USN-8793-2: Linux kernel (Azure CVM) vulnerabilities
Ubuntu patched multiple Linux kernel flaws in Azure CVM images that could let an attacker compromise the system.
Ubuntu published USN-8793-2 for the Linux kernel used with Azure confidential VMs. The update fixes flaws in Bluetooth, GPU, hardware monitoring, SPI, NTFS3, io_uring, Ethernet bridge, and Multipath TCP code. Ubuntu says an attacker could possibly use the issues to compromise a system. Nine CVEs are listed, and the notice does not report active exploitation.
- USN-8793-2 updates the Linux kernel for Azure confidential VMs.
- Patches cover Bluetooth, GPU, hwmon, SPI, NTFS3, io_uring, bridging, and MPTCP.
- Nine CVEs are fixed; the notice does not report exploitation.
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-71289 | Linux kernel: fs/ntfs3: handle attr_set_size() errors when truncating files | 5.5 | <1% | ||
| CVE-2026-23469 | Linux kernel: drm/imagination: Synchronize interrupts before suspending the GPU | 4.7 | <1% | ||
| CVE-2026-31420 | Linux kernel: bridge: mrp: reject zero test interval to avoid OOM panic br_mrp_start_test() and br_mrp_start_in_test()… | 5.5 | <1% | ||
| CVE-2026-31486 | Linux kernel: hwmon: (pmbus/core) Protect regulator operations with mutex | 7.1 | <1% | ||
| CVE-2026-31560 | Linux kernel: spi: spi-dw-dma: fix print error log when wait finish transaction | 5.5 | <1% | ||
CVE-2026-46158+1 related CVE | Linux kernel: mptcp: pm: ADD_ADDR rtx: always decrease sk refcount | 5.5 | <1% | ||
| CVE-2026-46275 | Linux kernel: Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Vulnerabilities leading to… | 7.8 | <1% | ||
| CVE-2026-46315 | Linux kernel: io_uring/waitid: clear waitid info before copying it to userspace IORING_OP_WAITID stores its result fields… | 5.5 | <1% |
From the original article
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.