StackPatch is liveSee product

Back to CVE digest
CVE-2025-54518 · cross-distro fix matrix

CVE-2025-54518: It was discovered that some AMD Zen 2 processors did not properly isolate

Affects 1 Linux release across 50 (distro × package) combinations. First disclosed: 2026-05-15.

Fix per ecosystem

Each block below is a distro release where CVE-2025-54518 has a known fix. Run the listed command on that distro to remediate.

Ubuntu resolute

Source: Ubuntu USN

  • linux-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws
  • linux-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-raspi
  • linux-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws-64k
  • linux-aws-64k-7.0→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws-64k-7.0
  • linux-aws-7.0→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws-7.0
  • linux-aws-cloud-tools-7.0.0-1009→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws-cloud-tools-7.0.0-1009
  • linux-aws-headers-7.0.0-1009→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws-headers-7.0.0-1009
  • linux-aws-tools-7.0.0-1009→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-aws-tools-7.0.0-1009
  • linux-buildinfo-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1009-aws
  • linux-buildinfo-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1009-aws-64k
  • linux-buildinfo-7.0.0-1015-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1015-raspi
  • linux-buildinfo-7.0.0-1015-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-buildinfo-7.0.0-1015-raspi-realtime
  • linux-cloud-tools-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-cloud-tools-7.0.0-1009-aws
  • linux-cloud-tools-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-cloud-tools-7.0.0-1009-aws-64k
  • linux-headers-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1009-aws
  • linux-headers-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1009-aws-64k
  • linux-headers-7.0.0-1015-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1015-raspi
  • linux-headers-7.0.0-1015-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-7.0.0-1015-raspi-realtime
  • linux-headers-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-aws
  • linux-headers-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-aws-64k
  • linux-headers-aws-64k-7.0→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-aws-64k-7.0
  • linux-headers-aws-7.0→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-aws-7.0
  • linux-headers-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-raspi
  • linux-headers-raspi-7.0→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-raspi-7.0
  • linux-headers-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime
  • linux-headers-raspi-realtime-7.0→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime-7.0
  • linux-image-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-7.0.0-1009-aws
  • linux-image-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-7.0.0-1009-aws-64k
  • linux-image-7.0.0-1015-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-7.0.0-1015-raspi
  • linux-image-7.0.0-1015-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-7.0.0-1015-raspi-realtime
  • linux-image-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-aws
  • linux-image-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-aws-64k
  • linux-image-aws-64k-7.0→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-aws-64k-7.0
  • linux-image-aws-7.0→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-aws-7.0
  • linux-image-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-raspi
  • linux-image-raspi-7.0→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-raspi-7.0
  • linux-image-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-raspi-realtime
  • linux-image-raspi-realtime-7.0→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-raspi-realtime-7.0
  • linux-image-uc-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-uc-7.0.0-1009-aws
  • linux-image-uc-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-uc-7.0.0-1009-aws-64k
  • linux-image-unsigned-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-unsigned-7.0.0-1009-aws
  • linux-image-unsigned-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-image-unsigned-7.0.0-1009-aws-64k
  • linux-modules-7.0.0-1009-aws→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1009-aws
  • linux-modules-7.0.0-1009-aws-64k→ fixed in7.0.0-1009.9USN-8618-1
    sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1009-aws-64k
  • linux-modules-7.0.0-1015-raspi→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1015-raspi
  • linux-modules-7.0.0-1015-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-modules-7.0.0-1015-raspi-realtime
  • linux-raspi-7.0→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-raspi-7.0
  • linux-raspi-headers-7.0.0-1015→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-raspi-headers-7.0.0-1015
  • linux-raspi-realtime→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-raspi-realtime
  • linux-raspi-realtime-7.0→ fixed in7.0.0-1015.15USN-8618-1
    sudo apt-get install --only-upgrade -y linux-raspi-realtime-7.0
Are YOU affected by CVE-2025-54518?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash
Form-based quickscan View on NVD
Continuous monitoring beats manual checking

CVE-2025-54518dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. From $9/mo, 14-day free trial, cancel anytime.

See StackPatch (from $9/mo)