USN-8668-2: Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu patches Linux kernel vulnerabilities for Raspberry Pi, including an NTFS flaw and an AMD processor speculative execution issue.
Ubuntu released security notice USN-8668-2 addressing vulnerabilities in the Linux kernel for Raspberry Pi, including CVE-2023-45896 in the NTFS implementation that allows out-of-bounds reads and potential kernel memory exposure. Another vulnerability, CVE-2025-54505, affects AMD processors by not properly clearing data during speculative execution, allowing local attackers to expose sensitive information. Patches are available for affected systems.
- Ubuntu Security Notice USN-8668-2 addresses vulnerabilities in the Linux kernel for Raspberry Pi.
- CVE-2023-45896 allows out-of-bounds reads via malicious NTFS images, potentially exposing kernel memory.
- CVE-2025-54505 allows local attackers to expose sensitive information on certain AMD processors.
Vulnerabilities mentionedAll →
- CVE-2023-458967.1<1%ntfs3 in the Linux kernel through 6.8.0 allows a physically proximate attacker to read kernel memory by mounting a filesystem (e.g., if a Linux distribution is…published
- CVE-2025-545052.0<1%A transient execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data via the floating point divisor unit, potentially…
Maxim Suhanov discovered that the NTFS file system implementation in the Linux kernel did not properly validate file name length in certain situations, leading to an out-of-bounds read. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could expose sensitive information (kernel memory). (CVE-2023-45896) It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local…
This source does not provide full text. Read it at ubuntu.com.