USN-8664-1: Linux kernel (NVIDIA BaseOS) vulnerabilities
This Ubuntu Security Notice details a critical vulnerability affecting the Linux kernel within the NVIDIA BaseOS environment. The issue stems from improper resource isolation in AMD Zen 2 processors, potentially allowing an attacker to escalate privileges. Numerous subsystems across various architectures – including x86, ARM, MIPS, PowerPC, RISC-V, and many others – are affected. Companies utilizing NVIDIA BaseOS should immediately review their systems for potential compromise and apply the provided update. While a specific CVE number (CVE-2025-54518) is identified, the breadth of impacted components necessitates careful assessment.
The Ubuntu Security Notice highlights a significant vulnerability in the Linux kernel used within NVIDIA BaseOS environments. This vulnerability, stemming from improper resource isolation in AMD Zen 2 processors, could allow an attacker to escalate their privileges on affected systems. The update addresses flaws across a vast range of subsystems including drivers for various architectures (x86, ARM, etc.), file systems, and networking components. Practical Relevance: This is relevant for German KMUs that utilize NVIDIA BaseOS, particularly those running server infrastructure or embedded systems based on this kernel version. What to do: Companies should immediately review their systems using NVIDIA BaseOS to determine if they are affected. The update provided by Ubuntu Security Notices needs to be applied promptly. Further Investigation: Due to the extensive list of impacted subsystems, a thorough security audit is recommended to identify and mitigate potential risks.
Stumptner IT unterstützt Unternehmen bei akuten Problemen und dauerhafter IT-Betreuung.