A security notice published on September 30, 2026 reports flaws in the Linux kernel and Arm processors. The update fixes issues that could allow memory protections to be bypassed or systems to be compromised.
Notice USN-8817-3, published on September 30, 2026, describes an issue affecting some Arm processors: a broadcast TLB invalidation could complete before writes made through the invalidated mapping were observed globally. A local attacker could therefore write to memory after permission had been revoked, bypassing protections or escalating privileges (CVE-2025-10263).
The notice also reports Linux kernel flaws that could compromise a system and says the update fixes them in the ARM64, InfiniBand, network driver, TCM, B.A.T.M.A.N., HSR, IPv4, IPv6, Netfilter, and RDS subsystems. To check the details and verify the CVE identifiers, consult the original Ubuntu security notice and confirm which packages and instructions apply to your installation before updating.