Ubuntu Patches Critical Kernel Flaws Affecting Cloud and Desktop Systems
New vulnerabilities in the Linux kernel impact multiple architectures and expose systems to privilege escalation and data leaks.
TL;DR
- NTFS filesystem flaw allows kernel memory exposure via malicious images.
- AMD processor bugs enable data leakage and privilege escalation.
- Kernel updates address flaws across ARM, x86, and other major architectures.
- Affects Ubuntu Azure FIPS systems and general Linux environments.
- Immediate patching recommended to prevent exploitation.
Ubuntu has released security updates addressing high-severity vulnerabilities in the Linux kernel, including issues that could lead to sensitive data exposure and privilege escalation. These flaws affect a wide range of systems, from cloud infrastructures such as Azure FIPS to desktop environments relying on NTFS compatibility.
The most notable vulnerability involves improper validation in the NTFS file system implementation, which could allow attackers to craft malicious images that leak kernel memory. In addition, newly disclosed hardware-level flaws in certain AMD processors pose risks of data leakage and unauthorized privilege elevation.
Software Vulnerabilities in Kernel Subsystems
- The NTFS file system implementation suffers from an out-of-bounds read due to insufficient filename length checks.
- Attackers can exploit this by mounting a crafted NTFS image to access sensitive kernel memory.
- Multiple architectural components are affected, including ARM32, ARM64, x86, and others.
Hardware-Level Risks From AMD Processors
- Some AMD processors fail to clear data in the floating point divider during speculative execution, risking information disclosure.
- Zen 2-based CPUs contain a resource isolation flaw in the operation cache that may allow lower-privilege users to corrupt higher-level instructions.
- These hardware-related issues expand the attack surface beyond traditional software vulnerabilities.
Sources
Sources
Security email updates
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.