USN-8957-1: authd vulnerability
USN-8957-1
Summary
It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505)
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518)
It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626) Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture
- RISC-V architecture
- S390 architecture
- x86 architecture
- Block layer subsystem
- Cryptographic API
- Compute Acceleration Framework
- ACPI drivers
- Serial ATA and Parallel ATA drivers
- Drivers core
- Power management core
- DRBD Distributed Replicated Block Device drivers
- Rados block device (RBD) driver
- Compressed RAM block device driver
- Bluetooth drivers
- Bus devices
- Character device driver
- Clock framework and drivers
- Data acquisition framework and drivers
- Counter interface drivers
- CPU frequency scaling framework
- Hardware crypto device drivers
- CXL (Compute Express Link) drivers
- DMA engine subsystem
- EDAC drivers
- EFI core
- GPU drivers
- Greybus drivers
- HID subsystem
- Hardware monitoring drivers
- I2C subsystem
- IIO ADC drivers
- IIO subsystem
- InfiniBand drivers
- Input Device (Miscellaneous) drivers
- IRQ chip drivers
- LED subsystem
- Mailbox framework
- Multiple devices driver
- Media drivers
- MediaTek SMI driver
- NVIDIA Tegra memory controller driver
- Fastrpc Driver
- IBM Advanced System Management driver
- MMC subsystem
- MTD block device drivers
- Network drivers
- Ethernet bonding driver
- Mellanox network drivers
- Microsoft Azure Network Adapter (MANA) driver
- STMicroelectronics network drivers
- Ethernet team driver
- Media
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
This update corrects flaws in the following subsystems:
- ARM64 architecture
- RISC-V architecture
- S390 architecture
- x86 architecture
- Block layer subsystem
- Cryptographic API
- Compute Acceleration Framework
- ACPI drivers
- Serial ATA and Parallel ATA drivers
- Drivers core
- Power management core
- DRBD Distributed Replicated Block Device drivers
- Rados block device (RBD) driver
- Compressed RAM block device driver
- Bluetooth drivers
- Bus devices
- Character device driver
- Clock framework and drivers
- Data acquisition framework and drivers
- Counter interface drivers
- CPU frequency scaling framework
- Hardware crypto device drivers
- CXL (Compute Express Link) drivers
- DMA engine subsystem
- EDAC drivers
- EFI core
- GPU drivers
- Greybus drivers;
CVEs in this advisory 3
Updates
- Published by Ubuntu
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.