USN-8957-1: authd vulnerability
USN-8957-1
Summary
It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 platform drivers
- Cryptographic API
- PSP security protocol
- ARM32 architecture
- ARM64 architecture
- MIPS architecture
- PowerPC architecture
- RISC-V architecture
- S390 architecture
- User-Mode Linux (UML)
- x86 architecture
- Block layer subsystem
- Intel NPU Driver
- Compute Acceleration Framework
- ACPI drivers
- Auxiliary display drivers
- Drivers core
- DRBD Distributed Replicated Block Device drivers
- Rados block device (RBD) driver
- Ublk userspace block driver
- Compressed RAM block device driver
- Bluetooth drivers
- Bus devices
- Character device driver
- Clock framework and drivers
- CPU frequency scaling framework
- Hardware crypto device drivers
- Buffer Sharing and Synchronization framework
- DPLL subsystem
- EDAC drivers
- Arm Firmware Framework for ARMv8-A(FFA)
- EFI core
- FWCTL subsystem
- GPIO subsystem
- GPU drivers
- HID subsystem
- Hardware monitoring drivers
- I2C subsystem
- I3C subsystem
- IIO ADC drivers
- IIO subsystem
- InfiniBand drivers
- Input Device core drivers
- Input Device (Mouse) drivers
- IOMMU subsystem
- Mailbox framework
- Multiple devices driver
- Media drivers
- NVIDIA Tegra memory controller driver
- MTD block device drivers
- Network drivers
- Ethernet bonding driver
- Mellanox network drivers
- Microsoft Azure Network Adapter (MANA) driver
- STMicroelectronics network drivers
- Texas Instruments network drivers
- MediaTek network drivers
- NVME drivers
- Parport drivers
- PCI subsystem
- PHY drivers
- Pin controllers subsystem
- Chrome hardware platform drivers
- ACPI WMI driver
- Generic PM domains
- MediaTek PM domains
- Power supply drivers
- Voltage and Current Regulator drivers
- MPAM driver
- Amlogic Meson reset controller drivers
- S/390 drivers
- SCSI subsystem
- NVIDIA Tegra Control Backbone (CBB) driver
- SPI subsystem
- Greybus lights staging drivers
- Media staging dr
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
This update corrects flaws in the following subsystems:
- x86 platform drivers
- Cryptographic API
- PSP security protocol
- ARM32 architecture
- ARM64 architecture
- MIPS architecture
- PowerPC architecture
- RISC-V architecture
- S390 architecture
- User-Mode Linux (UML)
- x86 architecture
- Block layer subsystem
- Intel NPU Driver
- Compute Acceleration Framework
- ACPI drivers
- Auxiliary display drivers
- Drivers core
- DRBD Distributed Replicated Block Device drivers
- Rados block device (RBD) driver
- Ublk userspace block driver
- Compressed RAM block device driver
- Bluetooth drivers
- Bus devices
- Character device driver
- Clock framework and drivers
- CPU frequency scaling framework
- Hardware crypto device drivers
- Buffer Sharing and Synchronization
CVEs in this advisory 1
Updates
- Published by Ubuntu
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.