Ubuntu patches Linux kernel flaws across cloud images

Ubuntu's October 2026 kernel notices fix a local i.MX crash, an Arm TLB flaw, and an AMD SEV-SNP issue, with no exploitation reported.

Between 6 and 9 October 2026, Ubuntu published Linux kernel security notices for generic packages and for GCP, Oracle, Azure, AWS, and IBM images. CVE-2022-3114, fixed in USN-8875-1, USN-8878-1, and USN-8879-1, is a null-pointer dereference in the i.MX clock driver that a local attacker could use to crash the system. CVE-2025-10263, addressed in the GCP, Oracle, and IBM notices, is an Arm TLB invalidation issue that could let a local attacker write memory after permissions were revoked and escalate privileges. CVE-2023-20585, covered by USN-8887-1, USN-8887-2, USN-8887-3, USN-8888-1, and USN-8888-2, involves incomplete AMD Reverse Map Table checks during IOMMU access; a local attacker with hypervisor access could cause an out-of-bounds condition and compromise SEV-SNP guest memory integrity. USN-8903-2 describes further kernel fixes across architectures and drivers but, unlike the other notices, its excerpt names no CVE identifiers. All sources describe compromise or crashes as possible rather than observed, and none report in-the-wild exploitation.