USN-8957-1: authd vulnerability
USN-8957-1
Summary
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263) Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture
- User-space API (UAPI)
- Kernel build system
- ARM32 architecture
- RISC-V architecture
- S390 architecture
- x86 architecture
- Block layer subsystem
- Cryptographic API
- Compute Acceleration Framework
- Intel NPU Driver
- ACPI drivers
- Android drivers
- Drivers core
- Compressed RAM block device driver
- Bluetooth drivers
- Character device driver
- Hardware random number generator core
- CPU frequency scaling framework
- Hardware crypto device drivers
- Buffer Sharing and Synchronization framework
- Intel Stratix 10 firmware drivers
- FPGA Framework
- GPIO subsystem
- GPU drivers
- HID subsystem
- CoreSight HW tracing drivers
- I2C subsystem
- IIO subsystem
- IIO ADC drivers
- InfiniBand drivers
- Input Device core drivers
- Input Device (Mouse) drivers
- IOMMU subsystem
- IRQ chip drivers
- Multiple devices driver
- Media drivers
- Multifunction device drivers
- Fastrpc Driver
- MMC subsystem
- Ethernet bonding driver
- Network drivers
- Mellanox network drivers
- MediaTek network drivers
- NTB driver
- NVME drivers
- NVMEM (Non Volatile Memory) drivers
- PCI subsystem
- Pin controllers subsystem
- x86 platform drivers
- System reset/shutdown drivers
- Power sequencing drivers
- PTP clock framework
- Voltage and Current Regulator drivers
- RPMSG subsystem
- SLIMbus drivers
- SPI subsystem
- Media staging drivers
- Realtek RTL8723BS SDIO drivers
- VME bus staging drivers
- Trusted Execution Environment drivers
- TTY drivers
- Cadence USB3 driver
- ULPI bus
- USB core drivers
- DesignWare USB3 driver
- Faraday FOTG210 USB2 dual-role controller driver
- USB Gadget drivers
- USB Host Controller drivers
- USB ChaosKey driver
- Siemens ID Mouse USB driver
- IOWarrior USB driver
- LD Didactic USB driver
- LEGO USB To
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
This update corrects flaws in the following subsystems:
- ARM64 architecture
- User-space API (UAPI)
- Kernel build system
- ARM32 architecture
- RISC-V architecture
- S390 architecture
- x86 architecture
- Block layer subsystem
- Cryptographic API
- Compute Acceleration Framework
- Intel NPU Driver
- ACPI drivers
- Android drivers
- Drivers core
- Compressed RAM block device driver
- Bluetooth drivers
- Character device driver
- Hardware random number generator core
- CPU frequency scaling framework
- Hardware crypto device drivers
- Buffer Sharing and Synchronization framework
- Intel Stratix 10 firmware drivers
- FPGA Framework
- GPIO subsystem
- GPU drivers
- HID subsystem
- CoreSight HW tracing drivers
- I2C subsystem
- IIO subsystem
- IIO ADC drivers
- I
CVEs in this advisory 1
Updates
- Published by Ubuntu
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.