USN-8793-1: Linux kernel (Azure CVM) vulnerabilities
Ubuntu patches nine Linux kernel vulnerabilities affecting Azure CVM environments across multiple subsystems.
Ubuntu published security notice USN-8793-1 addressing multiple vulnerabilities in the Linux kernel for Azure Confidential Virtual Machine (CVM) environments. The update patches security issues across several subsystems including Bluetooth drivers, GPU drivers, hardware monitoring drivers, SPI subsystem, NTFS3 file system, io_uring subsystem, Ethernet bridge, and Multipath TCP. Nine CVE identifiers are resolved in this advisory, targeting potential system compromise scenarios.
- Ubuntu releases security update for Linux kernel Azure CVM vulnerabilities.
- Patches address flaws in Bluetooth, GPU, and Hardware monitoring drivers.
- Additional fixes cover SPI subsystem, NTFS3, io_uring, and Ethernet bridge.
- Nine CVE identifiers are addressed in this security advisory.
- Update applies specifically to Azure CVM (Confidential Virtual Machine) environments.
- CVEs
- CVE-2025-71289CVE-2026-23469CVE-2026-31420CVE-2026-31486CVE-2026-31560CVE-2026-46158CVE-2026-46170CVE-2026-46275CVE-2026-46315
- Products
- Linux KernelAzure CVM
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-71289 | Linux kernel: fs/ntfs3: handle attr_set_size() errors when truncating files | 5.5 | <1% | ||
| CVE-2026-23469 | Linux kernel: drm/imagination: Synchronize interrupts before suspending the GPU | 4.7 | <1% | ||
| CVE-2026-31420 | Linux kernel: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test()… | 5.5 | <1% | ||
| CVE-2026-31486 | Linux kernel: hwmon: (pmbus/core) Protect regulator operations with mutex | 7.1 | <1% | ||
| CVE-2026-31560 | Linux kernel: spi: spi-dw-dma: fix print error log when wait finish transaction | 5.5 | <1% | ||
CVE-2026-46158+1 related CVE | Linux kernel: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 5.5 | <1% | ||
| CVE-2026-46275 | Linux kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to… | 7.8 | <1% | ||
| CVE-2026-46315 | Linux kernel: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields… | 5.5 | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.