Skip to main content

Linux CVE-2025-38209

| EUVDEUVD-2025-20047 HIGH
Use After Free (CWE-416)
2025-07-04 416baaa9-dc9f-4396-8d5f-8c081fb06d67
7.8
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM
qualitative
SUSE
HIGH
qualitative
Red Hat
6.7 MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
EUVD ID Assigned
Mar 16, 2026 - 02:42 euvd
EUVD-2025-20047
Analysis Generated
Mar 16, 2026 - 02:42 vuln.today
Patch released
Mar 16, 2026 - 02:42 nvd
Patch available
CVE Published
Jul 04, 2025 - 14:15 nvd
HIGH 7.8

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: remove tag set when second admin queue config fails

Commit 104d0e2f6222 ("nvme-fabrics: reset admin connection for secure concatenation") modified nvme_tcp_setup_ctrl() to call nvme_tcp_configure_admin_queue() twice. The first call prepares for DH-CHAP negotitation, and the second call is required for secure concatenation. However, this change triggered BUG KASAN slab-use-after- free in blk_mq_queue_tag_busy_iter(). This BUG can be recreated by repeating the blktests test case nvme/063 a few times [1].

When the BUG happens, nvme_tcp_create_ctrl() fails in the call chain below:

nvme_tcp_create_ctrl() nvme_tcp_alloc_ctrl() new=true ... Alloc nvme_tcp_ctrl and admin_tag_set nvme_tcp_setup_ctrl() new=true nvme_tcp_configure_admin_queue() new=true ... Succeed nvme_alloc_admin_tag_set() ... Alloc the tag set for admin_tag_set nvme_stop_keep_alive() nvme_tcp_teardown_admin_queue() remove=false nvme_tcp_configure_admin_queue() new=false nvme_tcp_alloc_admin_queue() ... Fail, but do not call nvme_remove_admin_tag_set() nvme_uninit_ctrl() nvme_put_ctrl() ... Free up the nvme_tcp_ctrl and admin_tag_set

The first call of nvme_tcp_configure_admin_queue() succeeds with new=true argument. The second call fails with new=false argument. This second call does not call nvme_remove_admin_tag_set() on failure, due to the new=false argument. Then the admin tag set is not removed. However, nvme_tcp_create_ctrl() assumes that nvme_tcp_setup_ctrl() would call nvme_remove_admin_tag_set(). Then it frees up struct nvme_tcp_ctrl which has admin_tag_set field. Later on, the timeout handler accesses the admin_tag_set field and causes the BUG KASAN slab-use-after-free.

To not leave the admin tag set, call nvme_remove_admin_tag_set() when the second nvme_tcp_configure_admin_queue() call fails. Do not return from nvme_tcp_setup_ctrl() on failure. Instead, jump to "destroy_admin" go-to label to call nvme_tcp_teardown_admin_queue() which calls nvme_remove_admin_tag_set().

Analysis

In the Linux kernel, the following vulnerability has been resolved:

nvme-tcp: remove tag set when second admin queue config fails

Commit 104d0e2f6222 ("nvme-fabrics: reset admin connection for secure concatenation") modified nvme_tcp_setup_ctrl() to call nvme_tcp_configure_admin_queue() twice. The first call prepares for DH-CHAP negotitation, and the second call is required for secure concatenation. However, this change triggered BUG KASAN slab-use-after- free in blk_mq_queue_tag_busy_iter(). This BUG can be recreated by repeating the blktests test case nvme/063 a few times [1].

When the BUG happens, nvme_tcp_create_ctrl() fails in the call chain below:

nvme_tcp_create_ctrl() nvme_tcp_alloc_ctrl() new=true ... Alloc nvme_tcp_ctrl and admin_tag_set nvme_tcp_setup_ctrl() new=true nvme_tcp_configure_admin_queue() new=true ... Succeed nvme_alloc_admin_tag_set() ... Alloc the tag set for admin_tag_set nvme_stop_keep_alive() nvme_tcp_teardown_admin_queue() remove=false nvme_tcp_configure_admin_queue() new=false nvme_tcp_alloc_admin_queue() ... Fail, but do not call nvme_remove_admin_tag_set() nvme_uninit_ctrl() nvme_put_ctrl() ... Free up the nvme_tcp_ctrl and admin_tag_set

The first call of nvme_tcp_configure_admin_queue() succeeds with new=true argument. The second call fails with new=false argument. This second call does not call nvme_remove_admin_tag_set() on failure, due to the new=false argument. Then the admin tag set is not removed. However, nvme_tcp_create_ctrl() assumes that nvme_tcp_setup_ctrl() would call nvme_remove_admin_tag_set(). Then it frees up struct nvme_tcp_ctrl which has admin_tag_set field. Later on, the timeout handler accesses the admin_tag_set field and causes the BUG KASAN slab-use-after-free.

To not leave the admin tag set, call nvme_remove_admin_tag_set() when the second nvme_tcp_configure_admin_queue() call fails. Do not return from nvme_tcp_setup_ctrl() on failure. Instead, jump to "destroy_admin" go-to label to call nvme_tcp_teardown_admin_queue() which calls nvme_remove_admin_tag_set().

Technical ContextAI

A use-after-free vulnerability occurs when a program continues to use a pointer after the referenced memory has been freed, leading to undefined behavior. This vulnerability is classified as Use After Free (CWE-416).

RemediationAI

A vendor patch is available — apply it immediately. Use memory-safe languages. Implement proper object lifecycle management. Use static and dynamic analysis tools to detect UAF patterns.

Vendor StatusVendor

Ubuntu

Priority: Medium
linux
Release Status Version
upstream not-affected debian: Vulnerable code not present
jammy not-affected 5.13.0-19.19
noble not-affected 6.5.0-9.9
oracular not-affected 6.8.0-31.31
plucky not-affected 6.11.0-8.8
bionic not-affected 4.13.0-16.19
focal not-affected 5.4.0-9.12
trusty not-affected 3.11.0-12.19
xenial not-affected 4.4.0-2.16
linux-hwe
Release Status Version
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
xenial not-affected 4.8.0-39.42~16.04.1
upstream released 6.16~rc1
trusty DNE -
focal DNE -
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-37.41~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-hwe-5.8
Release Status Version
focal ignored superseded by linux-hwe-5.11
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored superseded by linux-hwe-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored superseded by linux-hwe-5.15
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-33.34~20.04.1
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-38.38~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-hwe-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-hwe-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-hwe-edge
Release Status Version
xenial ignored superseded by linux-hwe
bionic ignored superseded by linux-hwe-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
xenial DNE -
bionic DNE -
focal DNE -
trusty not-affected 4.4.0-13.29~14.04.1
upstream released 6.16~rc1
linux-kvm
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 5.13.0-1004.4
xenial not-affected 4.4.0-1007.12
trusty DNE -
bionic not-affected 4.15.0-1002.2
focal not-affected 5.4.0-1004.4
upstream released 6.16~rc1
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored superseded by linux-aws-5.3
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored superseded by linux-aws-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-1020.20~18.04.2
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.8
Release Status Version
focal ignored superseded by linux-aws-5.11
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.11
Release Status Version
focal ignored superseded by linux-aws-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored superseded by linux-aws-5.15
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1015.19~20.04.1
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-1009.9~22.04.2
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
xenial not-affected 4.15.0-1031.33~16.04.1
upstream released 6.16~rc1
trusty DNE -
bionic DNE -
focal DNE -
linux-azure
Release Status Version
bionic ignored superseded by linux-azure-5.3
jammy not-affected 5.13.0-1006.7
noble not-affected 6.5.0-1007.7
oracular not-affected 6.8.0-1007.7
plucky not-affected 6.11.0-1004.4
xenial not-affected 4.11.0-1015.15
upstream released 6.16~rc1
focal not-affected 5.4.0-1006.6
trusty not-affected 4.15.0-1023.24~14.04.1
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 4.15.0-1082.92
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.3
Release Status Version
bionic ignored superseded by linux-azure-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-1022.22~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-azure-5.8
Release Status Version
focal ignored superseded by linux-azure-5.11
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.11
Release Status Version
focal ignored superseded by linux-azure-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored superseded by linux-azure-5.15
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1007.8~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-azure-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-azure-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-azure-fde
Release Status Version
focal ignored superseded by linux-azure-fde-5.15
oracular DNE -
noble not-affected 6.8.0-1041.48
jammy not-affected 5.15.0-1019.24.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
plucky not-affected 6.14.0-1012.12
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble not-affected 6.8.0-1013.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.4.0-1011.14
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-azure-edge
Release Status Version
bionic ignored superseded by linux-azure-5.3
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 4.15.0-1027.32
focal not-affected 5.4.0-1026.30
jammy not-affected 5.15.0-92.102+fips1
xenial not-affected 4.4.0-1003.3
trusty DNE -
upstream released 6.16~rc1
linux-aws-fips
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 4.15.0-2000.4
focal not-affected 5.4.0-1021.21+fips2
jammy not-affected 5.15.0-1052.57+fips1
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
linux-azure-fips
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 4.15.0-1002.2
focal not-affected 5.4.0-1022.22+fips1
jammy not-affected 5.15.0-1058.66+fips1
trusty DNE -
xenial DNE -
upstream released 6.16~rc1
linux-gcp-fips
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 4.15.0-2013.14
focal not-affected 5.4.0-1021.21+fips1
jammy not-affected 5.15.0-1048.56+fips1
trusty DNE -
xenial DNE -
upstream released 6.16~rc1
linux-gcp
Release Status Version
bionic ignored superseded by linux-gcp-5.3
jammy not-affected 5.13.0-1005.6
noble not-affected 6.5.0-1007.7
oracular not-affected 6.8.0-1007.7
plucky not-affected 6.11.0-1003.3
xenial not-affected 4.10.0-1004.4
trusty DNE -
focal not-affected 5.4.0-1005.5
upstream released 6.16~rc1
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 4.15.0-1071.81
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-gcp-5.3
Release Status Version
bionic ignored superseded by linux-gcp-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-1021.21~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-gcp-5.8
Release Status Version
focal ignored superseded by linux-gcp-5.11
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored superseded by linux-gcp-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored superseded by linux-gcp-5.15
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1006.9~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-1010.11~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-gcp-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-gcp-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-gke
Release Status Version
focal ignored end of kernel support
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1002.2
noble not-affected 6.8.0-1003.5
trusty DNE -
xenial ignored end of standard support
bionic DNE -
upstream released 6.16~rc1
linux-gke-4.15
Release Status Version
bionic ignored superseded by linux-gke-5.0
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1001.2
noble not-affected 6.8.0-1001.3
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop-5.4
Release Status Version
bionic ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm
Release Status Version
oracular DNE -
plucky DNE -
focal not-affected 5.4.0-1004.5
jammy not-affected 5.15.0-1002.2
noble not-affected 6.5.0-1009.9
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-1010.11~18.04.2
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1034.37~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-ibm-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1004.6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1003.5~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-iot
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.4.0-1001.3
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-intel-iot-realtime
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1021.26
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-lowlatency
Release Status Version
plucky DNE -
jammy not-affected 5.15.0-22.22
noble not-affected 6.5.0-9.9.1
oracular not-affected 6.8.0-31.31.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-33.34~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-38.38.1~22.04.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored replaced by linux-hwe-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-nvidia
Release Status Version
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1005.5
noble not-affected 6.8.0-1007.7
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble not-affected 6.8.0-1009.9.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-nvidia-tegra
Release Status Version
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1013.13
noble not-affected 6.8.0-1003.3
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1009.9~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 5.15.0-1001.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-oracle-5.0
Release Status Version
bionic ignored superseded by linux-oracle-5.3
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.3
Release Status Version
bionic ignored superseded by linux-oracle-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-1021.21~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-oracle-5.8
Release Status Version
focal ignored superseded by linux-oracle-5.11
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.11
Release Status Version
focal ignored superseded by linux-oracle-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.13
Release Status Version
focal ignored superseded by linux-oracle-5.15
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1007.9~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-1006.6~22.04.3
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-oem
Release Status Version
bionic ignored replaced by linux-hwe-5.4
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
linux-oem-5.6
Release Status Version
focal ignored superseded by linux-oem-5.10
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.10
Release Status Version
focal ignored superseded by linux-oem-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
focal ignored superseded by linux-oem-5.14
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.14
Release Status Version
focal ignored replaced by linux-hwe-5.15
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble not-affected 6.8.0-1003.3
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-oem-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble not-affected 6.11.0-1007.7
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-raspi2
Release Status Version
focal ignored replaced by linux-raspi
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic not-affected 5.4.0-1013.13~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
linux-raspi-realtime
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble not-affected 6.7.0-2001.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-riscv
Release Status Version
focal ignored superseded by linux-riscv-5.8
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
oracular not-affected 6.8.0-31.31.1
plucky not-affected 6.11.0-8.8.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-riscv-5.8
Release Status Version
focal ignored superseded by linux-riscv-5.11
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored superseded by linux-riscv-5.13
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.15.0-1015.17~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy not-affected 6.8.0-38.38.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
focal not-affected 5.4.0-1020.24
jammy not-affected 5.15.0-1022.26
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
linux-aws
Release Status Version
jammy not-affected 5.13.0-1005.6
noble not-affected 6.5.0-1008.8
oracular not-affected 6.8.0-1008.8
plucky not-affected 6.11.0-1004.4
xenial not-affected 4.4.0-1001.10
upstream released 6.16~rc1
bionic not-affected 4.15.0-1001.1
focal not-affected 5.4.0-1005.5
trusty not-affected 4.4.0-1002.2
linux-oracle
Release Status Version
bionic not-affected 4.15.0-1008.10
jammy not-affected 5.13.0-1008.10
noble not-affected 6.5.0-1010.10
oracular not-affected 6.8.0-1005.5
plucky not-affected 6.11.0-1006.6
xenial not-affected 4.15.0-1008.10~16.04.1
trusty DNE -
focal not-affected 5.4.0-1005.5
upstream released 6.16~rc1
linux-raspi
Release Status Version
jammy not-affected 5.13.0-1008.9
noble not-affected 6.5.0-1005.7
oracular not-affected 6.8.0-1004.4
plucky not-affected 6.11.0-1004.4
trusty DNE -
xenial DNE -
bionic DNE -
focal not-affected 5.4.0-1007.7
upstream released 6.16~rc1
linux-realtime
Release Status Version
jammy not-affected 5.15.0-1006.6
noble not-affected 6.8.0-1008.19
oracular not-affected 6.11.0-1001.1
plucky not-affected 6.11.0-1001.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
linux-intel
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.8.0-1001.6
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
linux-oem-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-1005.5
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
linux-riscv-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-22.22.1~24.04.1
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
linux-aws-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble not-affected 6.14.0-1007.7~24.04.1
upstream released 6.16~rc1
linux-gcp-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-1007.7~24.04.1
plucky DNE -
upstream released 6.16~rc1
linux-hwe-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-24.24~24.04.3
plucky DNE -
upstream released 6.16~rc1
linux-oracle-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-1007.7~24.04.1
plucky DNE -
upstream released 6.16~rc1
linux-nvidia-6.11
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble not-affected 6.11.0-1002.2
upstream released 6.16~rc1
linux-realtime-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy not-affected 6.8.1-1004.4~22.04.1
noble DNE -
plucky DNE -
upstream released 6.16~rc1
linux-realtime-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-1003.3~24.04.3
plucky DNE -
upstream released 6.16~rc1

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.223-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.159-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.73-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) not-affected - -

SUSE

Severity: High
Product Status
Image SLES-Azure-3P Image SLES-Azure-Basic Image SLES-Azure-Standard Image SLES-BYOS-Azure Image SLES-BYOS-EC2 Image SLES-BYOS-GCE Image SLES-CHOST-BYOS-Aliyun Image SLES-CHOST-BYOS-Azure Image SLES-CHOST-BYOS-EC2 Image SLES-CHOST-BYOS-GCE Image SLES-CHOST-BYOS-GDC Image SLES-CHOST-BYOS-SAP-CCloud Image SLES-EC2 Image SLES-GCE Image SLES-Hardened-BYOS-Azure Image SLES-Hardened-BYOS-EC2 Image SLES-Hardened-BYOS-GCE Image SLES-SAPCAL-Azure Image SLES-SAPCAL-EC2 Image SLES-SAPCAL-GCE Affected
Image SLES-SAP-Azure Image SLES-SAP-Azure-3P Image SLES-SAP-BYOS-Azure Image SLES-SAP-BYOS-EC2 Image SLES-SAP-BYOS-GCE Image SLES-SAP-GCE Affected
Image SLES15-SP7-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-Aliyun Image SLES15-SP7-CHOST-BYOS-Azure Image SLES15-SP7-CHOST-BYOS-EC2 Image SLES15-SP7-CHOST-BYOS-GCE Image SLES15-SP7-CHOST-BYOS-GDC Image SLES15-SP7-CHOST-BYOS-SAP-CCloud Image SLES15-SP7-GCE-3P Image SLES15-SP7-HPC-BYOS-EC2 Image SLES15-SP7-Hardened-BYOS-EC2 Affected
Image SLES15-SP7-SAP-Azure-LI-BYOS-Production Image SLES15-SP7-SAP-Azure-VLI-BYOS-Production Image SLES15-SP7-SAP-BYOS-EC2 Image SLES15-SP7-SAP-EC2 Image SLES15-SP7-SAP-GCE-3P Image SLES15-SP7-SAP-Hardened-BYOS-EC2 Affected
SUSE Linux Enterprise Desktop 15 SP7 Fixed

Share

CVE-2025-38209 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy