{"id":"USN-8305-1","summary":"linux-intel-iot-realtime vulnerabilities","details":"It was discovered that the Linux kernel algif_aead module did not properly\nhandle in-place cryptographic operations. This flaw is known as Copy Fail.\nA local attacker could use this to escalate privileges, or possibly escape\na container. (CVE-2026-31431)\n\nSeveral security issues were discovered in the Linux kernel.\nAn attacker could possibly use these to compromise the system.\nThis update corrects flaws in the following subsystems:\n  - Cryptographic API;\n  - Ethernet bonding driver;\n  - Packet sockets;\n  - TLS protocol;\n(CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033,\nCVE-2026-43077, CVE-2026-43078)\n","modified":"2026-06-03T13:49:10.530035218Z","published":"2026-05-25T23:21:35Z","related":["UBUNTU-CVE-2026-31419","UBUNTU-CVE-2026-31431","UBUNTU-CVE-2026-31504","UBUNTU-CVE-2026-31533","UBUNTU-CVE-2026-43033","UBUNTU-CVE-2026-43077","UBUNTU-CVE-2026-43078"],"upstream":["CVE-2026-31419","CVE-2026-31431","CVE-2026-31504","CVE-2026-31533","CVE-2026-43033","CVE-2026-43077","CVE-2026-43078","UBUNTU-CVE-2026-31419","UBUNTU-CVE-2026-31431","UBUNTU-CVE-2026-31504","UBUNTU-CVE-2026-31533","UBUNTU-CVE-2026-43033","UBUNTU-CVE-2026-43077","UBUNTU-CVE-2026-43078"],"references":[{"type":"ADVISORY","url":"https://ubuntu.com/security/notices/USN-8305-1"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-31419"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-31431"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-31504"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-31533"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-43033"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-43077"},{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-43078"}],"affected":[{"package":{"name":"linux-intel-iot-realtime","ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","purl":"pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=realtime%2Fjammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.15.0-1100.102"}]}],"versions":["5.15.0-1021.26","5.15.0-1022.27","5.15.0-1023.28","5.15.0-1024.29","5.15.0-1028.33","5.15.0-1033.35","5.15.0-1034.36","5.15.0-1035.37","5.15.0-1036.38","5.15.0-1037.39","5.15.0-1038.40","5.15.0-1039.41","5.15.0-1040.42","5.15.0-1041.43","5.15.0-1042.44","5.15.0-1043.45","5.15.0-1044.46","5.15.0-1046.48","5.15.0-1047.49","5.15.0-1048.50","5.15.0-1049.51","5.15.0-1050.52","5.15.0-1053.55","5.15.0-1054.56","5.15.0-1055.57","5.15.0-1056.58","5.15.0-1057.59","5.15.0-1058.60","5.15.0-1059.61","5.15.0-1060.62","5.15.0-1061.63","5.15.0-1063.65","5.15.0-1064.66","5.15.0-1066.68","5.15.0-1071.73","5.15.0-1072.74","5.15.0-1073.75","5.15.0-1074.76","5.15.0-1075.77","5.15.0-1076.78","5.15.0-1077.79","5.15.0-1078.80","5.15.0-1079.81","5.15.0-1080.82","5.15.0-1081.83","5.15.0-1082.84","5.15.0-1083.85","5.15.0-1084.86","5.15.0-1085.87","5.15.0-1086.88","5.15.0-1087.89","5.15.0-1088.90","5.15.0-1089.91","5.15.0-1090.92","5.15.0-1091.93","5.15.0-1092.94","5.15.0-1093.95","5.15.0-1094.96","5.15.0-1096.98","5.15.0-1097.99","5.15.0-1098.100","5.15.0-1099.101"],"ecosystem_specific":{"availability":"Available with Ubuntu Pro: https://ubuntu.com/pro","binaries":[{"binary_version":"5.15.0-1100.102","binary_name":"linux-buildinfo-5.15.0-1100-intel-iot-realtime"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-cloud-tools-5.15.0-1100-intel-iot-realtime"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-headers-5.15.0-1100-intel-iot-realtime"},{"binary_name":"linux-image-unsigned-5.15.0-1100-intel-iot-realtime","binary_version":"5.15.0-1100.102"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-intel-iot-realtime-cloud-tools-5.15.0-1100"},{"binary_name":"linux-intel-iot-realtime-cloud-tools-common","binary_version":"5.15.0-1100.102"},{"binary_name":"linux-intel-iot-realtime-headers-5.15.0-1100","binary_version":"5.15.0-1100.102"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-intel-iot-realtime-tools-5.15.0-1100"},{"binary_name":"linux-intel-iot-realtime-tools-common","binary_version":"5.15.0-1100.102"},{"binary_name":"linux-intel-iot-realtime-tools-host","binary_version":"5.15.0-1100.102"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-modules-5.15.0-1100-intel-iot-realtime"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-modules-extra-5.15.0-1100-intel-iot-realtime"},{"binary_version":"5.15.0-1100.102","binary_name":"linux-tools-5.15.0-1100-intel-iot-realtime"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8305-1.json","cves_map":{"ecosystem":"Ubuntu:Pro:Realtime:22.04:LTS","cves":[{"id":"CVE-2026-31419","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-31431","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"high","type":"Ubuntu"}]},{"id":"CVE-2026-31504","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-31533","severity":[{"score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-43033","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-43077","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]},{"id":"CVE-2026-43078","severity":[{"score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","type":"CVSS_V3"},{"score":"medium","type":"Ubuntu"}]}]}}}],"schema_version":"1.7.5"}