Ubuntu USN-8603-1: Fix for AMD Speculative Execution & LPE CVEs in Linux Kernel

Vulnerability Overview Vulnerability ID: USN-8603-1 Publication Date: July 24, 2026 Description: - Certain AMD processors fail to properly flush data from the floating-point division unit during speculative execution, potentially leading to the disclosure of sensitive information (CVE-2025-54505). - Certain AMD Zen 2 processors fail to properly isolate shared resources in the operating cache, potentially leading to privilege escalation (CVE-2025-54518). - Multiple security issues were discovered in the Linux kernel, which attackers could exploit to compromise the system. Affected Systems Affected Systems: - Linux kernel (Microsoft Azure Cloud systems and Microsoft Azure CVM Cloud systems) - The following subsystems: - x86 platform drivers - PSP security protocol - ARM32 architecture - ARM64 architecture - MIPS architecture - PowerPC architecture - RISC-V architecture Remediation Update Instructions: - A system restart is required after the standard system update to apply all necessary changes. - Due to unavoidable ABI changes, the kernel update has been assigned a new version number, requiring all third-party kernel modules to be recompiled and reinstalled. - Standard system upgrades will perform this automatically unless the standard kernel meta-packages (such as , , , ) are manually uninstalled. Fixed Versions: - Ubuntu 26.04 LTS: - - 7.0.0-1009.9 - - 7.0.0-1010.10 - - 7.0.0-1010.10 - - 7.0.0-1010.10 - - 7.0.0-1009.9 - - 7.0.0-1009.9 References CVE-2026-64186 CVE-2026-64185 CVE-2026-64184 CVE-2026-64183 CVE-2026-64182 CVE-2026-64181 CVE-2026-64180 CVE-2026-64179 CVE-2026-64178 CVE-2026-64177 Related Notices USN-8597-1 USN-8596-1 USN-8595-1 USN-8594-1 USN-8593-1 USN-8576-1 USN-8576-2 USN-8575-1 USN-8575-2 USN-8574-1 Risk Mitigation Ubuntu Pro provides ten years of security coverage for packages in over 25,000 main and universe repositories, free for up to five machines. Contact Information For any further questions, please contact the team members. Footer Copyright © 2026 Canonical Ltd. Ubuntu and Canonical are registered trademarks of Canonical Ltd. Links to legal statements, data privacy, tracker settings, reporting website errors, etc.

Goal Reached Thanks to every supporter — we hit 100%!

Ubuntu USN-8603-1: Fix for AMD Speculative Execution & LPE CVEs in Linux Kernel