Skip to main content

Ubuntu CVE-2025-38331

| EUVDEUVD-2025-20915 MEDIUM
2025-07-10 416baaa9-dc9f-4396-8d5f-8c081fb06d67
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Ubuntu
MEDIUM
qualitative
SUSE
MEDIUM
qualitative

Primary rating from NVD.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

4
EUVD ID Assigned
Mar 16, 2026 - 06:52 euvd
EUVD-2025-20915
Analysis Generated
Mar 16, 2026 - 06:52 vuln.today
Patch released
Mar 16, 2026 - 06:52 nvd
Patch available
CVE Published
Jul 10, 2025 - 09:15 nvd
MEDIUM 5.5

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Use TOE/TSO on all TCP

It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb->len to the "TOE/TSO" offloader and it will handle them.

Without this quirk the driver becomes unstable and lock up and and crash.

I do not know exactly why, but it is probably due to the TOE (TCP offload engine) feature that is coupled with the segmentation feature - it is not possible to turn one part off and not the other, either both TOE and TSO are active, or neither of them.

Not having the TOE part active seems detrimental, as if that hardware feature is not really supposed to be turned off.

The datasheet says:

"Based on packet parsing and TCP connection/NAT table lookup results, the NetEngine puts the packets belonging to the same TCP connection to the same queue for the software to process. The NetEngine puts incoming packets to the buffer or series of buffers for a jumbo packet. With this hardware acceleration, IP/TCP header parsing, checksum validation and connection lookup are offloaded from the software processing."

After numerous tests with the hardware locking up after something between minutes and hours depending on load using iperf3 I have concluded this is necessary to stabilize the hardware.

Analysis

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: cortina: Use TOE/TSO on all TCP

It is desireable to push the hardware accelerator to also process non-segmented TCP frames: we pass the skb->len to the "TOE/TSO" offloader and it will handle them.

Without this quirk the driver becomes unstable and lock up and and crash.

I do not know exactly why, but it is probably due to the TOE (TCP offload engine) feature that is coupled with the segmentation feature - it is not possible to turn one part off and not the other, either both TOE and TSO are active, or neither of them.

Not having the TOE part active seems detrimental, as if that hardware feature is not really supposed to be turned off.

The datasheet says:

"Based on packet parsing and TCP connection/NAT table lookup results, the NetEngine puts the packets belonging to the same TCP connection to the same queue for the software to process. The NetEngine puts incoming packets to the buffer or series of buffers for a jumbo packet. With this hardware acceleration, IP/TCP header parsing, checksum validation and connection lookup are offloaded from the software processing."

After numerous tests with the hardware locking up after something between minutes and hours depending on load using iperf3 I have concluded this is necessary to stabilize the hardware.

Technical ContextAI

A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users.

RemediationAI

A vendor patch is available — apply it immediately. Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.

CVE-2022-0847 HIGH POC
7.8 Mar 10

Linux kernel contains a flaw known as 'Dirty Pipe' where improper pipe buffer flag initialization allows unprivileged lo

CVE-2015-1328 HIGH POC
7.8 Nov 28

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

CVE-2017-7308 HIGH POC
7.8 Mar 29

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer

CVE-2017-16995 HIGH POC
7.8 Dec 27

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

CVE-2017-1000112 HIGH POC
7.0 Oct 05

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. Rated high severity (CVSS 7.0). Public ex

CVE-2015-8660 MEDIUM POC
6.7 Dec 28

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

CVE-2012-0056 MEDIUM POC
6.9 Jan 27

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when

CVE-2014-0038 MEDIUM POC
6.9 Feb 06

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo

CVE-2016-8655 HIGH POC
7.8 Dec 08

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

CVE-2016-0728 HIGH POC
7.8 Feb 08

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

CVE-2017-0561 CRITICAL POC
9.8 Apr 07

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary

CVE-2022-2588 MEDIUM POC
5.3 Jan 08

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the h

Vendor StatusVendor

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
xenial needed -
bionic ignored end of standard support
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-hwe-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-hwe-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-hwe-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-100.100~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-hwe-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-hwe-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-hwe-edge
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
xenial ignored end of standard support
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
trusty ignored end of standard support, was needed
linux-kvm
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
focal needed -
xenial needed -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-5.0
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-aws-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-aws-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-aws-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-aws-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
trusty DNE -
bionic DNE -
focal DNE -
questing DNE -
xenial needed -
linux-aws
Release Status Version
jammy needed -
oracular ignored end of life, was needed
noble released 6.8.0-1046.49
trusty ignored end of standard support, was needed
xenial needed -
upstream released 6.16~rc1
bionic needed -
plucky released 6.14.0-1015.15
questing not-affected 6.16.0-1001.1
focal needed -
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-azure-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-azure-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-azure-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-azure-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy pending 6.8.0-1046.52~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-azure-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-azure-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-azure-fde
Release Status Version
oracular DNE -
noble needed -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
plucky not-affected 6.14.0-1014.14
questing needs-triage -
focal ignored end of standard support
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble pending 6.8.0-1031.34
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-azure-edge
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-fips
Release Status Version
oracular DNE -
plucky DNE -
bionic needed -
focal needed -
jammy needed -
trusty DNE -
upstream released 6.16~rc1
questing DNE -
noble released 6.8.0-100.100+fips1
xenial needed -
linux-aws-fips
Release Status Version
oracular DNE -
plucky DNE -
noble released 6.8.0-1046.49+fips1
focal needed -
jammy needed -
trusty DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
xenial DNE -
linux-azure-fips
Release Status Version
oracular DNE -
plucky DNE -
bionic needed -
focal needed -
jammy needed -
trusty DNE -
upstream released 6.16~rc1
questing DNE -
noble released 6.8.0-1046.52+fips1
xenial DNE -
linux-gcp-fips
Release Status Version
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
upstream released 6.16~rc1
questing DNE -
noble released 6.8.0-1047.50+fips1
bionic needed -
focal needed -
xenial DNE -
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-gcp-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-gcp-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-gcp-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-gcp-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-1047.50~22.04.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-gcp-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-gcp-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
oracular DNE -
plucky DNE -
jammy needed -
noble released 6.8.0-1043.48
trusty DNE -
xenial ignored end of standard support
bionic DNE -
upstream released 6.16~rc1
questing DNE -
linux-gke-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gke-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
oracular DNE -
plucky DNE -
jammy needed -
noble released 6.8.0-1030.33
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
linux-gkeop-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
linux-ibm
Release Status Version
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
noble released 6.8.0-1044.44
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-ibm-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
jammy released 6.8.0-1044.44~22.04.1
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-intel-iotg
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-iot
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-intel-iot-realtime
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-lowlatency
Release Status Version
plucky DNE -
jammy needed -
oracular ignored end of life, was needed
noble released 6.8.0-100.100.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-100.100.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored replaced by linux-hwe-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-nvidia
Release Status Version
oracular DNE -
plucky DNE -
jammy needed -
noble released 6.8.0-1046.49
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
noble released 6.8.0-1046.49.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-tegra
Release Status Version
oracular DNE -
plucky DNE -
jammy needed -
noble pending 6.8.0-1017.17
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-oracle-5.0
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-oracle-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-oem-6.11
Release Status Version
plucky DNE -
jammy DNE -
oracular DNE -
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-oem-6.14, was needed
questing DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-oracle-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oracle-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oracle-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-1043.44~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-oem
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-oem-5.6
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.10
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.14
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-oem-6.14, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-raspi2
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
questing DNE -
focal ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
bionic needed -
linux-raspi-realtime
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble released 6.8.0-2037.38
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-riscv
Release Status Version
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
oracular ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
plucky released 6.14.0-34.34.1
questing not-affected 6.17.0-4.4.1
focal ignored end of standard support
linux-riscv-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-riscv-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.16~rc1
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal needed -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-100.100~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing DNE -
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing DNE -
focal needed -
linux
Release Status Version
jammy needed -
oracular ignored end of life, was needed
trusty ignored end of standard support, was needed
bionic needed -
focal needed -
noble released 6.8.0-100.100
upstream released 6.16~rc1
plucky released 6.14.0-34.34
xenial needed -
questing not-affected 6.16.0-13.13
linux-azure
Release Status Version
jammy needed -
oracular ignored end of life, was needed
trusty ignored end of standard support, was needed
plucky released 6.14.0-1014.14
noble released 6.8.0-1046.52
upstream released 6.16~rc1
questing not-affected 6.16.0-1001.1
focal needed -
xenial needed -
bionic ignored end of standard support
linux-gcp
Release Status Version
jammy needed -
oracular ignored end of life, was needed
noble released 6.8.0-1047.50
trusty DNE -
upstream released 6.16~rc1
questing not-affected 6.16.0-1001.1
plucky released 6.14.0-1018.19
focal needed -
xenial needed -
bionic ignored end of standard support
linux-oracle
Release Status Version
jammy needed -
oracular ignored end of life, was needed
noble released 6.8.0-1043.44
trusty DNE -
upstream released 6.16~rc1
plucky released 6.14.0-1015.15
questing not-affected 6.16.0-1001.1
bionic needed -
focal needed -
xenial needed -
linux-raspi
Release Status Version
jammy needed -
oracular ignored end of life, was needed
plucky released 6.14.0-1016.16
noble released 6.8.0-1047.51
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16~rc1
questing not-affected 6.17.0-1003.3
focal needed -
linux-realtime
Release Status Version
jammy needed -
oracular ignored end of life, was needed
noble released 6.8.1-1041.42
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16~rc1
questing not-affected 6.17.0-1001.2
plucky released 6.14.0-1014.14
linux-intel
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.16~rc1
questing DNE -
noble ignored end of kernel support, was needed
linux-oem-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble released 6.14.0-1014.14
upstream released 6.16~rc1
questing DNE -
linux-riscv-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.16~rc1
questing DNE -
noble released 6.14.0-34.34.1~24.04.1
linux-aws-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble released 6.14.0-1015.15~24.04.1
upstream released 6.16~rc1
questing DNE -
linux-gcp-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble released 6.14.0-1018.19~24.04.1
upstream released 6.16~rc1
questing DNE -
linux-hwe-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.16~rc1
questing DNE -
noble not-affected -
linux-oracle-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble released 6.14.0-1015.15~24.04.1
upstream released 6.16~rc1
questing DNE -
linux-nvidia-6.11
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.16~rc1
noble ignored end of kernel support, was needed
questing DNE -
linux-realtime-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.16~rc1
noble released 6.14.0-1014.14~24.04.1
questing DNE -
linux-realtime-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble DNE -
plucky DNE -
upstream released 6.16~rc1
jammy released 6.8.1-1041.42~22.04.1
questing DNE -
linux-azure-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.16~rc1
noble released 6.14.0-1014.14~24.04.1
linux-azure-fde-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1014.14~24.04.1
upstream released 6.16~rc1
linux-azure-nvidia-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
noble released 6.14.0-1007.7
upstream released 6.16~rc1
linux-xilinx
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky not-affected -
questing DNE -
upstream released 6.16~rc1
noble released 6.8.0-1023.24
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5
plucky DNE -
questing DNE -
upstream released 6.16~rc1
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16~rc1
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5~24.04.2
questing DNE -
upstream released 6.16~rc1
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.3
questing DNE -
upstream released 6.16~rc1
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14~24.04.1
questing DNE -
upstream released 6.16~rc1
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.2
questing DNE -
upstream released 6.16~rc1
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
upstream released 6.16~rc1
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.16~rc1
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needs-triage -
questing DNE -
upstream released 6.16~rc1

Debian

linux
Release Status Fixed Version Urgency
bullseye vulnerable 5.10.223-1 -
bullseye (security) vulnerable 5.10.251-1 -
bookworm fixed 6.1.147-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.73-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.12.35-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.153-1~deb11u1 -

SUSE

Severity: Medium
Product Status
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise Desktop 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7 Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7 Fixed

Share

CVE-2025-38331 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy