CVE-2025-39901

| EUVD-2025-32889 HIGH
2025-10-01 416baaa9-dc9f-4396-8d5f-8c081fb06d67
7.1
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
High

Lifecycle Timeline

4
Analysis Generated
Mar 13, 2026 - 18:18 vuln.today
EUVD ID Assigned
Mar 13, 2026 - 18:18 euvd
EUVD-2025-32889
Patch Released
Jan 14, 2026 - 20:16 nvd
Patch available
CVE Published
Oct 01, 2025 - 08:15 nvd
HIGH 7.1

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: remove read access to debugfs files The 'command' and 'netdev_ops' debugfs files are a legacy debugging interface supported by the i40e driver since its early days by commit 02e9c290814c ("i40e: debugfs interface"). Both of these debugfs files provide a read handler which is mostly useless, and which is implemented with questionable logic. They both use a static 256 byte buffer which is initialized to the empty string. In the case of the 'command' file this buffer is literally never used and simply wastes space. In the case of the 'netdev_ops' file, the last command written is saved here. On read, the files contents are presented as the name of the device followed by a colon and then the contents of their respective static buffer. For 'command' this will always be "<device>: ". For 'netdev_ops', this will be "<device>: <last command written>". But note the buffer is shared between all devices operated by this module. At best, it is mostly meaningless information, and at worse it could be accessed simultaneously as there doesn't appear to be any locking mechanism. We have also recently received multiple reports for both read functions about their use of snprintf and potential overflow that could result in reading arbitrary kernel memory. For the 'command' file, this is definitely impossible, since the static buffer is always zero and never written to. For the 'netdev_ops' file, it does appear to be possible, if the user carefully crafts the command input, it will be copied into the buffer, which could be large enough to cause snprintf to truncate, which then causes the copy_to_user to read beyond the length of the buffer allocated by kzalloc. A minimal fix would be to replace snprintf() with scnprintf() which would cap the return to the number of bytes written, preventing an overflow. A more involved fix would be to drop the mostly useless static buffers, saving 512 bytes and modifying the read functions to stop needing those as input. Instead, lets just completely drop the read access to these files. These are debug interfaces exposed as part of debugfs, and I don't believe that dropping read access will break any script, as the provided output is pretty useless. You can find the netdev name through other more standard interfaces, and the 'netdev_ops' interface can easily result in garbage if you issue simultaneous writes to multiple devices at once. In order to properly remove the i40e_dbg_netdev_ops_buf, we need to refactor its write function to avoid using the static buffer. Instead, use the same logic as the i40e_dbg_command_write, with an allocated buffer. Update the code to use this instead of the static buffer, and ensure we free the buffer on exit. This fixes simultaneous writes to 'netdev_ops' on multiple devices, and allows us to remove the now unused static buffer along with removing the read access.

Analysis

In the Linux kernel, the following vulnerability has been resolved:

i40e: remove read access to debugfs files

The 'command' and 'netdev_ops' debugfs files are a legacy debugging interface supported by the i40e driver since its early days by commit 02e9c290814c ("i40e: debugfs interface").

Both of these debugfs files provide a read handler which is mostly useless, and which is implemented with questionable logic. They both use a static 256 byte buffer which is initialized to the empty string. In the case of the 'command' file this buffer is literally never used and simply wastes space. In the case of the 'netdev_ops' file, the last command written is saved here.

On read, the files contents are presented as the name of the device followed by a colon and then the contents of their respective static buffer. For 'command' this will always be "<device>: ". For 'netdev_ops', this will be "<device>: <last command written>". But note the buffer is shared between all devices operated by this module. At best, it is mostly meaningless information, and at worse it could be accessed simultaneously as there doesn't appear to be any locking mechanism.

We have also recently received multiple reports for both read functions about their use of snprintf and potential overflow that could result in reading arbitrary kernel memory. For the 'command' file, this is definitely impossible, since the static buffer is always zero and never written to. For the 'netdev_ops' file, it does appear to be possible, if the user carefully crafts the command input, it will be copied into the buffer, which could be large enough to cause snprintf to truncate, which then causes the copy_to_user to read beyond the length of the buffer allocated by kzalloc.

A minimal fix would be to replace snprintf() with scnprintf() which would cap the return to the number of bytes written, preventing an overflow. A more involved fix would be to drop the mostly useless static buffers, saving 512 bytes and modifying the read functions to stop needing those as input.

Instead, lets just completely drop the read access to these files. These are debug interfaces exposed as part of debugfs, and I don't believe that dropping read access will break any script, as the provided output is pretty useless. You can find the netdev name through other more standard interfaces, and the 'netdev_ops' interface can easily result in garbage if you issue simultaneous writes to multiple devices at once.

In order to properly remove the i40e_dbg_netdev_ops_buf, we need to refactor its write function to avoid using the static buffer. Instead, use the same logic as the i40e_dbg_command_write, with an allocated buffer. Update the code to use this instead of the static buffer, and ensure we free the buffer on exit. This fixes simultaneous writes to 'netdev_ops' on multiple devices, and allows us to remove the now unused static buffer along with removing the read access.

Technical Context

An out-of-bounds memory access occurs when code reads from or writes to memory locations outside the intended buffer boundaries. This vulnerability is classified as Out-of-bounds Read (CWE-125).

Affected Products

Affected products: Linux Linux Kernel

Remediation

A vendor patch is available — apply it immediately. Implement proper bounds checking on all array and buffer accesses. Use memory-safe languages or static analysis tools to detect OOB issues.

Priority Score

36
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +36
POC: 0

Vendor Status

Ubuntu

Priority: Medium
linux
Release Status Version
jammy needed -
trusty ignored end of standard support, was needed
upstream released 6.17~rc5, 6.8.y, 6.14.y
bionic needed -
focal needed -
xenial needed -
plucky ignored end of life, was needed
noble pending 6.8.0-104.104
questing not-affected 6.17.0-4.4
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
xenial needed -
trusty DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-104.104~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-hwe-edge
Release Status Version
xenial ignored end of standard support
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
questing DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
trusty ignored end of standard support, was needed
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
jammy needed -
bionic needed -
focal needed -
xenial needed -
trusty DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-aws-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
xenial needed -
trusty DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure
Release Status Version
bionic ignored end of standard support
jammy needed -
focal needed -
plucky ignored end of life, was needed
noble pending 6.8.0-1049.55
trusty ignored end of standard support, was needed
upstream released 6.17~rc5, 6.8.y, 6.14.y
xenial needed -
questing not-affected 6.17.0-1002.2
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-1049.55~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-fde
Release Status Version
focal ignored end of standard support
noble needed -
jammy needed -
plucky ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
questing needs-triage -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-fips
Release Status Version
plucky DNE -
noble pending 6.8.0-104.104+fips1
bionic needed -
focal needed -
jammy needed -
xenial needed -
trusty DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-aws-fips
Release Status Version
plucky DNE -
noble pending 6.8.0-1048.51+fips1
bionic needed -
focal needed -
jammy needed -
trusty DNE -
questing DNE -
xenial DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-fips
Release Status Version
plucky DNE -
noble pending 6.8.0-1049.55+fips1
bionic needed -
focal needed -
jammy needed -
trusty DNE -
questing DNE -
xenial DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-fips
Release Status Version
plucky DNE -
noble pending 6.8.0-1050.53+fips1
bionic needed -
focal needed -
jammy needed -
trusty DNE -
questing DNE -
xenial DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp
Release Status Version
bionic ignored end of standard support
jammy needed -
focal needed -
xenial needed -
plucky ignored end of life, was needed
noble pending 6.8.0-1050.53
trusty DNE -
questing not-affected 6.17.0-1001.1
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-1050.53~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
jammy needed -
noble pending 6.8.0-1046.51
trusty DNE -
xenial ignored end of standard support
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
jammy needed -
noble pending 6.8.0-1033.36
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-ibm
Release Status Version
plucky DNE -
jammy needed -
focal needed -
noble pending 6.8.0-1047.47
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-1047.47~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-lowlatency
Release Status Version
plucky DNE -
jammy needed -
upstream released 6.17~rc5, 6.8.y, 6.14.y
noble pending 6.8.0-104.104.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-104.104.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia
Release Status Version
plucky DNE -
jammy needed -
noble pending 6.8.0-1048.51
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-1048.51~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-nvidia-6.11
Release Status Version
jammy DNE -
plucky DNE -
noble ignored end of kernel support, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
noble pending 6.8.0-1048.51.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-nvidia-tegra
Release Status Version
plucky DNE -
jammy needed -
noble pending 6.8.0-1019.19
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oracle-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-oracle-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oracle-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oracle-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oracle-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-1045.46~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oem
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
questing DNE -
linux-oem-5.6
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oem-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oracle
Release Status Version
jammy needed -
bionic needed -
focal needed -
xenial needed -
plucky ignored end of life, was needed
noble pending 6.8.0-1045.46
trusty DNE -
questing not-affected 6.17.0-1001.1
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
noble ignored superseded by linux-oem-6.14, was needs-triage
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oem-6.11
Release Status Version
jammy DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
noble ignored superseded by linux-oem-6.14, was needs-triage
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
questing DNE -
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
noble pending 6.8.0-2039.40
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.1-1044.45~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
questing not-affected 6.17.0-4.4.1
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
jammy pending 6.8.0-104.104~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
noble ignored superseded by linux-riscv-6.17, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
jammy needed -
upstream released 6.17~rc5, 6.8.y, 6.14.y
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-aws
Release Status Version
jammy needed -
trusty ignored end of standard support, was needed
upstream released 6.17~rc5, 6.8.y, 6.14.y
bionic needed -
focal needed -
xenial needed -
plucky ignored end of life, was needed
noble pending 6.8.0-1048.51
questing not-affected 6.17.0-1001.1
linux-raspi
Release Status Version
jammy needed -
focal needed -
plucky ignored end of life, was needed
noble pending 6.8.0-1049.53
trusty DNE -
xenial DNE -
bionic DNE -
questing not-affected 6.17.0-1003.3
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-realtime
Release Status Version
jammy needed -
plucky ignored end of life, was needed
noble pending 6.8.1-1044.45
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing not-affected 6.17.0-1001.2
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-intel
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
questing DNE -
noble ignored end of kernel support, was needs-triage
linux-azure-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
plucky DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-fde-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
plucky DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-nvidia-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
plucky DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-xilinx
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
plucky ignored end of life, was needed
noble pending 6.8.0-1025.26
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5
plucky DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5~24.04.2
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-1004.4~24.04.3
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14~24.04.1
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-1004.4~24.04.2
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needs-triage -
questing DNE -
upstream released 6.17~rc5, 6.8.y, 6.14.y

Debian

linux
Release Status Fixed Version Urgency
bullseye vulnerable 5.10.223-1 -
bullseye (security) vulnerable 5.10.251-1 -
bookworm vulnerable 6.1.159-1 -
bookworm (security) vulnerable 6.1.164-1 -
trixie fixed 6.12.48-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-1 -
sid fixed 6.19.6-2 -
(unstable) fixed 6.16.6-1 -

Share

CVE-2025-39901 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy