Linux kernel vulnerabilities
Published: Thu, 23 Jul 2026 07:35
Summary
Several security issues were fixed in the Linux kernel.
Details
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 platform drivers; - PSP security protocol; - ARM32 architecture; - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - User-Mode Linux (UML); - x86 architecture; - Block layer subsystem; - Cryptographic API; - Intel NPU Driver; - Compute Acceleration Framework; - ACPI drivers; - Auxiliary display drivers; - Drivers core; - DRBD Distributed Replicated Block Device drivers; - Rados block device (RBD) driver; - Ublk userspace block driver; - Compressed RAM block device driver; - Bluetooth drivers; - Bus devices; - Character device driver; - Clock framework and drivers; - CPU frequency scaling framework; - Hardware crypto device drivers; - Buffer Sharing and Synchronization framework; - DPLL subsystem; - EDAC drivers; - Arm Firmware Framework for ARMv8-A(FFA); - EFI core; - FWCTL subsystem; - GPIO subsystem; - GPU drivers; - HID subsystem; - Hardware monitoring drivers; - I2C subsystem; - I3C subsystem; - IIO ADC drivers; - IIO subsystem; - InfiniBand drivers; - Input Device core drivers; - IOMMU subsystem; - Mailbox framework; - Multiple devices driver; - Media drivers; - NVIDIA Tegra memory controller driver; - MTD block device drivers; - Network drivers; - Ethernet bonding driver; - Mellanox network drivers; - Microsoft Azure Network Adapter (MANA) driver; - STMicroelectronics network drivers; - Texas Instruments network drivers; - MediaTek network drivers; - NVME drivers; - Parport drivers; - PCI subsystem; - Pin controllers subsystem; - Chrome hardware platform drivers; - ACPI WMI driver; - Generic PM domains; - MediaTek PM domains; - Power supply drivers; - MPAM driver; - Amlogic Meson reset controller drivers; - S/390 drivers; - SCSI subsystem; - NVIDIA Tegra Control Backbone (CBB) driver; - SPI subsystem; - Greybus lights staging drivers; - Media staging drivers; - Realtek RTL8723BS SDIO drivers; - TCM subsystem; - Thunderbolt and USB4 drivers; - TTY drivers; - Userspace I/O drivers; - USB Device Class drivers; - ULPI bus; - DesignWare USB2 driver; - USB Gadget drivers; - USB Dual Role (OTG-ready) Controller drivers; - USB Serial drivers; - USB Type-C support driver; - USB Type-C Port Controller Manager driver; - TI TPS6598x USB Power Delivery controller driver; - USB Type-C Connector System Software Interface driver; - USB over IP driver; - vDPA drivers; - VFIO drivers; - Framebuffer layer; - TSM AMD SEV Guest driver; - Xen hypervisor drivers; - 9P distributed file system; - File systems infrastructure; - AFS file system; - BTRFS file system; - Ceph distributed file system; - EROFS file system; - F2FS file system; - FUSE (File system in Userspace); - GFS2 file system; - HFS+ file system; - HugeTLB file system; - Network file systems library; - Network file system (NFS) server daemon; - NILFS2 file system; - File system notification infrastructure; - NTFS3 file system; - OCFS2 file system; - Overlay file system; - Diskquota system; - SMB network file system; - Tracing file system; - UDF file system; - DRM TTM subsystem; - Control group (cgroup); - Kernel CPU control infrastructure; - Tracing infrastructure; - QorIQ DPAA2 FSL-MC bus driver; - Freescale ENETC Ethernet drivers; - Memory management; - Memory Management; - Linked list library; - Netfilter; - padata parallel execution mechanism; - PPP protocol drivers and compressors; - Bluetooth subsystem; - Networking core; - Network shaper API; - Network traffic control; - TCP network protocol; - XFRM subsystem; - io_uring subsystem; - IPC subsystem; - Audit subsystem; - BPF subsystem; - DMA mapping infrastructure; - Kernel exit() syscall; - Kernel fork() syscall; - Kernel futex primitives; - IRQ subsystem; - Kexec HandOver (KHO); - Padata parallel execution mechanism; - Scheduler infrastructure; - Cryptographic library; - KProbes tracing; - 802.1Q VLAN protocol; - B.A.T.M.A.N. meshing protocol; - Ethernet bridge; - Ceph Core library; - Distributed Switch Architecture; - Ethtool driver; - Handshake API; - HSR network protocol; - IPv4 networking; - IPv6 networking; - IUCV driver; - L2TP protocol; - MAC80211 subsystem; - Multipath TCP; - NFC subsystem; - Open vSwitch; - Phonet protocol; - RDS protocol; - RxRPC session sockets; - SCTP protocol; - SMC sockets; - TIPC protocol; - TLS protocol; - Unix domain sockets; - VMware vSockets driver; - Wireless networking; - Integrity Measurement Architecture(IMA) framework; - Key management; - Linux Security Modules (LSM) Framework; - SELinux security module; - ALSA framework; - HD-audio driver; - AudioScience HPI driver; - FourSemi audio codecs; - Texas InstrumentS Audio (ASoC/HDA) drivers; - QCOM ASoC drivers; - Renesas ASoC drivers; - SOF drivers; - STI ASoC drivers; - USB sound devices; - KVM subsystem; (CVE-2026-43490, CVE-2026-43492, CVE-2026-43495, CVE-2026-43496, CVE-2026-43497, CVE-2026-43498, CVE-2026-43502, CVE-2026-45834, CVE-2026-45835, CVE-2026-45836, CVE-2026-45837, CVE-2026-45838, CVE-2026-45839, CVE-2026-45840, CVE-2026-45841, CVE-2026-45842, CVE-2026-45843, CVE-2026-45844, CVE-2026-45845, CVE-2026-45846, CVE-2026-46104, CVE-2026-46105, CVE-2026-46106, CVE-2026-46107, CVE-2026-46108, CVE-2026-46109, CVE-2026-46110, CVE-2026-46111, CVE-2026-46112, CVE-2026-46113, CVE-2026-46114, CVE-2026-46116, CVE-2026-46117, CVE-2026-46118, CVE-2026-46120, CVE-2026-46121, CVE-2026-46122, CVE-2026-46123, CVE-2026-46124, CVE-2026-46125, CVE-2026-46126, CVE-2026-46127, CVE-2026-46128, CVE-2026-46129, CVE-2026-46130, CVE-2026-46131, CVE-2026-46132, CVE-2026-46133, CVE-2026-46134, CVE-2026-46136, CVE-2026-46138, CVE-2026-46139, CVE-2026-46140, CVE-2026-46141, CVE-2026-46142, CVE-2026-46143, CVE-2026-46144, CVE-2026-46145, CVE-2026-46146, CVE-2026-46147, CVE-2026-46148, CVE-2026-46149, CVE-2026-46150, CVE-2026-46151, CVE-2026-46152, CVE-2026-46153, CVE-2026-46154, CVE-2026-46156, CVE-2026-46157, CVE-2026-46158, CVE-2026-46159, CVE-2026-46160, CVE-2026-46161, CVE-2026-46162, CVE-2026-46163, CVE-2026-46164, CVE-2026-46165, CVE-2026-46166, CVE-2026-46167, CVE-2026-46168, CVE-2026-46169, CVE-2026-46170, CVE-2026-46171, CVE-2026-46172, CVE-2026-46173, CVE-2026-46174, CVE-2026-46175, CVE-2026-46176, CVE-2026-46177, CVE-2026-46178, CVE-2026-46179, CVE-2026-46180, CVE-2026-46181, CVE-2026-46182, CVE-2026-46183, CVE-2026-46184, CVE-2026-46186, CVE-2026-46187, CVE-2026-46188, CVE-2026-46189, CVE-2026-46190, CVE-2026-46191, CVE-2026-46192, CVE-2026-46193, CVE-2026-46194, CVE-2026-46196, CVE-2026-46197, CVE-2026-46198, CVE-2026-46199, CVE-2026-46200, CVE-2026-46201, CVE-2026-46202, CVE-2026-46203, CVE-2026-46204, CVE-2026-46205, CVE-2026-46206, CVE-2026-46207, CVE-2026-46208, CVE-2026-46209, CVE-2026-46210, CVE-2026-46211, CVE-2026-46212, CVE-2026-46213, CVE-2026-46214, CVE-2026-46215, CVE-2026-46216, CVE-2026-46218, CVE-2026-46219, CVE-2026-46220, CVE-2026-46221, CVE-2026-46222, CVE-2026-46223, CVE-2026-46224, CVE-2026-46225, CVE-2026-46226, CVE-2026-46227, CVE-2026-46228, CVE-2026-46229, CVE-2026-46230, CVE-2026-46231, CVE-2026-46232, CVE-2026-46233, CVE-2026-46234, CVE-2026-46235, CVE-2026-46236, CVE-2026-46238, CVE-2026-46239, CVE-2026-46240, CVE-2026-46241, CVE-2026-46242, CVE-2026-46273, CVE-2026-46274, CVE-2026-46275, CVE-2026-46290, CVE-2026-46291, CVE-2026-46292, CVE-2026-46293, CVE-2026-46294, CVE-2026-46295, CVE-2026-46296, CVE-2026-46297, CVE-2026-46298, CVE-2026-46299, CVE-2026-46301, CVE-2026-46302, CVE-2026-46303, CVE-2026-46304, CVE-2026-46305, CVE-2026-46306, CVE-2026-46307, CVE-2026-46308, CVE-2026-46309, CVE-2026-46310, CVE-2026-46311, CVE-2026-46312, CVE-2026-46313, CVE-2026-46314, CVE-2026-46315, CVE-2026-46317, CVE-2026-46318, CVE-2026-46319, CVE-2026-46320, CVE-2026-46321, CVE-2026-46322, CVE-2026-46324, CVE-2026-52911, CVE-2026-52912, CVE-2026-52913, CVE-2026-52914, CVE-2026-52915, CVE-2026-52916, CVE-2026-52918, CVE-2026-52919, CVE-2026-52920, CVE-2026-52921, CVE-2026-52922, CVE-2026-52923, CVE-2026-52925, CVE-2026-52926, CVE-2026-52927, CVE-2026-52928, CVE-2026-52931, CVE-2026-52932, CVE-2026-52934, CVE-2026-52936, CVE-2026-52937, CVE-2026-52941, CVE-2026-52943, CVE-2026-52944, CVE-2026-52949, CVE-2026-52950, CVE-2026-52951, CVE-2026-52952, CVE-2026-52953, CVE-2026-52954, CVE-2026-52955, CVE-2026-52956, CVE-2026-52957, CVE-2026-52958, CVE-2026-52959, CVE-2026-52960, CVE-2026-52961, CVE-2026-52962, CVE-2026-52963, CVE-2026-52964, CVE-2026-52965, CVE-2026-52967, CVE-2026-52968, CVE-2026-52969, CVE-2026-52970, CVE-2026-52971, CVE-2026-52973, CVE-2026-52974, CVE-2026-52975, CVE-2026-52976, CVE-2026-52977, CVE-2026-52978, CVE-2026-52979, CVE-2026-52980, CVE-2026-52981, CVE-2026-52982, CVE-2026-52983, CVE-2026-52984, CVE-2026-52985, CVE-2026-52986, CVE-2026-52987, CVE-2026-52988, CVE-2026-52989, CVE-2026-52990, CVE-2026-52991, CVE-2026-52992, CVE-2026-52993, CVE-2026-52994, CVE-2026-52995, CVE-2026-52996, CVE-2026-52997, CVE-2026-52998, CVE-2026-52999, CVE-2026-53000, CVE-2026-53001, CVE-2026-53002, CVE-2026-53003, CVE-2026-53004, CVE-2026-53005, CVE-2026-53006, CVE-2026-53007, CVE-2026-53008, CVE-2026-53009, CVE-2026-53010, CVE-2026-53011, CVE-2026-53012, CVE-2026-53013, CVE-2026-53014, CVE-2026-53015, CVE-2026-53016, CVE-2026-53017, CVE-2026-53018, CVE-2026-53019, CVE-2026-53020, CVE-2026-53021, CVE-2026-53022, CVE-2026-53023, CVE-2026-53024, CVE-2026-53025, CVE-2026-53026, CVE-2026-53027, CVE-2026-53028, CVE-2026-53029, CVE-2026-53030, CVE-2026-53031, CVE-2026-53032, CVE-2026-53033, CVE-2026-53034, CVE-2026-53035, CVE-2026-53036, CVE-2026-53037, CVE-2026-53038, CVE-2026-53039, CVE-2026-53040, CVE-2026-53041, CVE-2026-53042, CVE-2026-53043, CVE-2026-53044, CVE-2026-53045, CVE-2026-53046, CVE-2026-53047, CVE-2026-53048, CVE-2026-53049, CVE-2026-53050, CVE-2026-53051, CVE-2026-53052, CVE-2026-53053, CVE-2026-53054, CVE-2026-53055, CVE-2026-53056, CVE-2026-53057, CVE-2026-53058, CVE-2026-53059, CVE-2026-53060, CVE-2026-53061, CVE-2026-53062, CVE-2026-53063, CVE-2026-53064, CVE-2026-53065, CVE-2026-53066, CVE-2026-53067, CVE-2026-53068, CVE-2026-53069, CVE-2026-53070, CVE-2026-53071, CVE-2026-53072, CVE-2026-53073, CVE-2026-53074, CVE-2026-53075, CVE-2026-53076, CVE-2026-53077, CVE-2026-53078, CVE-2026-53079, CVE-2026-53080, CVE-2026-53081, CVE-2026-53082, CVE-2026-53083, CVE-2026-53084, CVE-2026-53085, CVE-2026-53086, CVE-2026-53087, CVE-2026-53088, CVE-2026-53089, CVE-2026-53090, CVE-2026-53091, CVE-2026-53092, CVE-2026-53093, CVE-2026-53094, CVE-2026-53095, CVE-2026-53096, CVE-2026-53097, CVE-2026-53098, CVE-2026-53099, CVE-2026-53100, CVE-2026-53101, CVE-2026-53102, CVE-2026-53103, CVE-2026-53104, CVE-2026-53105, CVE-2026-53106, CVE-2026-53107, CVE-2026-53108, CVE-2026-53109, CVE-2026-53110, CVE-2026-53111, CVE-2026-53112, CVE-2026-53113, CVE-2026-53114, CVE-2026-53115, CVE-2026-53116, CVE-2026-53117, CVE-2026-53118, CVE-2026-53119, CVE-2026-53120, CVE-2026-53121, CVE-2026-53122, CVE-2026-53123, CVE-2026-53124, CVE-2026-53125, CVE-2026-53126, CVE-2026-53127, CVE-2026-53128, CVE-2026-53129, CVE-2026-53130, CVE-2026-53174, CVE-2026-53277, CVE-2026-53278, CVE-2026-53279, CVE-2026-53280, CVE-2026-53281, CVE-2026-53282, CVE-2026-53283, CVE-2026-53284, CVE-2026-53285, CVE-2026-53286, CVE-2026-53287, CVE-2026-53288, CVE-2026-53289, CVE-2026-53290, CVE-2026-53291, CVE-2026-53292, CVE-2026-53293, CVE-2026-53294, CVE-2026-53295, CVE-2026-53296, CVE-2026-53297, CVE-2026-53298, CVE-2026-53299, CVE-2026-53300, CVE-2026-53301, CVE-2026-53302, CVE-2026-53303, CVE-2026-53304, CVE-2026-53305, CVE-2026-53306, CVE-2026-53307, CVE-2026-53308, CVE-2026-53309, CVE-2026-53310, CVE-2026-53311, CVE-2026-53312, CVE-2026-53313, CVE-2026-53314, CVE-2026-53315, CVE-2026-53316, CVE-2026-53317, CVE-2026-53318, CVE-2026-53319, CVE-2026-53320, CVE-2026-53321, CVE-2026-53322, CVE-2026-53323, CVE-2026-53324, CVE-2026-53357, CVE-2026-53358, CVE-2026-53360, CVE-2026-53364, CVE-2026-53365, CVE-2026-53367, CVE-2026-53368, CVE-2026-53369, CVE-2026-53370, CVE-2026-53371, CVE-2026-53372, CVE-2026-53373, CVE-2026-53374, CVE-2026-53375, CVE-2026-53376, CVE-2026-53377, CVE-2026-53378, CVE-2026-53379, CVE-2026-53380, CVE-2026-63837, CVE-2026-63838, CVE-2026-63839, CVE-2026-63840, CVE-2026-63841, CVE-2026-63842, CVE-2026-63843, CVE-2026-63844, CVE-2026-63845, CVE-2026-63846, CVE-2026-63847, CVE-2026-63848, CVE-2026-63849, CVE-2026-63850, CVE-2026-63851, CVE-2026-63852, CVE-2026-63853, CVE-2026-63854, CVE-2026-63855, CVE-2026-63856, CVE-2026-63857, CVE-2026-63858, CVE-2026-63859, CVE-2026-63860, CVE-2026-63861, CVE-2026-63862, CVE-2026-63863, CVE-2026-63864, CVE-2026-63865, CVE-2026-63866, CVE-2026-63875, CVE-2026-63876, CVE-2026-63877, CVE-2026-63878, CVE-2026-63879, CVE-2026-63880, CVE-2026-63881, CVE-2026-63882, CVE-2026-63883, CVE-2026-63884, CVE-2026-63886, CVE-2026-63887, CVE-2026-63888, CVE-2026-63889, CVE-2026-63890, CVE-2026-63891, CVE-2026-63892, CVE-2026-63893, CVE-2026-63894, CVE-2026-63895, CVE-2026-63896, CVE-2026-63897, CVE-2026-63898, CVE-2026-63899, CVE-2026-63900, CVE-2026-63901, CVE-2026-63902, CVE-2026-63903, CVE-2026-63904, CVE-2026-63905, CVE-2026-63906, CVE-2026-63907, CVE-2026-63908, CVE-2026-63909, CVE-2026-63910, CVE-2026-63911, CVE-2026-63912, CVE-2026-63913, CVE-2026-63914, CVE-2026-63915, CVE-2026-63916, CVE-2026-63917, CVE-2026-63918, CVE-2026-63919, CVE-2026-63920, CVE-2026-63921, CVE-2026-63922, CVE-2026-63923, CVE-2026-63924, CVE-2026-63925, CVE-2026-63926, CVE-2026-63927, CVE-2026-63928, CVE-2026-63929, CVE-2026-63930, CVE-2026-63931, CVE-2026-63932, CVE-2026-63933, CVE-2026-63934, CVE-2026-63935, CVE-2026-63936, CVE-2026-63937, CVE-2026-63938, CVE-2026-63939, CVE-2026-63940, CVE-2026-63941, CVE-2026-63942, CVE-2026-63943, CVE-2026-63944, CVE-2026-63945, CVE-2026-63946, CVE-2026-63947, CVE-2026-63948, CVE-2026-63949, CVE-2026-63950, CVE-2026-63951, CVE-2026-63952, CVE-2026-63953, CVE-2026-63954, CVE-2026-63955, CVE-2026-63956, CVE-2026-63957, CVE-2026-63958, CVE-2026-63959, CVE-2026-63960, CVE-2026-63961, CVE-2026-63962, CVE-2026-63963, CVE-2026-63964, CVE-2026-63965, CVE-2026-63966, CVE-2026-63967, CVE-2026-63968, CVE-2026-63969, CVE-2026-63970, CVE-2026-63971, CVE-2026-63972, CVE-2026-63973, CVE-2026-63974, CVE-2026-63975, CVE-2026-63976, CVE-2026-63977, CVE-2026-63978, CVE-2026-63979, CVE-2026-63980, CVE-2026-63981, CVE-2026-63982, CVE-2026-63983, CVE-2026-63984, CVE-2026-63985, CVE-2026-63986, CVE-2026-63987, CVE-2026-63988, CVE-2026-63989, CVE-2026-63990, CVE-2026-63991, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-63995, CVE-2026-63996, CVE-2026-63997, CVE-2026-63998, CVE-2026-63999, CVE-2026-64000, CVE-2026-64001, CVE-2026-64002, CVE-2026-64003, CVE-2026-64004, CVE-2026-64005, CVE-2026-64006, CVE-2026-64007, CVE-2026-64008, CVE-2026-64009, CVE-2026-64010, CVE-2026-64011, CVE-2026-64012, CVE-2026-64013, CVE-2026-64014, CVE-2026-64015, CVE-2026-64017, CVE-2026-64018, CVE-2026-64019, CVE-2026-64020, CVE-2026-64021, CVE-2026-64022, CVE-2026-64023, CVE-2026-64024, CVE-2026-64025, CVE-2026-64026, CVE-2026-64027, CVE-2026-64029, CVE-2026-64030, CVE-2026-64031, CVE-2026-64032, CVE-2026-64033, CVE-2026-64034, CVE-2026-64035, CVE-2026-64036, CVE-2026-64037, CVE-2026-64038, CVE-2026-64039, CVE-2026-64040, CVE-2026-64041, CVE-2026-64042, CVE-2026-64043, CVE-2026-64044, CVE-2026-64045, CVE-2026-64046, CVE-2026-64047, CVE-2026-64048, CVE-2026-64049, CVE-2026-64050, CVE-2026-64051, CVE-2026-64052, CVE-2026-64053, CVE-2026-64054, CVE-2026-64055, CVE-2026-64056, CVE-2026-64057, CVE-2026-64058, CVE-2026-64059, CVE-2026-64060, CVE-2026-64061, CVE-2026-64062, CVE-2026-64063, CVE-2026-64064, CVE-2026-64065, CVE-2026-64066, CVE-2026-64067, CVE-2026-64068, CVE-2026-64069, CVE-2026-64070, CVE-2026-64071, CVE-2026-64072, CVE-2026-64073, CVE-2026-64074, CVE-2026-64075, CVE-2026-64076, CVE-2026-64077, CVE-2026-64078, CVE-2026-64079, CVE-2026-64080, CVE-2026-64081, CVE-2026-64082, CVE-2026-64083, CVE-2026-64084, CVE-2026-64085, CVE-2026-64086, CVE-2026-64087, CVE-2026-64088, CVE-2026-64089, CVE-2026-64090, CVE-2026-64091, CVE-2026-64093, CVE-2026-64094, CVE-2026-64095, CVE-2026-64096, CVE-2026-64097, CVE-2026-64098, CVE-2026-64099, CVE-2026-64100, CVE-2026-64101, CVE-2026-64102, CVE-2026-64103, CVE-2026-64104, CVE-2026-64105, CVE-2026-64106, CVE-2026-64107, CVE-2026-64108, CVE-2026-64109, CVE-2026-64110, CVE-2026-64111, CVE-2026-64112, CVE-2026-64113, CVE-2026-64114, CVE-2026-64115, CVE-2026-64116, CVE-2026-64117, CVE-2026-64118, CVE-2026-64119, CVE-2026-64120, CVE-2026-64121, CVE-2026-64122, CVE-2026-64123, CVE-2026-64124, CVE-2026-64125, CVE-2026-64126, CVE-2026-64127, CVE-2026-64128, CVE-2026-64129, CVE-2026-64130, CVE-2026-64131, CVE-2026-64132, CVE-2026-64133, CVE-2026-64134, CVE-2026-64135, CVE-2026-64136, CVE-2026-64137, CVE-2026-64138, CVE-2026-64139, CVE-2026-64140, CVE-2026-64141, CVE-2026-64142, CVE-2026-64143, CVE-2026-64144, CVE-2026-64145, CVE-2026-64146, CVE-2026-64147, CVE-2026-64148, CVE-2026-64149, CVE-2026-64150, CVE-2026-64151, CVE-2026-64152, CVE-2026-64153, CVE-2026-64154, CVE-2026-64155, CVE-2026-64156, CVE-2026-64157, CVE-2026-64158, CVE-2026-64159, CVE-2026-64160, CVE-2026-64161, CVE-2026-64162, CVE-2026-64163, CVE-2026-64164, CVE-2026-64165, CVE-2026-64166, CVE-2026-64167, CVE-2026-64168, CVE-2026-64169, CVE-2026-64170, CVE-2026-64171, CVE-2026-64172, CVE-2026-64173, CVE-2026-64174, CVE-2026-64175, CVE-2026-64176, CVE-2026-64177, CVE-2026-64178, CVE-2026-64179, CVE-2026-64180, CVE-2026-64181, CVE-2026-64182, CVE-2026-64183, CVE-2026-64184, CVE-2026-64185, CVE-2026-64186)
Recommended actions per Ubuntu release
StackPatch playbook auto-generated per release codename and per affected package.
Ubuntu resolute
linux-ibm→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-ibm
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-oracle→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-buildinfo-7.0.0-1008-oracle→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1008-oracle
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-buildinfo-7.0.0-1008-oracle-64k→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1008-oracle-64k
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-buildinfo-7.0.0-1010-ibm→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1010-ibm
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-headers-7.0.0-1008-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1008-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-7.0.0-1008-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1008-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-7.0.0-1010-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1010-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-ibm-7.0→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-ibm-7.0 sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-oracle-64k-7.0→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-oracle-64k-7.0 sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-headers-oracle-7.0→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-headers-oracle-7.0 sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-ibm→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-ibm
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-ibm-7.0→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-ibm-7.0
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-ibm-headers-7.0.0-1010→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-ibm-headers-7.0.0-1010
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-ibm-tools-7.0.0-1010→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-ibm-tools-7.0.0-1010
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-image-7.0.0-1008-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-7.0.0-1008-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-7.0.0-1008-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-7.0.0-1008-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-7.0.0-1010-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-7.0.0-1010-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-ibm-7.0→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-ibm-7.0 sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-oracle-64k-7.0→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-oracle-64k-7.0 sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-oracle-7.0→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-oracle-7.0 sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-uc-7.0.0-1008-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-uc-7.0.0-1008-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-uc-7.0.0-1008-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-uc-7.0.0-1008-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-uc-7.0.0-1010-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-uc-7.0.0-1010-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-unsigned-7.0.0-1008-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-unsigned-7.0.0-1008-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-unsigned-7.0.0-1008-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-unsigned-7.0.0-1008-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-image-unsigned-7.0.0-1010-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-image-unsigned-7.0.0-1010-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-modules-7.0.0-1008-oracle→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1008-oracle sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-modules-7.0.0-1008-oracle-64k→7.0.0-1008.8kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1008-oracle-64k sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-modules-7.0.0-1010-ibm→7.0.0-1010.10kernel_rebootKernel package — apt-upgrade then REBOOT to load the patched kernel.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1010-ibm sudo reboot
Reboot is required. ~30-60s downtime; containers self-restart.
linux-oracle→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-oracle-64k→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle-64k
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-oracle-64k-7.0→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle-64k-7.0
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-oracle-7.0→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle-7.0
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-oracle-headers-7.0.0-1008→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle-headers-7.0.0-1008
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-oracle-tools-7.0.0-1008→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-oracle-tools-7.0.0-1008
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-7.0.0-1008-oracle→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-7.0.0-1008-oracle
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-7.0.0-1008-oracle-64k→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-7.0.0-1008-oracle-64k
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-7.0.0-1010-ibm→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-7.0.0-1010-ibm
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-ibm→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-ibm
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-ibm-7.0→7.0.0-1010.10apt_upgradeStandard apt upgrade. Install 7.0.0-1010.10 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-ibm-7.0
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-oracle→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-oracle
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-oracle-64k→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-oracle-64k
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-oracle-64k-7.0→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-oracle-64k-7.0
Most apt upgrades restart their service automatically. needrestart lists anything else.
linux-tools-oracle-7.0→7.0.0-1008.8apt_upgradeStandard apt upgrade. Install 7.0.0-1008.8 from the apt repo.
sudo apt-get update sudo apt-get install --only-upgrade -y linux-tools-oracle-7.0
Most apt upgrades restart their service automatically. needrestart lists anything else.
Are YOU affected by USN-8593-1?
5-second check on your actual server. Reads /etc/os-release, uname -r, and dpkg-query; matches against the live USN + Debian Security Tracker feeds; tells you whether USN-8593-1 (and any other live CVE) applies. Anonymous, no signup.
curl https://mindsparkstack.com/scan.sh | bash
StackPatch runs this match against YOUR installed packages every hour
Free (3 servers) / from $9/mo (14-day free trial) / Solo $9/mo / Pro $29/mo / Team $79/mo. Indie pricing.