Canonical adds a new virtualization HWE stack to Ubuntu 26.04 LTS. Moaataz Anwar July 27, 2026 0 Comments Canonical has introduced a new virtualization Hardware Enablement, or HWE, stack for Ubuntu 26.04 LTS, giving users access to newer virtualization components while staying on a long-term support base. The goal is to bridge the gap between Ubuntu's stable LTS lifecycle and the faster pace of innovation in virtualization technologies. This new stack is designed for environments that depend on modern virtualization features, especially confidential computing workloads. It is meant to complement the regular HWE kernel model that Ubuntu already uses for hardware support, but now it extends that idea to the user-space virtualization stack as well. The virtualization HWE stack includes updated versions of key components such as QEMU, libvirt, EDK2, and SeaBIOS. Canonical plans to deliver these packages in a coordinated way so that administrators can upgrade the full virtualization stack together instead of mixing incompatible versions. According to Canonical's approach, the stack will be updated every six months during the first two years of the Ubuntu 26.04 LTS lifecycle. This gives users a rolling path to newer upstream virtualization features without forcing them to leave the LTS release or move to a short-lived interim version. The new model is especially relevant for organizations using technologies such as AMD SEV-SNP and Intel TDX, which are increasingly important for confidential virtual machines and protected cloud workloads. By providing more current virtualization packages, Ubuntu 26.04 LTS can better support modern enterprise and cloud requirements while preserving the reliability expected from an LTS platform. Canonical also provides a management tool, ubuntu_virt_helper, to help keep the virtualization stack consistent. This reduces the risk of partial upgrades that could break compatibility between QEMU, libvirt, firmware, and related components. In practical terms, this change gives administrators a flexible option: they can remain on Ubuntu 26.04 LTS for long-term stability while opting into newer virtualization features when needed. That makes the release more attractive for server operators, cloud providers, and teams running confidential or security-sensitive workloads. Posted bymoaataz Anwar.

Ubuntu 26.10 to include Ubuntu certified hardware check. Jul 27, 2026 Jack Wallen If you've ever wondered if your laptop or PC is officially certified to run Ubuntu, that curiosity will soon be met. Starting with Ubuntu 26.10 (Stonking Stingray), there will be a new feature in Settings | System that allows you to find out if your hardware is certified to run the Ubuntu OS. When you click the button to verify your hardware, it runs the com.ubuntu.hwctl service. You can also run the command hwlib (available starting in 26.10), which will return the same results (only in the terminal instead of a GUI). There are six different statuses that can be returned: Ubuntu certified, certified for a different Ubuntu version, not certified but similar to a model that is, not certified, unable to check, and status unknown. I have an instance of the daily release of Ubuntu 26.10, and the feature has yet to appear, but according to OMG Ubuntu, the certified hardware check is coming. The site also indicates that there will be an option to enable regular checks, which will send your hardware details to Canonical to check on your certification status. Apparently, the change will appear in gnome-control-center 1:51~alpha-0ubuntu2. After running an upgrade to the daily installation, it broke the desktop (part of the fun with running a daily release), so I'll have to re-install Stonking Stingray again to see if I can finally test the feature. The stable release of Ubuntu 26.10 is due in October, so there's plenty of time for the feature to solidify and for you to run out and purchase a Ubuntu-certified laptop or desktop. * Certified Ubuntu on HP Server HP and Canonical are working together to get Ubuntu certified for HPs Proliant servers. more " * Canonical Makes Ubuntu Component Catalog Public "There has not been a comprehensive, up-to-date freely available catalog like this for a long time," said Victor Palau, Platform Services Manager at Canonical. "By making this open and easily searchable we want to speed the component selection for Ubuntu machines, and allow us and our partner manufacturers to focus on the value-added user experience." more " * Ubuntu 9.04 Server Certified on HP ProLiant G6 Hewlett-Packard and the Canonical Linux firm have announced certification of the Ubuntu 9.04 Server Edition on HP's ProLiant G6 server family. more " * Linux Training: Learn at your leisure more " * Kernel Plans for Ubuntu 10.04 On Thursday, the first alpha version of Ubuntu 10.04 LTS is to be made available. The official release will be out in April 2010. Ubuntu 10.04 LTS should feature significantly more stability, being based on the just released Kernel 2.6.32 as a precedent to the Long Term version. more"

Ubuntu local privilege escalation in AccountsService and snap-confine. Critical race condition flaws in Ubuntu AccountsService and snap-confine allow local users to escalate privileges. Immediate patching required. Ubuntu systems face urgent security concerns due to newly disclosed critical local privilege escalation vulnerabilities in two core components: AccountsService and snap-confine. These flaws, identified as CVE-2026-61897, CVE-2026-61898, and CVE-2026-8933, permit unprivileged local users to escalate rights and execute arbitrary administrative commands. According to recent reports from researchers and Canonical's security advisories, these issues stem from improper privilege dropping, race conditions, and configuration parsing errors. The significance lies in the widespread use of Ubuntu Linux - particularly the LTS versions like 22.04, 24.04, and 26.04 - in enterprise environments. The vulnerabilities affect both desktop systems and servers where local access, even through compromised credentials or malware, could rapidly lead to full system compromise. Security professionals must prioritize immediate patching and system reboots to mitigate risks and prevent potential lateral movement or persistence by attackers. Understanding accountsservice privilege escalation flaws. Two critical CVEs (CVE-2026-61897 and CVE-2026-61898) impact Ubuntu's AccountsService, a system daemon responsible for managing user account information. These vulnerabilities arise from flawed handling of privilege dropping and errors in parsing configuration files. By crafting malicious files or exploiting improper privilege transitions, local attackers can execute arbitrary commands with administrator privileges. These flaws affect multiple Ubuntu Long Term Support (LTS) releases, including 14.04 through 26.04, underscoring the need for broad awareness and patching. Canonical's advisories emphasize that merely updating the accountsservice package is insufficient - rebooting systems is also mandatory to complete remediation. The issues demonstrate how subtle errors in privilege management within trusted system components can lead to severe privilege escalation opportunities. Race condition in snap-confine enables root access. The snap-confine component, responsible for sandboxing snap packages, exhibits a high-severity race condition vulnerability identified as CVE-2026-8933. Researchers revealed that the flaw occurs due to a narrow time window introduced when snap-confine switched from a setuid-root model to using file capabilities. During sandbox setup, temporary files' permissions momentarily allow local unprivileged users to manipulate environment bindings, enabling them to escalate privileges to root. This vulnerability primarily affects modern Ubuntu Desktop versions 22.04, 24.04, 25.10 (expired), and 26.04. While no public remote exploit exists, the risk is pronounced on multi-user or shared systems where an attacker gains local shell access. Canonical has released patched versions of snapd, and administrators are strongly advised to update immediately and restrict local shell access until patched. The flaw highlights the challenges of balancing security models with evolving Linux capability frameworks. Broader implications and mitigation strategies. Taken together, these vulnerabilities underscore persistent risks in local privilege management on Linux systems, even within well-maintained distributions like Ubuntu. The critical nature of these flaws indicates attackers remain focused on finding and exploiting subtle defects in system daemons and sandboxing mechanisms. For security teams, this situation demands a multifaceted response: * Comprehensive identification of affected systems: Utilize asset management and vulnerability scanners to pinpoint Ubuntu versions running vulnerable AccountsService and snap-confine builds. * Immediate deployment of patches: Apply Canonical's updates for accountsservice and snapd packages without delay. * System reboots: Plan and execute prompt system restarts post-patching to ensure vulnerability neutralization. * Access controls: Until remediation is completed, restrict local shell access on at-risk systems to contain attack vectors. * Monitoring and threat hunting: Increase scrutiny of local privilege escalation attempts and unusual administrative commands. These vulnerabilities also reinforce the importance of a layered security posture that minimizes the risk of local access exploitation through endpoint protection, strict user privilege policies, and timely patch management. Conclusion. The newly disclosed local privilege escalation flaws in Ubuntu's AccountsService and snap-confine components present a critical threat to Linux infrastructures. By exploiting privilege dropping errors and race conditions, attackers with local access can gain root control, potentially compromising entire systems. Given the broad impact on Ubuntu LTS releases and Desktop versions, cybersecurity teams must act swiftly to apply patches, reboot systems, and implement controls restricting local access. These incidents illustrate ongoing challenges in securing complex privilege models and underscore an imperative for continuous vigilance, rapid response to disclosed vulnerabilities, and robust operational security practices within Linux environments. Primary Keyphrase: Ubuntu local privilege escalation vulnerabilities URL Slug: ubuntu-local-privilege-escalation-accountsservice-snap-confine Meta Description: Critical race condition flaws in Ubuntu AccountsService and snap-confine allow local users to escalate privileges. Immediate patching required.