CVE-2025-54505 · cross-distro fix matrix

CVE-2025-54505: It was discovered that some AMD processors did not properly clear data in

Affects 2 Linux releases across 50 (distro × package) combinations. First disclosed: 2026-04-27.

Fix per ecosystem

Each block below is a distro release where CVE-2025-54505 has a known fix. Run the listed command on that distro to remediate.

Ubuntu resolute

Source: Ubuntu USN

linux-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-raspi

linux-buildinfo-7.0.0-1014-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1014-raspi

linux-buildinfo-7.0.0-1014-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1014-raspi-realtime

linux-headers-7.0.0-1014-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1014-raspi

linux-headers-7.0.0-1014-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1014-raspi-realtime

linux-headers-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-headers-raspi

linux-headers-raspi-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-headers-raspi-7.0

linux-headers-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime

linux-headers-raspi-realtime-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime-7.0

linux-image-7.0.0-1014-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-image-7.0.0-1014-raspi

linux-image-7.0.0-1014-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-image-7.0.0-1014-raspi-realtime

linux-image-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-image-raspi

linux-image-raspi-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-image-raspi-7.0

linux-image-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-image-raspi-realtime

linux-image-raspi-realtime-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-image-raspi-realtime-7.0

linux-modules-7.0.0-1014-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1014-raspi

linux-modules-7.0.0-1014-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1014-raspi-realtime

linux-raspi-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-raspi-7.0

linux-raspi-headers-7.0.0-1014→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-raspi-headers-7.0.0-1014

linux-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-raspi-realtime

linux-raspi-realtime-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-raspi-realtime-7.0

linux-raspi-tools-7.0.0-1014→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-raspi-tools-7.0.0-1014

linux-tools-7.0.0-1014-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-tools-7.0.0-1014-raspi

linux-tools-7.0.0-1014-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-tools-7.0.0-1014-raspi-realtime

linux-tools-raspi→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-tools-raspi

linux-tools-raspi-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-tools-raspi-7.0

linux-tools-raspi-realtime→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-tools-raspi-realtime

linux-tools-raspi-realtime-7.0→ fixed in7.0.0-1014.14USN-8488-2

sudo apt-get install --only-upgrade -y linux-tools-raspi-realtime-7.0

Ubuntu jammy

Source: Ubuntu USN

linux-azure-6.8→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-azure-6.8
```
linux-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-azure
```
linux-azure-6.8-cloud-tools-6.8.0-1063→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-azure-6.8-cloud-tools-6.8.0-1063
```
linux-azure-6.8-headers-6.8.0-1063→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-azure-6.8-headers-6.8.0-1063
```
linux-azure-6.8-tools-6.8.0-1063→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-azure-6.8-tools-6.8.0-1063
```
linux-azure-edge→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-azure-edge
```
linux-buildinfo-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1063-azure
```
linux-cloud-tools-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-6.8.0-1063-azure
```
linux-cloud-tools-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-azure
```
linux-cloud-tools-azure-6.8→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-azure-6.8
```
linux-cloud-tools-azure-edge→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-azure-edge
```
linux-headers-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-headers-6.8.0-1063-azure
```
linux-headers-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-headers-azure
```
linux-headers-azure-6.8→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-headers-azure-6.8
```
linux-headers-azure-edge→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-headers-azure-edge
```
linux-image-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-image-6.8.0-1063-azure
```
linux-image-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-image-azure
```
linux-image-azure-6.8→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-image-azure-6.8
```
linux-image-azure-edge→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-image-azure-edge
```
linux-image-unsigned-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-image-unsigned-6.8.0-1063-azure
```
linux-modules-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-modules-6.8.0-1063-azure
```
linux-modules-extra-6.8.0-1063-azure→ fixed in6.8.0-1063.71~22.04.1USN-8606-1
```
sudo apt-get install --only-upgrade -y linux-modules-extra-6.8.0-1063-azure
```

Are YOU affected by CVE-2025-54505?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan View on NVD

Continuous monitoring beats manual checking

CVE-2025-54505dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. From $9/mo, 14-day free trial, cancel anytime.

See StackPatch (from $9/mo)