It was discovered that some Arm processors could complete a broadcast
translation lookaside buffer (TLB) invalidation before memory writes made
through the invalidated translation were globally observed. A local
attacker could possibly use this to write to memory after permission to do
so had been revoked, bypassing memory protections or escalating privileges.
(CVE-2025-10263)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- ARM32 architecture;
- MIPS architecture;
- PowerPC architecture;
- x86 architecture;
- Intel NPU Driver;
- Compute Acceleration Framework;
- Auxiliary display drivers;
- Drivers core;
- Compressed RAM block device driver;
- Bluetooth drivers;
- Arm Firmware Framework for ARMv8-A(FFA);
- EFI core;
- GPIO subsystem;
- GPU drivers;
- HID subsystem;
- Hardware monitoring drivers;
- I2C subsystem;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Input Device (Mouse) drivers;
- Multiple devices driver;
- Media drivers;
- Fastrpc Driver;
- Ethernet bonding driver;
- Network drivers;
- Mellanox network drivers;
- Microsoft Azure Network Adapter (MANA) driver;
- Texas Instruments network drivers;
- NVMEM (Non Volatile Memory) drivers;
- Parport drivers;
- SCSI subsystem;
- SLIMbus drivers;
- NVIDIA Tegra SoC drivers;
- SPI subsystem;
- TCM subsystem;
- Trusted Execution Environment drivers;
- Thunderbolt and USB4 drivers;
- TTY drivers;
- USB Device Class drivers;
- DesignWare USB2 driver;
- USB Gadget drivers;
- USB Dual Role (OTG-ready) Controller drivers;
- USB Serial drivers;
- USB Type-C support driver;
- USB Type-C Port Controller Manager driver;
- USB Type-C Connector System Software Interface driver;
- USB over IP driver;
- Framebuffer layer;
- Ext4 file system;
- FUSE...