Ubuntu 18.04 LTS Linux Kernel Critical Network Attack Fixes USN-8633

Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges ×

Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS - linux-azure-4.15: Linux kernel for Microsoft Azure Cloud systems - linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS - linux-fips: Linux kernel with FIPS - linux-gcp-4.15: Linux kernel for Google Cloud Platform (GCP) systems - linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with FIPS - linux-kvm: Linux kernel for cloud environments Details: Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi implementation in the Linux kernel did not properly handle aggregated frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A physically proximate attacker could use this issue to inject packets. (CVE-2025-27558) Several security issues were discovered in the Linux ... Read the Full Advisory

Several security issues were fixed in the Linux kernel.

Software Description:

- linux: Linux kernel

- linux-aws: Linux kernel for Amazon Web Services (AWS) systems

- linux-aws-fips: Linux kernel for Amazon Web Services (AWS) systems with FIPS

- linux-azure-4.15: Linux kernel for Microsoft Azure Cloud systems

- linux-azure-fips: Linux kernel for Microsoft Azure Cloud systems with FIPS

- linux-fips: Linux kernel with FIPS

- linux-gcp-4.15: Linux kernel for Google Cloud Platform (GCP) systems

- linux-gcp-fips: Linux kernel for Google Cloud Platform (GCP) systems with

- linux-kvm: Linux kernel for cloud environments

Siebe Devroe, Héloïse Gollier, and Mathy Vanhoef discovered that the WiFi

implementation in the Linux kernel did not properly handle aggregated

frames in mesh networks, due to an incorrect fix for CVE-2020-24588. A

physically proximate attacker could use this issue to inject packets.

Several security issues were discovered in the Linux ...

The problem can be corrected by updating your system to the following package versions: Ubuntu 18.04 LTS linux-image-4.15.0-1150-fips 4.15.0-1150.162 Available with Ubuntu Pro linux-image-4.15.0-1177-kvm 4.15.0-1177.182 Available with Ubuntu Pro linux-image-4.15.0-1188-gcp 4.15.0-1188.205 Available with Ubuntu Pro linux-image-4.15.0-1195-aws 4.15.0-1195.208 Available with Ubuntu Pro linux-image-4.15.0-1205-azure 4.15.0-1205.220 Available with Ubuntu Pro linux-image-4.15.0-2096-gcp-fips 4.15.0-2096.102 Available with Ubuntu Pro linux-image-4.15.0-2113-azure-fips 4.15.0-2113.119 Available with Ubuntu Pro linux-image-4.15.0-2133-aws-fips 4.15.0-2133.139 Available with Ubuntu Pro linux-image-4.15.0-254-generic 4.15.0-254.266 Available with Ubuntu Pro linux-image-4.15.0-254-lowlatency 4.15.0-254.266 Available with Ubuntu Pro linux-image-aws-4.15 4.15.0.1195.193 Available with Ubuntu Pro linux-image-aws-fips 4.15.0.2133.127 Available with Ubuntu Pro linux-image-aws-fips-4.15 4.15.0.2133.127 Available with Ubuntu Pro linux-image-aws-lts-18.04 4.15.0.1195.193 Available with Ubuntu Pro linux-image-azure-4.15 4.15.0.1205.173 Available with Ubuntu Pro linux-image-azure-fips 4.15.0.2113.109 Available with Ubuntu Pro linux-image-azure-fips-4.15 4.15.0.2113.109 Available with Ubuntu Pro linux-image-azure-lts-18.04 4.15.0.1205.173 Available with Ubuntu Pro linux-image-fips 4.15.0.1150.147 Available with Ubuntu Pro linux-image-gcp-4.15 4.15.0.1188.201 Available with Ubuntu Pro linux-image-gcp-fips 4.15.0.2096.94 Available with Ubuntu Pro linux-image-gcp-fips-4.15 4.15.0.2096.94 Available with Ubuntu Pro linux-image-gcp-lts-18.04 4.15.0.1188.201 Available with Ubuntu Pro linux-image-generic 4.15.0.254.238 Available with Ubuntu Pro linux-image-kvm 4.15.0.1177.168 Available with Ubuntu Pro linux-image-lowlatency 4.15.0.254.238 Available with Ubuntu Pro linux-image-virtual 4.15.0.254.238 Available with Ubuntu Pro After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.

CVE-2021-47354, CVE-2021-47378, CVE-2024-38612, CVE-2025-27558,

CVE-2026-31405, CVE-2026-31414, CVE-2026-31448, CVE-2026-31649,

CVE-2026-31657, CVE-2026-31668, CVE-2026-43198, CVE-2026-43493,

CVE-2026-43499, CVE-2026-46266, CVE-2026-46331, CVE-2026-52924,

CVE-2026-52931, CVE-2026-52955, CVE-2026-52982, CVE-2026-52986,

CVE-2026-53002, CVE-2026-53006, CVE-2026-53045, CVE-2026-53088,

CVE-2026-53176, CVE-2026-53225, CVE-2026-53228, CVE-2026-53359

Ubuntu Security Notice USN-8633-1

Get the latest Linux and open source security news straight to your inbox.