USN-8726-3: Linux kernel (IBM) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-7.0.0-1013-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-ibm-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
Linux kernel (IBM)to a version that resolves this vulnerability.Patch USN-8726-3
Event History
Frequently Asked Questions
Which systems are specifically exposed to the described TLB invalidation issue?
The issue applies to systems using affected Arm processors. The advisory concerns Ubuntu Linux kernel packages for the IBM kernel flavour, including linux-image-7.0.0-1013-ibm and related IBM meta packages.
What access would an attacker need to exploit the described flaw?
The described attack requires local access. A local attacker might write to memory after its permissions were revoked, potentially bypassing memory protections or escalating privileges.
How can I identify the updated IBM kernel package release?
The referenced Ubuntu source package releases are linux-signed-ibm version 7.0.0-1013.13 and linux-meta-ibm version 7.0.0-1013.13.