Ubuntu Security Notices USN-8226-1 USN-8226-1: kmod update Publication date 30 April 2026 Overview kmod has been updated to block loading of the algif_aead kernel module. Releases 25.10 24.04 LTS 22.04 LTS Open side navigation Close side navigation Packages Details Update instructions References Packages kmod - tools for managing Linux kernel modules Details It was discovered that the Linux kernel algif_aead module contained a logic flaw allowing a local attacker to escalate privileges to root. This update to the kmod package disables loading the algif_aead module as a measure to mitigate the issue until kernel updates are made available. See the following URL for more information https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available It was discovered that the Linux kernel algif_aead module contained a logic flaw allowing a local attacker to escalate privileges to root. This update to the kmod package disables loading the algif_aead module as a measure to mitigate the issue until kernel updates are made available. See the following URL for more information https://ubuntu.com/blog/copy-fail-vulnerability-fixes-available Update instructions After a standard system update you need to reboot your computer to make all the necessary changes. Learn more about how to get the fixes. The problem can be corrected by updating your system to the following package versions: Ubuntu Release Package Version 25.10 questing kmod – 34.2-2ubuntu1.1 24.04 LTS noble kmod – 31+20240202-2ubuntu7.2 22.04 LTS jammy kmod – 29-1ubuntu1.1 Reduce your security exposure Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines. Get Ubuntu Pro References https://launchpad.net/bugs/2150743 CVE-2026-31431 CVE-2026-31431
A logic flaw in the Linux kernel's `algif_aead` module (CVE-2026-31431, CVSS 7.8 HIGH) allows a local attacker to escalate privileges to root. The Ubuntu security notice USN-8226-1 provides a mitigation by updating the `kmod` package to versions 34-2-2ubuntu1.1 for 25.10, 31+20240202-2ubuntu7.2 for 24.04 LTS, and 29-1ubuntu1.1 for 22.04 LTS, which blocks the vulnerable module from being loaded. A system reboot is required after applying the update.