Skip to main content
  1. Blog
  2. Article

Canonical
on 8 June 2017

Kernel Team Summary- June 8, 2017

CVE kernel livepatch Security Subsystem update USN

Introduction

This newsletter is to provide a status update from the Ubuntu Kernel Team. There will also be highlights provided for any interesting subjects the team may be working on.

If you would like to reach the kernel team, you can find us at the #ubuntu-kernel channel on FreeNode. Alternatively, you can mail the Ubuntu Kernel Team mailing list at: kernel-team@lists.ubuntu.com

Highlights

  • Canonical Kernel Livepatch Service now available for Ubuntu 14.04 LTS
  • Simple Job Scripting now in stress-ng 0.08.00
  • Testing the Windows subsystem for Linux
  • Xen security update released on Zesty, Yakkety, Xenial, and Trusty
  • 4.11.0-5.10 in artful-proposed
  • Unstable updated to 4.12-rc4
  • canonical-kernel-team/proposed PPA available for testing artful proposed kernels
  • Refreshed bcc snap on latest bcc tip (pulls in a bunch of bug fixes)
  • Preparation of 4.4.70 upstream stable kernel update for Xenial
  • CVE’s fixed in latest Xenial SRU
    • CVE-2016-7913
    • CVE-2016-7917
    • CVE-2016-8632
    • CVE-2016-9083
    • CVE-2016-9084
    • CVE-2016-9120
    • CVE-2016-9604
    • CVE-2017-2596
    • CVE-2017-2671
    • CVE-2017-6001
    • CVE-2017-7472
    • CVE-2017-7618
    • CVE-2017-7645
    • CVE-2017-7889
    • CVE-2017-7895
    • CVE-2017-8061
    • CVE-2017-8064
    • CVE-2017-8067
    • CVE-2017-8068
    • CVE-2017-8069
    • CVE-2017-8070

Devel Kernel Announcements

Version 4.11 is now in artful-proposed. We have a new ppa to make testing easier:

https://launchpad.net/~canonical-kernel-team/+archive/ubuntu/proposed

We intend to target a 4.13 kernel for the Ubuntu 17.10 release. The Ubuntu 17.10 Kernel Freeze is Thurs Oct 5, 2017.

Stable Kernel Announcements

Current cycle: 02-Jun through 24-Jun

02-Jun Last day for kernel commits for this cycle

05-Jun – 10-Jun Kernel prep week.

11-Jun – 23-Jun Bug verification & Regression testing..

26-Jun Release to -updates.

Kernel Versions

precise 3.2.0-126.169

trusty 3.13.0-119.166

vivid 3.19.0-84.92

xenial 4.4.0-78.99

yakkety 4.8.0-53.56

linux-lts-trusty 3.13.0-117.164~precise1

linux-lts-vivid 3.19.0-80.88~14.04.1

linux-lts-xenial 4.4.0-78.99~14.04.1

Next cycle: 23-Jun through 15-Jul

23-Jun Last day for kernel commits for this cycle

26-Jun – 01-Jul Kernel prep week.

02-Jul – 14-Jul Bug verification & Regression testing..

17-Jul Release to -updates.

Status: CVE’s

The current CVE status can be reviewed at the following:

http://people.canonical.com/~kernel/cve/pkg/ALL-linux.html

Related posts

Rajan Patel
24 September 2025

Mythbusting the scope of Livepatch protection

Security Article

The purpose of this article is to share the technical realities of security patching for the Linux kernel, and the intended scope of the Linux kernel’s livepatch capability. We’ll cover when kernel live patching is most appropriate, and when updating deb and snap packages and then rebooting is the best option. ...

Luci Stanescu
30 April 2026

Fixes available for CVE-2026-31431 (Copy Fail) Linux Kernel Local Privilege Escalation Vulnerability

Ubuntu Article

A local privilege escalation (LPE) vulnerability affecting the Linux kernel has been publicly disclosed on April 29, 2026. The vulnerability has been assigned CVE ID CVE-2026-31431 and is referred to as Copy Fail. The affected component is a kernel module that provides hardware-accelerated cryptographic functions: algif_aead. The vulnerab ...

Luci Stanescu
12 March 2026

AppArmor vulnerability fixes available

Ubuntu Article

Qualys discovered several vulnerabilities in the AppArmor code of the Linux kernel. These are being referred to as CrackArmor, while CVE IDs are in the process of being assigned by the Linux Kernel CVE Numbering Authority. There are eleven patches for the nine vulnerabilities and each patch is assigned a CVE IDs: CVE-2026-23268, CVE-2026- ...