Ubuntu USN · USN-8361-1

Linux kernel vulnerability

Published: Mon, 01 Jun 2026 22:06

CVE-2026-31504

Summary

The system could be compromised under certain conditions.

Details

A security issue was discovered in the Linux kernel. An attacker could possibly use this to compromise the system. This update corrects flaws in the following subsystem: - Packet sockets; (CVE-2026-31504)

Recommended actions per Ubuntu release

StackPatch playbook auto-generated per release codename and per affected package.

Ubuntu trusty

linux-aws→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-aws
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-lts-xenial→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-aws→4.4.0.1155.152apt_upgrade
Standard apt upgrade. Install 4.4.0.1155.152 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-aws
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-aws-cloud-tools-4.4.0-1155→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-aws-cloud-tools-4.4.0-1155
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-aws-headers-4.4.0-1155→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-aws-headers-4.4.0-1155
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-aws-tools-4.4.0-1155→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-aws-tools-4.4.0-1155
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-buildinfo-4.4.0-1155-aws→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-buildinfo-4.4.0-1155-aws
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-buildinfo-4.4.0-281-generic→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-buildinfo-4.4.0-281-generic
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-buildinfo-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-buildinfo-4.4.0-281-lowlatency
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-cloud-tools-4.4.0-1155-aws→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-cloud-tools-4.4.0-1155-aws
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-cloud-tools-4.4.0-281-generic→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-cloud-tools-4.4.0-281-generic
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-cloud-tools-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-cloud-tools-4.4.0-281-lowlatency
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-cloud-tools-generic-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-cloud-tools-lowlatency-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-cloud-tools-lowlatency-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-cloud-tools-virtual-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-generic-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-generic-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-headers-4.4.0-1155-aws→4.4.0-1155.161kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-4.4.0-1155-aws
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-4.4.0-281→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-4.4.0-281
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-4.4.0-281-generic→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-4.4.0-281-generic
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-4.4.0-281-lowlatency
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-aws→4.4.0.1155.152kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-aws
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-generic-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-generic-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-lowlatency-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-lowlatency-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-virtual-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-headers-virtual-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-4.4.0-1155-aws→4.4.0-1155.161kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-4.4.0-1155-aws
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-4.4.0-281-generic→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-4.4.0-281-generic
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-4.4.0-281-lowlatency
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-aws→4.4.0.1155.152kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-aws
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-extra-virtual-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-extra-virtual-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-generic-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-generic-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-lowlatency-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-lowlatency-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-unsigned-4.4.0-281-generic→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-unsigned-4.4.0-281-generic
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-unsigned-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-unsigned-4.4.0-281-lowlatency
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-virtual-lts-xenial→4.4.0.281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-image-virtual-lts-xenial
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-lowlatency-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-lowlatency-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-lts-xenial-cloud-tools-4.4.0-281→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-lts-xenial-cloud-tools-4.4.0-281
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-lts-xenial-tools-4.4.0-281→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-lts-xenial-tools-4.4.0-281
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-modules-4.4.0-1155-aws→4.4.0-1155.161kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-modules-4.4.0-1155-aws
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-modules-4.4.0-281-generic→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-modules-4.4.0-281-generic
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-modules-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-modules-4.4.0-281-lowlatency
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-modules-extra-4.4.0-281-generic→4.4.0-281.315~14.04.1kernel_reboot
Kernel package — apt-upgrade then REBOOT to load the patched kernel.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-modules-extra-4.4.0-281-generic
sudo reboot
```
Reboot is required. ~30-60s downtime; containers self-restart.
linux-signed-generic-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-signed-generic-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-signed-image-generic-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-signed-image-generic-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-signed-image-lowlatency-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-signed-image-lowlatency-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-signed-lowlatency-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-signed-lowlatency-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-4.4.0-1155-aws→4.4.0-1155.161apt_upgrade
Standard apt upgrade. Install 4.4.0-1155.161 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-4.4.0-1155-aws
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-4.4.0-281-generic→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-4.4.0-281-generic
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-4.4.0-281-lowlatency→4.4.0-281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0-281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-4.4.0-281-lowlatency
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-aws→4.4.0.1155.152apt_upgrade
Standard apt upgrade. Install 4.4.0.1155.152 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-aws
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-generic-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-generic-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-lowlatency-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-lowlatency-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-virtual-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-tools-virtual-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-virtual-lts-xenial→4.4.0.281.315~14.04.1apt_upgrade
Standard apt upgrade. Install 4.4.0.281.315~14.04.1 from the apt repo.
```
sudo apt-get update
sudo apt-get install --only-upgrade -y linux-virtual-lts-xenial
```
Most apt upgrades restart their service automatically. needrestart lists anything else.

Are YOU affected by USN-8361-1?

5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8361-1 (and any other live CVE) applies. Anonymous, no signup.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Read the bash source first

Want this automated for your servers?

StackPatch runs this match against YOUR installed packages every hour

Free 1-server / $99 lifetime founder seat (50 only) / $19+/mo monthly. Indie pricing.

Buy lifetime →See StackPatch →Live audit log →