Ubuntu patches Tegra kernel io_uring flaw enabling local denial of service
First merged summary.
Ubuntu has issued USN-9002-1 fixing a Linux kernel io_uring bug that a local attacker could use for denial of service.
Ubuntu released USN-9002-1 for the Linux kernel used with NVIDIA Tegra, addressing CVE-2026-81010. The io_uring subsystem did not properly handle canceled task work, and a local attacker could possibly use that flaw to cause a denial of service. The update also corrects flaws in the ARM32, ARM64, MIPS, OpenRISC, PowerPC, RISC-V, S390, x86 and Intel NPU subsystems. Exploitation beyond the described local denial-of-service possibility is not reported.
- USN-9002-1 covers the NVIDIA Tegra Linux kernel.
- CVE-2026-81010 is an io_uring canceled task-work flaw.
- A local attacker could possibly cause denial of service.
- The update also fixes flaws across several kernel architectures and Intel NPU.
Timeline
dated events in the reporting · oldest first- Nov 6, 2026Ubuntu publishes USN-9002-1 for Tegra kernel flaws · Ubuntu Security Notices
What each outlet adds
beyond the shared facts- Ubuntu Security NoticesNames USN-9002-1, CVE-2026-81010, and affected subsystems
- Vendors
- Ubuntu
- Products
- Linux kernel
Coverage
oldest first · one row per article · UTC- · 3d ago
Ubuntu Security NoticesFirst report
Ubuntu Advises on Linux Kernel NVIDIA Tegra Vulnerabilities
Ubuntu releases update for Linux kernel io_uring flaw causing denial of service (CVE-2026-81010).
- · 3d ago
Ubuntu Advises on Linux Kernel NVIDIA Vulnerabilities
Ubuntu releases security update for Linux kernel flaws, including CVE-2023-20585 allowing out-of-bounds conditions in SEV-SNP guests.
Vulnerabilities in this story
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-20585 | Insufficient checks of the RMP on host buffer access in IOMMU may allow an attacker with privileges and a compromised hypervisor to trigger an out of bounds… | 5.6 | <1% | ||
| CVE-2026-81010 | Linux kernel io_uring waitid ignores cancellation, runs wait logic in wrong task context | 7.8 | — |