USN-8727-1: Linux kernel (OEM) vulnerabilities
It was discovered that some Arm processors could complete a broadcast translation lookaside buffer (TLB) invalidation before memory writes made through the invalidated translation were globally observed. A local attacker could possibly use this to write to memory after permission to do so had been revoked, bypassing memory protections or escalating privileges. (CVE-2025-10263) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
ubuntu/linux-image-7.0.0-1013-oemto a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-oem-26.04to a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-oem-26.04ato a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-oem-26.04bto a version that resolves this vulnerability.Fixed in 7.0.0-1013.13 - Upgrade
Upgrade
ubuntu/linux-image-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1013.13
Event History
Frequently Asked Questions
What access does an attacker need to exploit the Arm TLB invalidation issue?
The described attack requires local access. It affects some Arm processors and could allow a local attacker to continue writing memory after the relevant permission has been revoked, potentially bypassing memory protections or escalating privileges.
Which kernel packages are included in this update?
The update covers ubuntu/linux-image-7.0.0-1013-oem, ubuntu/linux-image-oem-26.04, ubuntu/linux-image-oem-26.04a, and ubuntu/linux-image-oem-7.0. Systems using these OEM kernel packages should apply the update.
Does the notice establish that the other corrected kernel flaws are remotely exploitable?
No. The notice states only that an attacker could possibly use the other issues to compromise the system; it does not provide attack-vector or configuration details for those flaws.