It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 ) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: x86 platform drivers; Cryptographic API; PSP security protocol; ARM32 architecture; ARM64 architecture; MIPS architecture; PowerPC architecture; RISC-V architecture; S390 architecture; User-Mode Linux (UML); x86 architecture; Block layer subsystem; Intel NPU Driver; Compute Acceleration Framework; ACPI drivers; Auxiliary...
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 )
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 ) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: x86 platform drivers; Cryptographic API; PSP security protocol; ARM32 architecture; ARM64 architecture; MIPS architecture; PowerPC architecture; RISC-V architecture; S390 architecture; User-Mode Linux (UML); x86 architecture; Block layer subsystem; Intel NPU Driver; Compute Acceleration Framework; ACPI drivers; Auxiliary display drivers; Drivers core; DRBD Distributed Replicated Block Device drivers; Rados block device (RBD) driver; Ublk userspace block driver; Compressed RAM block device driver; Bluetooth drivers; Bus devices; Character device driver; Clock framework and drivers; CPU frequency scaling framework; Hardware crypto device drivers; Buffer Sharing and Synchronization framework; DPLL subsystem; EDAC drivers; Arm Firmware Framework for ARMv8-A(FFA); EFI core; FWCTL subsystem; GPIO subsystem; GPU drivers; HID subsystem; Hardware monitoring drivers; I2C subsystem; I3C subsystem; IIO ADC drivers; IIO subsystem; InfiniBand drivers; Input Device core drivers; Input Device (Mouse) drivers; IOMMU subsystem; Mailbox framework; Multiple devices driver; Media drivers; NVIDIA Tegra memory controller driver; MTD block device drivers; Network drivers; Ethernet bonding driver; Mellanox network drivers; Microsoft Azure Network Adapter (MANA) driver; STMicroelectronics network drivers; Texas Instruments network drivers; MediaTek network drivers; NVME drivers; Parport drivers; PCI subsystem; PHY drivers; Pin controllers subsystem; Chrome hardware platform drivers; ACPI WMI driver; Generic PM domains; MediaTek PM domains; Power supply drivers; Voltage and Current Regulator drivers; MPAM driver; Amlogic Meson reset controller drivers; S/390 drivers; SCSI subsystem; NVIDIA Tegra Control Backbone (CBB) driver; SPI subsystem; Greybus lights staging drivers; Media staging drivers; Realtek RTL8723BS SDIO drivers; TCM subsystem; Thunderbolt and USB4 drivers; TTY drivers; Userspace I/O drivers; USB Device Class drivers; ULPI bus; DesignWare USB2 driver; USB Gadget drivers; USB Dual Role (OTG-ready) Controller drivers; USB Serial drivers; USB Type-C support driver; USB Type-C Port Controller Manager driver; TI TPS6598x USB Power Delivery controller driver; USB Type-C Connector System Software Interface driver; USB over IP driver; vDPA drivers; VFIO drivers; Framebuffer layer; TSM AMD SEV Guest driver; Xen hypervisor drivers; 9P distributed file system; File systems infrastructure; AFS file system; BTRFS file system; Ceph distributed file system; EROFS file system; F2FS file system; FUSE (File system in Userspace); GFS2 file system; HFS+ file system; HugeTLB file system; Network file systems library; Network file system (NFS) server daemon; NILFS2 file system; File system notification infrastructure; NTFS3 file system; OCFS2 file system; Overlay file system; Diskquota system; SMB network file system; Tracing file system; UDF file system; DRM TTM subsystem; Control group (cgroup); Kernel CPU control infrastructure; Tracing infrastructure; QorIQ DPAA2 FSL-MC bus driver; Freescale ENETC Ethernet drivers; Software nodes and device properties; Memory management; Memory Management; Linked list library; Netfilter; padata parallel execution mechanism; PPP protocol drivers and compressors; Bluetooth subsystem; Networking core; Network shaper API; Network traffic control; TCP network protocol; XFRM subsystem; io_uring subsystem; IPC subsystem; Audit subsystem; BPF subsystem; DMA mapping infrastructure; Kernel exit() syscall; Kernel fork() syscall; Kernel futex primitives; IRQ subsystem; Kexec HandOver (KHO); Padata parallel execution mechanism; RCU subsystem; Scheduler infrastructure; Cryptographic library; KProbes tracing; 802.1Q VLAN protocol; B.A.T.M.A.N. meshing protocol; Ethernet bridge; Ceph Core library; Distributed Switch Architecture; Ethtool driver; Handshake API; HSR network protocol; IPv4 networking; IPv6 networking; IUCV driver; L2TP protocol; MAC80211 subsystem; Multipath TCP; NFC subsystem; Open vSwitch; Phonet protocol; RDS protocol; RxRPC session sockets; SCTP protocol; SMC sockets; TIPC protocol; TLS protocol; Unix domain sockets; VMware vSockets driver; Wireless networking; Integrity Measurement Architecture(IMA) framework; Key management; Linux Security Modules (LSM) Framework; SELinux security module; ALSA framework; HD-audio driver; AudioScience HPI driver; FourSemi audio codecs; Texas InstrumentS Audio (ASoC/HDA) drivers; Simple audio multiplexer codec driver; QCOM ASoC drivers; Renesas ASoC drivers; SOF drivers; STI ASoC drivers; USB sound devices; KVM subsystem
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 )
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
The problem can be corrected by updating your system to the following package versions:
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
Have additional questions?
Talk to a member of the team ›
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
