Loading story…
Intel published security advisories on March 10, 2026 covering vulnerabilities across multiple products, prompting the Canadian Centre for Cyber Security to recommend reviewing Intel’s guidance and applying mitigations and updates. In parallel, F5 issued a product security advisory for CVE-2025-20109, an Intel CPU vulnerability, indicating potential downstream impact to vendors whose appliances or platforms rely on affected Intel processors.
Separate from the Intel CPU issue, the Canadian Centre for Cyber Security also relayed routine upstream patch activity from Ubuntu and Red Hat between March 2–8, 2026, including Linux kernel security updates across multiple supported releases and platforms. These Linux distribution advisories are not specific to CVE-2025-20109 and should be tracked as independent patching items for organizations running affected Ubuntu LTS versions and Red Hat Enterprise Linux variants.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On 2026-03-11, F5 published product advisory K000160295 regarding the Intel CPU vulnerability CVE-2025-20109, indicating vendor awareness and guidance for affected F5 contexts.
On 2026-03-11, the Canadian Centre for Cyber Security published advisory AV26-219 urging users and administrators to review Intel's security advisories, apply mitigations, and install required updates.
On 2026-03-10, Intel published security advisories addressing vulnerabilities affecting multiple Intel products, including the CPU vulnerability tracked as CVE-2025-20109.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Canadian Centre for Cyber Security issued multiple advisories urging organizations to apply vendor patches released between **February 16–22, 2026**, including updates addressing **Linux kernel vulnerabilities** impacting **Ubuntu** (16.04 LTS through 25.10) and **Red Hat** platforms (including *RHEL* and related offerings). The advisories emphasize routine but potentially high-impact exposure from unpatched kernel flaws across widely deployed enterprise and server environments, and direct administrators to review upstream vendor notices and deploy the corresponding updates. Separate Cyber Centre advisories also flagged patch requirements outside the Linux kernel: Microsoft released an update for **Microsoft Edge Stable** to remediate vulnerabilities in versions prior to `145.0.3800.70`, IBM published security advisories covering multiple products (including *Aspera Enterprise WebApps*, *Cloud Pak System*, *Storage Defender*, and others), and CISA issued ICS advisories for vulnerabilities across several industrial and IoT/OT products (including **Delta Electronics**, **GE Vernova**, **Honeywell CCTV**, **Siemens Simcenter**, and others) with recommended mitigations and updates where available. A Linux 7.0 release-candidate feature article is not a security advisory and does not materially relate to the patch/vulnerability notices in the other items.
Jun 29, 2026
F5 published product advisories addressing two Intel flaws affecting underlying platform components used in its ecosystem: **CVE-2025-24303**, an Intel 800 Series Ethernet vulnerability, and **CVE-2025-20027**, an Intel UEFI vulnerability. The notices indicate vendor tracking and customer guidance for issues tied to both network interface hardware and firmware layers, expanding the scope of exposure beyond application software into foundational infrastructure components. The paired advisories highlight risk across separate parts of the technology stack, with one issue involving Intel's 800 Series Ethernet technology and the other affecting Intel's UEFI environment. Organizations using F5 products are likely to review affected versions, platform dependencies, and available remediation or mitigation guidance in the vendor bulletins to determine whether appliance, firmware, or hardware-related updates are required.
Jun 29, 2026
A use-after-free vulnerability identified as CVE-2025-21887 was discovered in the Linux kernel's OverlayFS implementation, specifically involving improper handling of the `dput()` operation in `ovl_dentry_update_reval`. This flaw could potentially allow local attackers to exploit the kernel, but F5 has confirmed that none of its products are affected by this vulnerability. The issue has been resolved in the upstream Linux kernel, and vendors have begun evaluating and addressing the impact on their respective products. Red Hat and Ubuntu have both issued security advisories urging users and administrators to apply updates to address vulnerabilities in the Linux kernel across multiple supported versions and platforms. These advisories are part of a coordinated response to recent kernel vulnerabilities, including CVE-2025-21887, ensuring that enterprise and cloud environments remain protected. Organizations are encouraged to review vendor-specific guidance and implement the recommended patches to mitigate potential risks associated with this kernel flaw.
Jun 29, 2026