Ubuntu Security Notices
USN-8528-1

USN-8528-1: Linux kernel (Xilinx ZynqMP) vulnerabilities

Publication date

10 July 2026

Overview

Several security issues were fixed in the Linux kernel.

Releases

22.04 LTS

Packages

linux-xilinx-zynqmp - Linux kernel for Xilinx ZynqMP processors

Details

It was discovered that the Linux kernel algif_aead module did not properly
handle in-place cryptographic operations. This flaw is known as Copy Fail.
A local attacker could use this to escalate privileges, or possibly escape
a container. (CVE-2026-31431)

It was discovered that the Linux kernel did not properly handle shared page
fragments during socket buffer operations, collectively known as Dirty
Frag. A logic flaw existed in the XFRM ESP-in-TCP subsystem and in the
RxRPC networking subsystem when processing paged fragments. A local
attacker could use this to escalate privileges, or possibly escape a
container. (CVE-2026-43284, CVE-2026-43500)

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia....

It was discovered that a logic flaw existed in the XFRM ESP-in-TCP
subsystem in the Linux kernel when handling socket buffer fragments. This
flaw is known as Fragnesia. A local attacker could use this to escalate
privileges, or possibly escape a container. (CVE-2026-43503,
CVE-2026-46300)

Qualys discovered that a race condition existed in the ptrace subsystem of
the Linux kernel when privileged processes are exiting. An unprivileged
local attacker could use this issue to expose sensitive information.
(CVE-2026-46333)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

RISC-V architecture;
Cryptographic API;
InfiniBand drivers;
IOMMU subsystem;
Ethernet bonding driver;
Network drivers;
STMicroelectronics network drivers;
NVME drivers;
x86 platform drivers;
SCSI subsystem;
SPI subsystem;
TCM subsystem;
USB over IP driver;
File systems infrastructure;
HFS+ file system;
Network file system (NFS) server daemon;
SMB network file system;
IPv6 networking;
Netfilter;
Tracing infrastructure;
io_uring subsystem;
Timer subsystem;
B.A.T.M.A.N. meshing protocol;
Bluetooth subsystem;
Ethernet bridge;
Ceph Core library;
IPv4 networking;
MAC80211 subsystem;
Multipath TCP;
Packet sockets;
RDS protocol;
RxRPC session sockets;
SMC sockets;
Sun RPC protocol;
TLS protocol;
X.25 network layer;
AMD SoC Alsa drivers;
KVM subsystem

Update instructions

After a standard system update you need to reboot your computer to make all the necessary changes.

Learn more about how to get the fixes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

The problem can be corrected by updating your system to the following package versions:

Ubuntu Release	Package Version
22.04 LTS jammy	linux-image-5.15.0-1074-xilinx-zynqmp – 5.15.0-1074.78
	linux-image-xilinx-zynqmp – 5.15.0.1074.77
	linux-image-xilinx-zynqmp-5.15 – 5.15.0.1074.77