🛡️ USN-8492-4 — linux-raspi

linux-raspi vulnerabilities

Several security issues were discovered in the Linux kernel.

An attacker could possibly use these to compromise the system.

This update corrects flaws in the following subsystems:

• ARM64 architecture;
• MIPS architecture;
• PowerPC architecture;
• x86 architecture;
• Block layer subsystem;
• Cryptographic API;
• ACPI drivers;
• ATM drivers;
• RNBD block device driver;
• Ublk userspace block driver;
• Bus devices;
• Character device driver;
• TPM device driver;
• Clock framework and drivers;
• Clocksource drivers;
• CPU idle management framework;
• Hardware crypto device drivers;
• DMA engine subsystem;
• EFI core;
• GPIO subsystem;
• GPU drivers;
• HID subsystem;
• Hardware monitoring drivers;
• IIO subsystem;
• InfiniBand drivers;
• IOMMU subsystem;
• Multiple devices driver;
• Media drivers;
• Multifunction device drivers;
• Broadcom VK accelerator driver;
• MOST (Media Oriented Systems Transport) drivers;
• MTD block device drivers;
• Ethernet bonding driver;
• Network drivers;
• Mellanox network drivers;
• STMicroelectronics network drivers;
• NTB driver;
• NVME drivers;
• PCI subsystem;
• Performance monitor drivers;
• Pin controllers subsystem;
• x86 platform drivers;
• Power supply drivers;
• RapidIO drivers;
• RAS (Reliability, Availability, Serviceability) subsystem;
• Remote Processor subsystem;
• RPMSG subsystem;
• S/390 drivers;
• SCSI subsystem;
• MediaTek SoC drivers;
• Texas Instruments SoC drivers;
• SPI subsystem;
• Greybus lights staging drivers;
• Realtek RTL8723BS SDIO drivers;
• UFS subsystem;
• ChipIdea USB driver;
• DesignWare USB3 driver;
• USB over IP driver;
• vDPA drivers;
• Virtio Host (VHOST) subsystem;
• Framebuffer layer;
• BTRFS file system;
• File systems infrastructure;
• Ceph distributed file system;
• Ext4 file system;
• F2FS file system;
• FAT file system;
• GFS2 file system;
• HFS+ file system;
• JFS file system;
• Network file system (NFS) server daemon;
• NILFS2 file system;
• NTFS3 file system;
• OCFS2 file system;
• Proc file system;
• Pstore file system;
• Diskquota system;
• SMB network file system;
• XFS file system;
• Audit subsystem;
• Memory Management;
• IPv6 networking;
• Netfilter;
• Tracing infrastructure;
• Kernel kexec() syscall;
• RCU subsystem;
• Scheduler infrastructure;
• Scatterlist API;
• 9P file system network protocol;
• Asynchronous Transfer Mode (ATM) subsystem;
• B.A.T.M.A.N. meshing protocol;
• Bluetooth subsystem;
• Ethernet bridge;
• Ceph Core library;
• Networking core;
• IPv4 networking;
• KCM (Kernel Connection Multiplexor) sockets driver;
• Multipath TCP;
• NFC subsystem;
• RDS protocol;
• RxRPC session sockets;
• Network traffic control;
• SMC sockets;
• Sun RPC protocol;
• X.25 network layer;
• XFRM subsystem;
• AppArmor security module;
• Simplified Mandatory Access Control Kernel framework;
• SOF drivers;
• USB sound devices;

(CVE-2025-40005, CVE-2025-71229, CVE-2025-71231, CVE-2025-71232,

CVE-2025-71233, CVE-2025-71235, CVE-2025-71236, CVE-2025-71237,

CVE-2025-71238, CVE-2025-71239, CVE-2025-71265, CVE-2025-71266,

CVE-2025-71267, CVE-2025-71272, CVE-2025-71273, CVE-2025-71274,

CVE-2025-71286, CVE-2025-71291, CVE-2025-71292, CVE-2025-71294,

CVE-2025-71295, CVE-2025-71297, CVE-2025-71304, CVE-2025-71305,

CVE-2026-23100, CVE-2026-23169, CVE-2026-23220, CVE-2026-23221,

CVE-2026-23222, CVE-2026-23228, CVE-2026-23229, CVE-2026-23230,

CVE-2026-23233, CVE-2026-23234, CVE-2026-23235, CVE-2026-23236,

CVE-2026-23237, CVE-2026-23238, CVE-2026-23241, CVE-2026-23242,

CVE-2026-23243, CVE-2026-23249, CVE-2026-23266, CVE-2026-23267,

CVE-2026-23272, CVE-2026-23278, CVE-2026-23392, CVE-2026-23428,

CVE-2026-23450, CVE-2026-23455, CVE-2026-31402, CVE-2026-31411,

CVE-2026-31418, CVE-2026-31436, CVE-2026-31448, CVE-2026-31478,

CVE-2026-31607, CVE-2026-31637, CVE-2026-31649, CVE-2026-31657,

CVE-2026-31659, CVE-2026-31668, CVE-2026-31669, CVE-2026-31682,

CVE-2026-31685, CVE-2026-31687, CVE-2026-31693, CVE-2026-43011,

CVE-2026-43037, CVE-2026-43038, CVE-2026-43071, CVE-2026-43114,

CVE-2026-43117, CVE-2026-43123, CVE-2026-43124, CVE-2026-43128,

CVE-2026-43130, CVE-2026-43132, CVE-2026-43133, CVE-2026-43134,

CVE-2026-43135, CVE-2026-43136, CVE-2026-43137, CVE-2026-43139,

CVE-2026-43140, CVE-2026-43141, CVE-2026-43143, CVE-2026-43145,

CVE-2026-43147, CVE-2026-43148, CVE-2026-43149, CVE-2026-43150,

CVE-2026-43152, CVE-2026-43153, CVE-2026-43156, CVE-2026-43157,

CVE-2026-43158, CVE-2026-43159, CVE-2026-43163, CVE-2026-43167,

CVE-2026-43168, CVE-2026-43169, CVE-2026-43170, CVE-2026-43171,

CVE-2026-43173, CVE-2026-43175, CVE-2026-43180, CVE-2026-43182,

CVE-2026-43183, CVE-2026-43184, CVE-2026-43186, CVE-2026-43187,

CVE-2026-43189, CVE-2026-43190, CVE-2026-43194, CVE-2026-43196,

CVE-2026-43199, CVE-2026-43200, CVE-2026-