← Back to blog

Critical Linux Kernel Flaws Expose Systems to Local Attacks

Multiple vulnerabilities in the Linux kernel affect various architectures and subsystems, potentially allowing local attackers to compromise system integrity or cause denial of service.

TL;DR

  • CVE-2023-20585 affects AMD processors with improper RMP checks, risking SEV-SNP guest memory integrity.
  • CVE-2026-81010 impacts the io_uring subsystem, leading to possible denial of service via wrong task context execution.
  • Vulnerabilities span across multiple architectures including ARM, x86, MIPS, PowerPC, and RISC-V.
  • A wide range of kernel subsystems are impacted, such as drivers, cryptographic APIs, and hardware interfaces.
  • Ubuntu has released updates (USN-9002-1 and USN-9003-1) addressing these issues.

Recent security advisories from Ubuntu reveal critical vulnerabilities within the Linux kernel that could be exploited by local attackers to undermine system stability or confidentiality. These flaws span numerous hardware architectures and kernel subsystems, highlighting the broad impact of these security gaps.

Two specific vulnerabilities stand out: CVE-2023-20585, which affects AMD processors during IOMMU buffer access, and CVE-2026-81010, related to improper handling in the io_uring subsystem. Both pose significant risks to system integrity and availability, especially in virtualized environments.

Affected Architectures and Subsystems

  • The vulnerabilities span across major CPU architectures including ARM32, ARM64, x86, MIPS, OpenRISC, PowerPC, RISC-V, and S390.
  • Impacted subsystems include cryptographic APIs, device drivers (Bluetooth, GPU, HID), storage interfaces (RBD, DRBD), and hardware communication layers like I2C and I3C.
  • Both advisories highlight weaknesses in low-level components such as ACPI drivers, CPU idle frameworks, and auxiliary display systems.

Security Impact and Mitigation

  • CVE-2023-20585 allows a hypervisor-level attacker to corrupt SEV-SNP guest memory through flawed RMP validation on AMD systems.
  • CVE-2026-81010 can lead to system crashes due to incorrect task context handling in the io_uring subsystem under certain wait operations.
  • Ubuntu has issued patches in USN-9002-1 and USN-9003-1 to address all reported flaws across affected platforms.
  • Organizations using custom kernels or embedded Linux distributions should review their exposure and apply upstream fixes accordingly.

Sources

Sources

Security email updates

One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.