May 26, 2026

Critical Linux Kernel Vulnerabilities Across Ubuntu Platforms

Ubuntu has released security updates addressing multiple critical Linux kernel vulnerabilities affecting Intel IoTG, NVIDIA Tegra, and NVIDIA platforms. The most severe issue, CVE-2026-31431 (Copy Fail), allows local attackers to escalate privileges or escape containers.

TL;DR

CVE-2026-31431 (Copy Fail) in algif_aead module enables privilege escalation and container escape via improper in-place cryptographic operations
Multiple kernel subsystems affected including Cryptographic API, Ethernet bonding, TLS protocol, network drivers, and file systems
Vulnerabilities span ARM64, x86 architectures and numerous device drivers, requiring immediate patching across Ubuntu deployments
Local attackers can exploit these flaws to compromise system integrity; remote exploitation possible through network-facing subsystems

Ubuntu has released coordinated security updates addressing a collection of critical vulnerabilities in the Linux kernel across multiple platform variants. The most significant issue, designated CVE-2026-31431 and known as "Copy Fail," resides in the algif_aead cryptographic module and enables local attackers to escalate privileges or escape container environments through improper handling of in-place cryptographic operations.

Beyond the Copy Fail vulnerability, the updates address numerous additional flaws spanning core kernel subsystems including the Cryptographic API, Ethernet bonding driver, TLS protocol implementation, packet socket handling, and network file systems. The affected platforms include Intel IoTG Real-time, NVIDIA Tegra IGX, NVIDIA, and NVIDIA Tegra variants, indicating widespread exposure across enterprise and embedded Linux deployments.

The vulnerability scope extends across multiple architectural layers and device driver categories, affecting ARM64 and x86 architectures, GPU drivers, DMA engines, Bluetooth subsystems, and storage drivers. Organizations running these Ubuntu variants should prioritize applying the available security patches to mitigate both local privilege escalation and potential remote compromise vectors.

Copy Fail: In-Place Cryptographic Operation Flaw

CVE-2026-31431 affects the algif_aead module's handling of in-place cryptographic operations
Local attackers can exploit this to escalate privileges from unprivileged user contexts
Container escape scenarios are possible, allowing breakout from isolated environments
Flaw impacts any system relying on kernel-space cryptographic acceleration

Affected Kernel Subsystems and Attack Surface

Cryptographic API vulnerabilities (CVE-2026-31419, CVE-2026-31504, CVE-2026-31533)
Ethernet bonding driver and network stack issues (CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)
TLS protocol implementation flaws and packet socket handling defects
SMB network file system, Netfilter, and io_uring subsystem vulnerabilities in select variants
Additional CVEs affecting file systems (BTRFS, Ext4, exFAT, HFS+, NFS) and device drivers

Remediation and Deployment Guidance

Apply USN-8305-1 for Intel IoTG Real-time kernel variants
Apply USN-8279-3 for NVIDIA Tegra IGX deployments
Apply USN-8289-2 for NVIDIA platform kernels
Apply USN-8296-2 for NVIDIA Tegra kernel variants
Prioritize patching systems running untrusted workloads or multi-tenant containers

Sources

Fontes

Atualizações de segurança por e-mail

Um e-mail resumo quando publicarmos novos artigos de segurança (TL;DR e links para ler mais). Cancele a inscrição a qualquer momento no rodapé da mensagem. Veja nossa Política de Privacidade.