Ubuntu Linux Kernel Update Patches Critical GCP Vulnerabilities
Ubuntu addresses multiple high-severity flaws in its Linux kernel for Google Cloud Platform, including NTFS parsing and CPU-level data leaks.
TL;DR
- Fixes CVE-2023-45896: Out-of-bounds read via malicious NTFS image
- Addresses CVE-2025-54505: Data leakage on AMD CPUs during speculative execution
- Resolves CVE-2025-54518: Privilege escalation risk on AMD Zen 2 processors
- Covers security issues across ARM, x86, MIPS, PowerPC, S390 architectures
- Impacts Google Cloud Platform (GCP) instances running Ubuntu
Ubuntu has released security updates for its Linux kernel tailored for Google Cloud Platform (GCP), addressing several vulnerabilities that could lead to information exposure or privilege escalation. These flaws span from filesystem parsing errors to hardware-level data isolation issues on certain AMD processors.
The most notable vulnerability involves improper validation of NTFS filenames, which could allow attackers to craft images that leak kernel memory when mounted. In addition, specific AMD processor behaviors related to speculative execution and cache isolation have been found exploitable by local attackers.
Filesystem and Memory Exposure Risk
- Maxim Suhanov identified CVE-2023-45896, an out-of-bounds read in the NTFS filesystem implementation
- Attackers can construct malicious NTFS images that expose sensitive kernel memory upon mount operations
- This flaw affects systems where untrusted NTFS volumes might be mounted, including virtualized environments
AMD Processor Security Flaws
- CVE-2025-54505 impacts some AMD processors failing to clear data in floating point units during speculative execution
- CVE-2025-54518 targets AMD Zen 2 chips with insufficient resource isolation in operation caches
- Both CPU-related flaws enable local attackers to access privileged information or escalate privileges
- Organizations using affected AMD hardware should apply microcode updates alongside OS patches
Architecture-Wide Kernel Fixes
- The update resolves issues spanning major CPU architectures: ARM32, ARM64, MIPS, PowerPC, S390, and x86
- Also includes fixes in the block layer subsystem responsible for storage device interactions
- Administrators managing Ubuntu-based GCP infrastructure must prioritize patch deployment
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.