USN-8279-3

Source
https://ubuntu.com/security/notices/USN-8279-3
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8279-3.json
JSON Data
https://api.test.osv.dev/v1/vulns/USN-8279-3
Upstream
Related
Published
2026-05-25T22:51:53Z
Modified
2026-06-03T13:49:47.793158986Z
Summary
linux-nvidia-tegra-igx vulnerabilities
Details

It was discovered that the Linux kernel algif_aead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. (CVE-2026-31431)

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Ethernet bonding driver; - SMB network file system; - Netfilter; - io_uring subsystem; - Packet sockets; - TLS protocol; (CVE-2024-35862, CVE-2024-50060, CVE-2026-23274, CVE-2026-23351, CVE-2026-31419, CVE-2026-31504, CVE-2026-31533, CVE-2026-43033, CVE-2026-43077, CVE-2026-43078)

References

Affected packages

Ubuntu:22.04:LTS / linux-nvidia-tegra-igx

Package

Name
linux-nvidia-tegra-igx
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-igx?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
5.15.0-1049.49

Affected versions

5.*
5.15.0-1001.1
5.15.0-1002.2
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1009.9
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1023.23
5.15.0-1024.24
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1029.29
5.15.0-1030.30
5.15.0-1031.31
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36
5.15.0-1037.37
5.15.0-1038.38
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-buildinfo-5.15.0-1049-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-buildinfo-5.15.0-1049-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-headers-5.15.0-1049-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-headers-5.15.0-1049-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-image-unsigned-5.15.0-1049-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-image-unsigned-5.15.0-1049-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-modules-5.15.0-1049-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-modules-5.15.0-1049-nvidia-tegra-igx-rt"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-modules-extra-5.15.0-1049-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-nvidia-tegra-igx-headers-5.15.0-1049"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-nvidia-tegra-igx-tools-5.15.0-1049"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-tools-5.15.0-1049-nvidia-tegra-igx"
        },
        {
            "binary_version": "5.15.0-1049.49",
            "binary_name": "linux-tools-5.15.0-1049-nvidia-tegra-igx-rt"
        }
    ]
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-8279-3.json"
cves_map
{
    "ecosystem": "Ubuntu:22.04:LTS",
    "cves": [
        {
            "id": "CVE-2024-35862",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2024-50060"
        },
        {
            "id": "CVE-2026-23274",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-23351",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2026-31419"
        },
        {
            "id": "CVE-2026-31431",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "high",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2026-31504"
        },
        {
            "id": "CVE-2026-31533",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-43033",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "id": "CVE-2026-43077",
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ]
        },
        {
            "severity": [
                {
                    "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                    "type": "CVSS_V3"
                },
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2026-43078"
        }
    ]
}