Critical Linux Kernel Vulnerabilities Affecting AMD Processors

On July 1, 2026, Ubuntu released USN-8488-1 detailing vulnerabilities in the Linux kernel, particularly affecting AMD processors. A local attacker could exploit these vulnerabilities to access sensitive information due to improper data clearance in the floating point divider unit during speculative execution (CVE-2025-54505). The update addresses multiple subsystems, including ARM64 and x86 architectures, cryptographic APIs, and various device drivers. The vulnerabilities could allow attackers to compromise systems, posing significant risks to users of affected Linux distributions. The first public proof of concept (PoC) for CVE-2025-54505 was released on April 19, 2026, raising concerns about potential exploitation. The situation remains critical as users are urged to apply patches immediately to mitigate risks.

Key Points: • CVE-2025-54505 allows local attackers to expose sensitive data on AMD processors. • Multiple subsystems in the Linux kernel are affected, necessitating urgent updates. • First public PoC for the vulnerability was released on April 19, 2026.