USN-8817-1: Linux kernel vulnerabilities
Ubuntu USN-8817-1 fixes Linux kernel bugs, including an Arm TLB flaw that may enable local privilege escalation.
Ubuntu USN-8817-1 corrects several Linux kernel vulnerabilities, including CVE-2025-10263. On some Arm processors, a broadcast TLB invalidation can finish before writes made through the invalidated translation are globally visible, allowing a local attacker to change memory after permission was revoked and possibly escalate privileges. Additional fixes cover ARM64, InfiniBand drivers, network drivers, the TCM subsystem, B.A.T.M.A.N. meshing, and the HSR protocol. No active exploitation is stated.
- CVE-2025-10263 lets a local attacker bypass Arm memory protections via a TLB race.
- Patches also touch ARM64, InfiniBand, network drivers, TCM, B.A.T.M.A.N., and HSR.
- Impact described includes privilege escalation or system compromise.
- No in-the-wild exploitation is reported in USN-8817-1.
- CVEs
- CVE-2025-10263
- Products
- Linux kernelUbuntu
- Organizations
- Canonical
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-10263 | Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &… | 9.1 | <1% |
From the original article
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.