USN-8726-3: Linux kernel (IBM) vulnerabilities
Ubuntu kernel update patches a privilege escalation flaw (CVE-2025-10263) in Arm processors affecting IBM systems.
Ubuntu Security Notice USN-8726-3 addresses a Linux kernel vulnerability for IBM systems. A flaw in Arm processors (CVE-2025-10263) allows a local attacker to bypass memory protections and escalate privileges. The update also corrects several other security issues in various kernel subsystems.
- Ubuntu kernel security notice for IBM systems.
- Arm processors could bypass memory protections due to TLB invalidation flaw.
- Local attacker could escalate privileges using CVE-2025-10263.
- Update corrects flaws in ARM64, UAPI, kernel build, and other subsystems.
- CVEs
- CVE-2025-10263
- Vendors
- Ubuntu
- Products
- Linux kernel
- Malware
- Linux kernel (IBM)
- Organizations
- Ubuntu
- Countries
- Arm
- AI models
- Linux kernel
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-10263 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &… | 9.1 | <1% |
From the original article
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.