Ubuntu patches Linux kernels across cloud and vendor flavors

On 8–9 October 2026 Ubuntu issued Linux kernel USNs for AWS, Azure, GCP, IBM, NVIDIA and general packages, naming three CVEs.

Ubuntu published a cluster of Linux kernel security notices on 8–9 October 2026 for general kernels and AWS, Azure, Google Cloud, IBM and NVIDIA packages. USN-8887-2, USN-8888-2 and USN-8887-3 fix CVE-2023-20585, an AMD Reverse Map Table check flaw that a local attacker with hypervisor access could use to cause an out-of-bounds condition and compromise SEV-SNP guest memory integrity; those updates also cover other architectures plus NVDIMM drivers and the Handshake API. USN-8906-1 for IBM kernels includes CVE-2025-10263, a local Arm TLB issue that might allow privilege escalation, while USN-8875-2 for NVIDIA packages includes CVE-2022-3114, a local null-pointer dereference in the i.MX clock driver that could crash the system. Separate notices USN-8903-1, USN-8903-2, USN-8904-1 and USN-8905-1/2 describe broader architecture and driver fixes and say an attacker could possibly compromise a system, but their excerpts list no CVE identifiers. Sources that address exploitation report none; the remaining excerpts simply omit status, and the architectures and drivers named differ slightly by notice.