USN-8726-2: Linux kernel (Raspberry Pi) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-7.0.0-1019-raspito a version that resolves this vulnerability.Fixed in 7.0.0-1019.19 - Upgrade
Upgrade
ubuntu/linux-image-7.0.0-1019-raspi-realtimeto a version that resolves this vulnerability.Fixed in 7.0.0-1019.19 - Upgrade
Upgrade
ubuntu/linux-image-raspito a version that resolves this vulnerability.Fixed in 7.0.0-1019.19 - Upgrade
Upgrade
ubuntu/linux-image-raspi-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1019.19 - Upgrade
Upgrade
ubuntu/linux-image-raspi-realtimeto a version that resolves this vulnerability.Fixed in 7.0.0-1019.19 - Upgrade
Upgrade
ubuntu/linux-image-raspi-realtime-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1019.19 - Upgrade
Upgrade
Linux kernel (Raspberry Pi)to a version that resolves this vulnerability.Patch USN-8726-2
Event History
Frequently Asked Questions
Who could exploit the specifically described Arm processor issue?
The described issue requires a local attacker. It applies to some Arm processors and could allow writes to memory after permissions were revoked, potentially bypassing memory protections or escalating privileges.
Which Ubuntu kernel packages are covered by this notice?
The notice lists linux-image-7.0.0-1019-raspi, linux-image-7.0.0-1019-raspi-realtime, linux-image-raspi, linux-image-raspi-7.0, linux-image-raspi-realtime, and linux-image-raspi-realtime-7.0.