Skip to content
NewA calmer, faster ZeroHour
StoryAdvisorymedium

Ubuntu kernel notices fix Arm TLB and network flaws

1 source · 2 articlesFirst reported Updated ()2
What's new

First coverage.

Merged summary · grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

Ubuntu’s late-September and early-October 2026 kernel notices fix CVE-2025-10263 and three NFS, IPv6, and Netfilter flaws, with no active exploitation reported.

Between 29 September and 5 October 2026, Ubuntu published Linux kernel security notices for generic, FIPS, AWS, AWS FIPS, NVIDIA Tegra, and Raspberry Pi kernels. CVE-2025-10263 describes some Arm processors completing a broadcast TLB invalidation before related memory writes are globally observed; Ubuntu says a local attacker might write memory after access was revoked, bypass protections, or escalate privileges. Those notices also patch ARM64, InfiniBand and network drivers, and the TCM subsystem. Most also cover exFAT and the NFS client, but USN-8849-1 for NVIDIA Tegra cites the NFS server, and AWS notices USN-8817-2 and USN-8817-3 list B.A.T.M.A.N. and HSR instead. Separately, USN-8819-3, USN-8851-2, and USN-8864-1 fix NFS server, IPv6, and Netfilter issues tracked as CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221, which Ubuntu says an attacker could possibly use to compromise a system. No notice reports exploitation in the wild.

Key facts
  • Notices dated 2026-09-29 through 2026-10-05 are USN-8817-2, USN-8817-3, USN-8818-3, USN-8818-4, USN-8818-6, USN-8819-3, USN-8849-1, USN-8851-2, USN-8864-1, and USN-8871-1.
  • CVE-2025-10263 is an Arm broadcast TLB invalidation ordering flaw; Ubuntu says a local attacker might write memory after access was revoked, bypass protections, or escalate privileges.
  • CVE-2025-10263 updates cover generic, FIPS, AWS, AWS FIPS, NVIDIA Tegra, and Raspberry Pi kernels, with further fixes in ARM64, InfiniBand, network drivers, and TCM.
  • Most CVE-2025-10263 notices also cite exFAT and the NFS client; USN-8849-1 cites the NFS server, while AWS notices USN-8817-2 and USN-8817-3 list B.A.T.M.A.N. and HSR instead of exFAT or NFS.
  • USN-8819-3, USN-8851-2 (Raspberry Pi), and USN-8864-1 fix NFS server, IPv6, and Netfilter flaws CVE-2025-38724, CVE-2026-53131, and CVE-2026-53221; Ubuntu says an attacker could possibly compromise a system.
  • None of the notices report active exploitation.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat
CVEs
CVE-2025-10263CVE-2025-38724CVE-2026-53131CVE-2026-53221
Vendors
UbuntuArmCanonicalNVIDIAAmazon Web Services
Products
Linux kernelRaspberry PiUbuntuNVIDIA Tegra
Organizations
UbuntuAmazon Web ServicesCanonical

Coverage

oldest first · one row per article · UTC
  1. · Sep 29, 2026 Ubuntu Security NoticesFirst report

    USN-8819-3: Linux kernel vulnerabilities

    Ubuntu kernel update fixes NFS, IPv6, and Netfilter flaws tracked as three CVEs.

  2. · Sep 29, 2026 Ubuntu Security Notices

    USN-8818-3: Linux kernel vulnerabilities

    Ubuntu patches Linux kernel flaws, including an Arm TLB issue that may allow local privilege escalation.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-10263
Arm C1-Ultra, C1-Premium, Neoverse V3 & V3AE, Neoverse V2, Neoverse V1, Neoverse-N2, Neoverse-N1, Cortex-X925, Cortex-X4, Cortex-X3, Cortex-X2, Cortex-X1 &…
9.1<1%
CVE-2025-38724
Linux kernel: nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() Lei Lu recently reported that…
7.8<1%
CVE-2026-53221
+1 related CVE
CVE-2026-53131
Linux kernel: ip6_vti: fix incorrect tunnel matching in vti6_tnl_lookup()
9.8
group max
<1%