USN-9038-1: GStreamer Good Plugins, GStreamer Base Plugins vulnerabilities
USN-9038-1
Summary
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263) Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture
- InfiniBand drivers
- Network drivers
- TCM subsystem
- exFAT file system
- Network file system (NFS) client
- Network file system (NFS) server daemon
- B.A.T.M.A.N. meshing protocol
- IPv4 networking
- IPv6 networking
- Netfilter
- RDS protocol; (CVE-2026-53186, CVE-2026-53216, CVE-2026-53221, CVE-2026-53354, CVE-2026-53355, CVE-2026-53398, CVE-2026-63800, CVE-2026-63808, CVE-2026-63887, CVE-2026-63888, CVE-2026-63912, CVE-2026-63922, CVE-2026-63924, CVE-2026-63984, CVE-2026-63992, CVE-2026-63993, CVE-2026-63994, CVE-2026-64007, CVE-2026-64091)
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
This update corrects flaws in the following subsystems:
- ARM64 architecture
- InfiniBand drivers
- Network drivers
- TCM subsystem
- exFAT file system
- Network file system (NFS) client
- Network file system (NFS) server daemon
- B.A.T.M.A.N.
CVEs in this advisory 20
Updates
- Published by Ubuntu
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.