USN-8121-1
linux-aws-fips vulnerability
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)
What each source reports
OSV No score
linux-aws-fips vulnerability
Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853)
- Record
USN-8121-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-aws-fipsUbuntu:Pro:FIPS-updates:20.04:LTS |
before 5.4.0-1156.166+fips1, plus listed versions 5.4.0-1021.21+fips25.4.0-1069.73+fips25.4.0-1071.76+fips15.4.0-1072.77+fips15.4.0-1073.78+fips1 Show 45 moreShow less5.4.0-1078.84+fips15.4.0-1080.87+fips15.4.0-1081.88+fips15.4.0-1083.90+fips15.4.0-1085.92+fips15.4.0-1086.93+fips15.4.0-1088.96+fips15.4.0-1089.97+fips15.4.0-1092.100+fips15.4.0-1093.101+fips15.4.0-1094.102+fips15.4.0-1096.104+fips15.4.0-1099.107+fips15.4.0-1100.108+fips15.4.0-1101.109+fips15.4.0-1102.110+fips15.4.0-1103.111+fips15.4.0-1104.112+fips15.4.0-1105.113+fips15.4.0-1106.114+fips15.4.0-1107.115+fips15.4.0-1108.116+fips15.4.0-1109.118+fips15.4.0-1110.119+fips15.4.0-1111.120+fips15.4.0-1112.121+fips15.4.0-1113.123+fips15.4.0-1114.124+fips15.4.0-1116.126+fips15.4.0-1117.127+fips15.4.0-1118.128+fips15.4.0-1119.129+fips15.4.0-1120.130+fips15.4.0-1121.131+fips15.4.0-1122.132+fips15.4.0-1123.133+fips15.4.0-1124.134+fips15.4.0-1125.135+fips15.4.0-1126.136+fips25.4.0-1127.137+fips15.4.0-1128.138+fips15.4.0-1129.139+fips15.4.0-1130.140+fips15.4.0-1131.141+fips15.4.0-1132.142+fips1 |
5.4.0-1156.166+fips1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-8121-1 is a vulnerability with no CVSS score yet in linux-aws-fips, published March 24, 2026. No source lists public exploit code. Fixed in linux-aws-fips 5.4.0-1156.166+fips1.
References
Left out here: 20 versions. The JSON record has them.