Skip to main content
VulnerabilityPublished 07/24/2026Updated 08/24/2026

linux-azure-fde-6.8 vulnerabilities (CVE-2025-21709)

Affects linux-azure-fde-6.8Source GCVE Database

0

Mentioned vulnerabilities

Fixed in 6.8.0-1062.69~22.04.1 : patch linux-azure-fde-6.8 soon.

Data as of 08/24/2026, 13:51:16 UTC

Severity
High

Rated by Threat Radar

Patch
Available – fixed in 6.8.0-1062.69~22.04.1

What to do

Affected software

ProductAffectedFixed in
Ubuntu:22.04:LTSlinux-azure-fde-6.8pkg:deb/ubuntu/linux-azure-fde-6.8@6.8.0-1062.69~22.04.1?arch=source&distro=jammyOther threatsAffected
  • <6.8.0-1062.69~22.04.1
  • =6.8.0-1041.48~22.04.1
  • =6.8.0-1042.49~22.04.1
  • =6.8.0-1044.51~22.04.1
  • =6.8.0-1046.53~22.04.1
  • =6.8.0-1053.60~22.04.1
  • =6.8.0-1058.65~22.04.1
  • =6.8.0-1061.68~22.04.1
Fixed in
  • 6.8.0-1062.69~22.04.1

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available for linux-azure-fde-6.8 addressing these vulnerabilities. Users should apply the update to version 6.8.0-1062.69~22.04.1 or later to remediate these issues. No additional vendor advisories indicate that no action is required or that the issues are already mitigated, so timely patching is recommended.

Description

It was discovered that some AMD processors did not properly clear data in the floating point divider unit during speculative execution. A local attacker could use this to expose sensitive information. (CVE-2025-54505) It was discovered that some AMD Zen 2 processors did not properly isolate shared resources in the operation cache. A local attacker could possibly use this issue to corrupt instructions executed at a higher privilege level, resulting in privilege escalation. (CVE-2025-54518) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED instruction causing loss of confidentiality and integrity. (CVE-2025-62626) Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - MIPS architecture; - PowerPC architecture; - RISC-V architecture; - S390 architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - Compute Acceleration Framework; - ACPI drivers; - Serial ATA and Parallel ATA drivers; - ATM drivers; - Drivers core; - Power management core; - DRBD Distributed Replicated Block Device drivers; - Rados block device (RBD) driver; - RNBD block device driver; - Ublk userspace block driver; - Compressed RAM block device driver; - Bluetooth drivers; - Bus devices; - Character device driver; - TPM device driver; - Clock framework and drivers; - Clocksource drivers; - Data acquisition framework and drivers; - Counter interface drivers; - CPU frequency scaling framework; - CPU idle management framework; - Hardware crypto device drivers; - CXL (Compute Express Link) drivers; - DMA engine subsystem; - EDAC drivers; - EFI core; - GPIO subsystem; - GPU drivers; - Greybus drivers; - HID subsystem; - Hardware monitoring drivers; - I2C subsystem; - IIO subsystem; - IIO ADC drivers; - InfiniBand drivers; - Input Device (Miscellaneous) drivers; - IOMMU subsystem; - IRQ chip drivers; - LED subsystem; - Mailbox framework; - Multiple devices driver; - Media drivers; - MediaTek SMI driver; - NVIDIA Tegra memory controller driver; - Multifunction device drivers; - Broadcom VK accelerator driver; - Fastrpc Driver; - IBM Advanced System Management driver; - MMC subsystem; - MOST (Media Oriented Systems Transport) drivers; - MTD block device drivers; - Network drivers; - Ethernet bonding driver; - Mellanox network drivers; - Microsoft Azure Network Adapter (MANA) driver; - STMicroelectronics network drivers; - Ethernet team driver; - MediaTek network drivers; - Near Field Communication (NFC) drivers; - NTB driver; - NVDIMM (Non-Volatile Memory Device) drivers; - NVME drivers; - Device tree and open firmware driver; - PCI subsystem; - Performance monitor drivers; - Pin controllers subsystem; - x86 platform drivers; - Broadcom BCM2835 power domain driver; - Generic PM domains; - i.MX PM domains; - Power supply drivers; - RapidIO drivers; - RAS (Reliability, Availability, Serviceability) subsystem; - Remote Processor subsystem; - RPMSG subsystem; - S/390 drivers; - SCSI subsystem; - SLIMbus drivers; - Freescale SoC drivers; - MediaTek SoC drivers; - Microchip PolarFire SoC system controller driver; - Texas Instruments SoC drivers; - SPI subsystem; - Greybus lights staging drivers; - Media staging drivers; - Realtek RTL8723BS SDIO drivers; - SM750 framebuffer staging driver; - TCM subsystem; - Thermal drivers; - TTY drivers; - UFS subsystem; - Cadence USB3 driver; - ChipIdea USB driver; - USB Device Class drivers; - ULPI bus; - USB core drivers; - DesignWare USB2 driver; - DesignWare USB3 driver; - USB Gadget drivers; - USB Host Controller drivers; - Mustek MDC800 USB digital camera driver; - USB YUREX driver; - Renesas USBHS Controller drivers; - USB Type-C Connector System Software Interface driver; - USB over IP driver; - vDPA drivers; - VFIO drivers; - Virtio Host (VHOST) subsystem; - Framebuffer layer; - TSM TDX Guest driver; - Xen hypervisor drivers; - File systems infrastructure; - BTRFS file system; - Ceph distributed file system; - EROFS file system; - Ext4 file system; - F2FS file system; - FAT file system; - FUSE (File system in Userspace); - GFS2 file system; - HFS+ file system; - Journaling layer for block devices (JBD2); - JFS file system; - Network file systems library; - Network file system (NFS) server daemon; - NILFS2 file system; - File system notification infrastructure; - NTFS3 file system; - OCFS2 file system; - Proc file system; - Pstore file system;

Impact

Local attackers could exploit these vulnerabilities to expose sensitive information, escalate privileges, corrupt instructions executed at higher privilege levels, or influence entropy values compromising confidentiality and integrity. The broad range of affected kernel subsystems and architectures increases the potential attack surface, potentially allowing system compromise if exploited.

Summary

This security advisory covers several vulnerabilities in the linux-azure-fde-6.8 kernel version prior to 6.8.0-1062.69~22.04.1. Notably, AMD processors have multiple flaws: some do not properly clear data in the floating point divider unit during speculative execution (CVE-2025-54505), some Zen 2 processors fail to isolate shared resources in the operation cache potentially allowing privilege escalation (CVE-2025-54518), and some Zen 5 processors mishandle entropy in the RDSEED instruction, risking confidentiality and integrity (CVE-2025-62626). Beyond CPU-specific issues, numerous Linux kernel subsystems and drivers across many architectures (ARM64, MIPS, PowerPC, RISC-V, S390, x86) and components (block devices, cryptographic API, network drivers, filesystems, USB drivers, and more) contain security flaws that could be exploited by local attackers to compromise the system. The update corrects these flaws comprehensively.

References

Community reviews

Loading reviews…