE-2026-80883, CVE-2026-80882, CVE-2026-80881, CVE-2026-80880, CVE-2026-80879 Related Notices Related USN Numbers: USN-8911-1, USN-8906-1, USN-8905-1, USN-8905-2, USN-8904-1, USN-8903-1, USN-8903-2, USN-8889-1, USN-8880-1, USN-8880-2 Risk Mitigation Ubuntu Pro: Provides ten years of security coverage for over 25,000 packages, with up to five machines free. Additional Information Contact Team: For further questions, please contact the team members. Footer Information Copyright: © 2026 Canonical Ltd. Trademarks: Ubuntu and Canonical are trademarks of Canonical Ltd. Legal: Legal information, data privacy, manage your tracker settings, report bugs on this site.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8887-3: Linux Kernel Multiple CVE Vulnerability Patch Advisory