It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. ( CVE-2025-10263 ) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 ) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: x86 platform...
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. ( CVE-2025-10263 )
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 )
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. ( CVE-2025-10263 ) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 ) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: x86 platform drivers; ARM64 architecture; Cryptographic API; PSP security protocol; User-space API (UAPI); Kernel build system; ARM32 architecture; MIPS architecture; PowerPC architecture; RISC-V architecture; S390 architecture; User-Mode Linux (UML); x86 architecture; Block layer subsystem; Compute Acceleration Framework; Intel NPU Driver; ACPI drivers; Android drivers; Auxiliary display drivers; Drivers core; DRBD Distributed Replicated Block Device drivers; Rados block device (RBD) driver; Ublk userspace block driver; Compressed RAM block device driver; Bluetooth drivers; Bus devices; Character device driver; Hardware random number generator core; Clock framework and drivers; CPU frequency scaling framework; Hardware crypto device drivers; Buffer Sharing and Synchronization framework; DPLL subsystem; EDAC drivers; Arm Firmware Framework for ARMv8-A(FFA); EFI core; Intel Stratix 10 firmware drivers; FPGA Framework; FWCTL subsystem; GPIO subsystem; GPU drivers; HID subsystem; Hardware monitoring drivers; CoreSight HW tracing drivers; I2C subsystem; I3C subsystem; IIO subsystem; IIO ADC drivers; InfiniBand drivers; Input Device core drivers; Input Device (Mouse) drivers; IOMMU subsystem; IRQ chip drivers; Mailbox framework; Multiple devices driver; Media drivers; NVIDIA Tegra memory controller driver; Multifunction device drivers; Fastrpc Driver; MMC subsystem; MTD block device drivers; Network drivers; Ethernet bonding driver; Mellanox network drivers; Microsoft Azure Network Adapter (MANA) driver; STMicroelectronics network drivers; Texas Instruments network drivers; MediaTek network drivers; NTB driver; NVME drivers; NVMEM (Non Volatile Memory) drivers; Parport drivers; PCI subsystem; PHY drivers; Pin controllers subsystem; Chrome hardware platform drivers; ACPI WMI driver; Generic PM domains; MediaTek PM domains; System reset/shutdown drivers; Power sequencing drivers; Power supply drivers; PTP clock framework; Voltage and Current Regulator drivers; MPAM driver; Amlogic Meson reset controller drivers; RPMSG subsystem; S/390 drivers; SCSI subsystem; SLIMbus drivers; NVIDIA Tegra Control Backbone (CBB) driver; SPI subsystem; Greybus lights staging drivers; Media staging drivers; Realtek RTL8723BS SDIO drivers; VME bus staging drivers; TCM subsystem; Trusted Execution Environment drivers; Thunderbolt and USB4 drivers; TTY drivers; Userspace I/O drivers; Cadence USB3 driver; USB Device Class drivers; ULPI bus; DesignWare USB2 driver; DesignWare USB3 driver; Faraday FOTG210 USB2 dual-role controller driver; USB Gadget drivers; USB Host Controller drivers; USB ChaosKey driver; Siemens ID Mouse USB driver; IOWarrior USB driver; LD Didactic USB driver; LEGO USB Tower driver; Intel USBIO USB I/O expander driver; USS720 USB parallel port adapter driver; MediaTek USB3 DRD driver; USB Dual Role (OTG-ready) Controller drivers; USB Serial drivers; USB Type-C support driver; USB Type-C Port Controller Manager driver; TI TPS6598x USB Power Delivery controller driver; USB Type-C Connector System Software Interface driver; USB over IP driver; vDPA drivers; VFIO drivers; Framebuffer layer; TSM AMD SEV Guest driver; Virtio drivers; Xen hypervisor drivers; 9P distributed file system; File systems infrastructure; AFS file system; BTRFS file system; Ceph distributed file system; EROFS file system; exFAT file system; F2FS file system; FUSE (File system in Userspace); GFS2 file system; HFS file system; HFS+ file system; HugeTLB file system; Network file systems library; Network file system (NFS) client; Network file system (NFS) server daemon; NILFS2 file system; File system notification infrastructure; NTFS3 file system; OCFS2 file system; Overlay file system; Proc file system; Diskquota system; SMB network file system; Tracing file system; UDF file system; XFS file system; DRM TTM subsystem; Key management; BPF subsystem; Control group (cgroup); Kernel CPU control infrastructure; Memory management; Tracing infrastructure; QorIQ DPAA2 FSL-MC bus driver; Freescale ENETC Ethernet drivers; Software nodes and device properties; Glob pattern matching library; Memory Management; KVM subsystem; Linked list library; Mellanox drivers; Netfilter; padata parallel execution mechanism; PPP protocol drivers and compressors; Socket messages infrastructure; Network traffic control; Bluetooth subsystem; Networking core; Network shaper API; Network sockets; TCP network protocol; XFRM subsystem; io_uring subsystem; IPC subsystem; Audit subsystem; DMA mapping infrastructure; Perf events; Kernel exit() syscall; Kernel fork() syscall; Kernel futex primitives; IRQ subsystem; Kexec HandOver (KHO); Locking primitives; Kernel module support; Padata parallel execution mechanism; RCU subsystem; Scheduler infrastructure; Signal handling mechanism; Timer subsystem; Cryptographic library; Debug objects infrastructure; Scatterlist API; KProbes tracing; 6LoWPAN network protocol; IEEE 802 network protocols; 802.1Q VLAN protocol; 9P file system network protocol; B.A.T.M.A.N. meshing protocol; Ethernet bridge; Ceph Core library; Devlink API; Distributed Switch Architecture; Ethtool driver; Handshake API; HSR network protocol; IEEE802154.4 network protocol; IPv4 networking; IPv6 networking; IUCV driver; L2TP protocol; MAC80211 subsystem; IEEE 802.15.4 subsystem; Multipath TCP; NetLabel subsystem; NFC subsystem; Open vSwitch; Phonet protocol; Qualcomm IPC Router (QRTR); RDS protocol; RxRPC session sockets; SCTP protocol; SMC sockets; TIPC protocol; TLS protocol; Unix domain sockets; VMware vSockets driver; Wireless networking; eXpress Data Path; AppArmor security module; Linux Security Modules (LSM) Framework; Integrity Measurement Architecture(IMA) framework; SELinux security module; Apple Onboard Audio ALSA driver; ALSA framework; FireWire sound drivers; HD-audio driver; Gravis UltraSound ALSA driver; AudioScience HPI driver; C-Media CMI8x38 ALSA driver; ESS Solo-1 ALSA driver; ICE1712/ICE1724 (Envy24) ALSA driver; Yamaha YMFPCI ALSA driver; FourSemi audio codecs; Texas InstrumentS Audio (ASoC/HDA) drivers; Simple audio multiplexer codec driver; Wolfson Microelectronics audio codecs; QCOM ASoC drivers; Renesas ASoC drivers; SoundWire (SDCA) ASoC drivers; SOF drivers; STI ASoC drivers; USB sound devices; Virtio sound driver
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. ( CVE-2025-10263 )
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. ( CVE-2025-54518 )
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
x86 platform drivers;
PSP security protocol;
User-space API (UAPI);
PowerPC architecture;
User-Mode Linux (UML);
Block layer subsystem;
Compute Acceleration Framework;
Auxiliary display drivers;
DRBD Distributed Replicated Block Device drivers;
Rados block device (RBD) driver;
Ublk userspace block driver;
Compressed RAM block device driver;
Character device driver;
Hardware random number generator core;
Clock framework and drivers;
CPU frequency scaling framework;
Hardware crypto device drivers;
Buffer Sharing and Synchronization framework;
Arm Firmware Framework for ARMv8-A(FFA);
Intel Stratix 10 firmware drivers;
Hardware monitoring drivers;
CoreSight HW tracing drivers;
Input Device core drivers;
Input Device (Mouse) drivers;
Multiple devices driver;
NVIDIA Tegra memory controller driver;
Multifunction device drivers;
MTD block device drivers;
Ethernet bonding driver;
Mellanox network drivers;
Microsoft Azure Network Adapter (MANA) driver;
STMicroelectronics network drivers;
Texas Instruments network drivers;
MediaTek network drivers;
NVMEM (Non Volatile Memory) drivers;
Pin controllers subsystem;
Chrome hardware platform drivers;
System reset/shutdown drivers;
Power sequencing drivers;
Power supply drivers;
Voltage and Current Regulator drivers;
Amlogic Meson reset controller drivers;
NVIDIA Tegra Control Backbone (CBB) driver;
Greybus lights staging drivers;
Media staging drivers;
Realtek RTL8723BS SDIO drivers;
VME bus staging drivers;
Trusted Execution Environment drivers;
Thunderbolt and USB4 drivers;
Userspace I/O drivers;
USB Device Class drivers;
DesignWare USB2 driver;
DesignWare USB3 driver;
Faraday FOTG210 USB2 dual-role controller driver;
USB Host Controller drivers;
Siemens ID Mouse USB driver;
IOWarrior USB driver;
LD Didactic USB driver;
LEGO USB Tower driver;
Intel USBIO USB I/O expander driver;
USS720 USB parallel port adapter driver;
MediaTek USB3 DRD driver;
USB Dual Role (OTG-ready) Controller drivers;
USB Type-C support driver;
USB Type-C Port Controller Manager driver;
TI TPS6598x USB Power Delivery controller driver;
USB Type-C Connector System Software Interface driver;
TSM AMD SEV Guest driver;
Xen hypervisor drivers;
9P distributed file system;
File systems infrastructure;
Ceph distributed file system;
FUSE (File system in Userspace);
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
File system notification infrastructure;
SMB network file system;
Control group (cgroup);
Kernel CPU control infrastructure;
Tracing infrastructure;
QorIQ DPAA2 FSL-MC bus driver;
Freescale ENETC Ethernet drivers;
Software nodes and device properties;
Glob pattern matching library;
padata parallel execution mechanism;
PPP protocol drivers and compressors;
Socket messages infrastructure;
Network traffic control;
TCP network protocol;
DMA mapping infrastructure;
Kernel exit() syscall;
Kernel fork() syscall;
Kernel futex primitives;
Kexec HandOver (KHO);
Kernel module support;
Padata parallel execution mechanism;
Scheduler infrastructure;
Signal handling mechanism;
Cryptographic library;
Debug objects infrastructure;
6LoWPAN network protocol;
IEEE 802 network protocols;
802.1Q VLAN protocol;
9P file system network protocol;
B.A.T.M.A.N. meshing protocol;
Distributed Switch Architecture;
HSR network protocol;
IEEE802154.4 network protocol;
IEEE 802.15.4 subsystem;
Qualcomm IPC Router (QRTR);
RxRPC session sockets;
VMware vSockets driver;
AppArmor security module;
Linux Security Modules (LSM) Framework;
Integrity Measurement Architecture(IMA) framework;
SELinux security module;
Apple Onboard Audio ALSA driver;
FireWire sound drivers;
Gravis UltraSound ALSA driver;
AudioScience HPI driver;
C-Media CMI8x38 ALSA driver;
ESS Solo-1 ALSA driver;
ICE1712/ICE1724 (Envy24) ALSA driver;
Yamaha YMFPCI ALSA driver;
FourSemi audio codecs;
Texas InstrumentS Audio (ASoC/HDA) drivers;
Simple audio multiplexer codec driver;
Wolfson Microelectronics audio codecs;
Renesas ASoC drivers;
SoundWire (SDCA) ASoC drivers;
After a standard system update you need to reboot your computer to make all the necessary changes.
ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
The problem can be corrected by updating your system to the following package versions:
Reduce your security exposure
Ubuntu Pro provides ten-year security coverage to 25,000+ packages in Main and Universe repositories, and it is free for up to five machines.
Have additional questions?
Talk to a member of the team ›
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
