USN-8818-1: Linux kernel vulnerabilities
Ubuntu kernel update fixes an Arm TLB race that may allow local privilege escalation, plus other driver and filesystem flaws.
Ubuntu USN-8818-1 patches multiple Linux kernel flaws, including CVE-2025-10263 on some Arm processors. A broadcast TLB invalidation can complete before memory writes through the invalidated translation are globally observed, so a local attacker might write memory after permission was revoked, bypass protections, or escalate privileges. The update also covers ARM64, InfiniBand and network drivers, the TCM subsystem, exFAT, and the NFS client. The notice does not report exploitation in the wild.
- CVE-2025-10263 is an Arm TLB race that can enable local privilege escalation.
- A local attacker may write memory after access permission was revoked.
- Fixes also cover ARM64, InfiniBand, network drivers, TCM, exFAT, and NFS.
- Ubuntu does not say the flaws are being exploited.
- CVEs
- CVE-2025-10263
- Products
- Linux kernelUbuntu
- Organizations
- Canonical
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-10263 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &… | 9.1 | <1% |
From the original article
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.