Skip to main content

Linux Kernel CVE-2025-40214

| EUVDEUVD-2025-201158 HIGH
2025-12-04 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Information Disclosure Linux
7.8
CVSS 3.1 · Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

  1. Recon
    Gain unprivileged local access
  2. Delivery
    Heap-spray to plant stale scc_index
  3. Exploit
    Build AF_UNIX in-flight cycles via SCM_RIGHTS
  4. Install
    Trigger garbage collection
  5. C2
    Free live socket receive queue (UAF)
  6. Execute
    Groom UAF into kernel corruption
  7. Impact
    Escalate to root

Vulnerability Assessment

Exploitation Conditions

Requires local code execution as an unprivileged user (PR:L, AV:L) with the ability to create AF_UNIX (Unix domain) sockets and pass file descriptors between them via SCM_RIGHTS to build in-flight reference cycles, then trigger the AF_UNIX garbage collector via close(). No special kernel configuration or non-default feature is needed - AF_UNIX and its SCM_RIGHTS GC are compiled into essentially all Linux kernels. Limiting factors: the attacker must already be on the host (no remote vector, UI:N), and reliable exploitation depends on multi-stage heap spraying to plant a specific leftover scc_index and on a prior GC run having set unix_graph_grouped=true, making practical exploitation considerably harder than the AC:L rating implies. Environments that block unprivileged local access or restrict SCM_RIGHTS FD passing (some hardened container runtimes) materially raise the bar.
Impact

The vendor CVSS (7.8, AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) reflects a locally exploitable UAF with high confidentiality, integrity and availability impact but requiring local, low-privilege access - consistent with a kernel LPE primitive rather than a remote threat. EPSS is very low (0.04%, 11th percentile) and the CVE is NOT in CISA KEV, so there is no evidence of active exploitation; low EPSS is expected for a fresh, local-only kernel bug. However, a working proof-of-concept repro is publicly described (Quang Le's reproducer and the Qdiv7 write-up), so weaponisation potential is real for an attacker already on the host. The AC:L rating is arguably optimistic: the public repro depends on multi-stage heap spraying to plant a specific stale scc_index and on GC having previously set unix_graph_grouped=true, which is closer to high attack complexity - treat AC as a point of uncertainty and lean toward AC:H for realistic exploitation. Net: a genuine local-privilege-escalation priority for multi-tenant, container, and sandbox-escape threat models, but low mass-exploitation risk. No conflicting AV signal - description and CVSS agree this is local.
Exploit ScenarioDerived

A low-privileged local user (or code running inside a container/sandbox) runs the public reproducer: it first sprays the heap to leave a stale scc_index value, then constructs AF_UNIX sockets passed via SCM_RIGHTS and triggers garbage collection so the GC frees the receive queue of a still-live in-flight socket. The resulting use-after-free is then groomed into a kernel memory-corruption primitive for privilege escalation. A detailed public repro/write-up exists, lowering the practical barrier for a skilled local attacker.
Act Now Prioritize within 24-48h. Why: Active threat signals + CRITICAL/HIGH severity.
Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv3 – Jul 30, 2026

Local privilege escalation / kernel memory corruption in the Linux kernel's AF_UNIX garbage collector arises because unix_add_edge() fails to initialise the new vertex's scc_index field. On kernels where GC has already run and grouped sockets into strongly-connected components, a freshly allocated in-flight socket inherits a stale SCC index (via heap spraying), causing unix_vertex_dead() to misjudge an alive in-flight socket as dead and garbage-collect its receive queue - a use-after-free. A detailed public reproducer exists (publicly available exploit code exists); it is not in CISA KEV and EPSS is very low (0.04%).

Earlier versions of this analysis (2)
v2 Jul 30, 2026 - 09:32 CVSS 7.8

Local privilege escalation via memory corruption in the Linux kernel AF_UNIX subsystem allows an unprivileged local user to trick the garbage collector into freeing the receive queue of a live, in-flight socket. The flaw stems from unix_add_edge() failing to initialise a new vertex's scc_index, so the SCC-based GC (unix_walk_scc_fast()) misjudges two distinct sockets as belonging to the same strongly-connected component and declares an alive socket dead. A detailed reproducer and technical write-up are public (no public exploit weaponisation confirmed via CISA KEV); EPSS is very low at 0.04%, but the CVSS 7.8 (AV:L, high CIA impact) reflects a genuine use-after-free primitive.

v1 Mar 15, 2026 - 16:35

RemediationAI

Vendor-released patch: upgrade to a fixed stable kernel - 6.1.159, 6.6.117, 6.12.59, 6.17.9, or mainline 6.18 (upstream fix commit 4cd8d755c7d4, which initialises scc_index in unix_add_edge()). Distro users should apply packaged updates: Ubuntu via USN-8014-1, or apply livepatch LSN-0118-1 to avoid a reboot, and Debian via DLA-4436-1; Siemens-managed OT/industrial systems should follow SSA-253495. Because this is a core kernel data-path bug in AF_UNIX (used pervasively for local IPC), there is no safe feature toggle that disables it; the only sound compensating control is to restrict local/untrusted code execution - e.g. tighten access to multi-tenant hosts and containers, and apply seccomp/LSM policies that limit unprivileged users' ability to create AF_UNIX sockets or pass file descriptors via SCM_RIGHTS where feasible, noting such restrictions can break legitimate IPC and containerised workloads. Prioritise patching over these controls since they are partial and disruptive.

Affected VersionsENISA

Linux d23802221f6755e104606864067c71af8cdb6788 <4cd8d755c7d4f515dd9abf483316aca2f1b7b0f3
Linux patch: 6.6.117
Linux ad081928a8b0f57f269df999a28087fce6f2b6ce <60e6489f8e3b086bd1130ad4450a2c112e863791
Linux adfb68b39b39767d6bfb53e48c4f19c183765686
Linux patch: 6.18
Linux patch: 6.12.59
Linux patch: 6.17.9
Linux 6.10
Linux ad081928a8b0f57f269df999a28087fce6f2b6ce <db81ad20fd8aef7cc7d536c52ee5ea4c1f979128
Linux ad081928a8b0f57f269df999a28087fce6f2b6ce <1aa7e40ee850c9053e769957ce6541173891204d
Linux patch: 6.1.159
Linux patch: 0
Linux adfb68b39b39767d6bfb53e48c4f19c183765686 <20003fbb9174121b27bd1da6ebe61542ac4c327d

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check
Technical ContextAI · show details

The bug lives in net/unix/garbage.c, the AF_UNIX file-descriptor garbage collector that reclaims sockets trapped in cyclic SCM_RIGHTS reference cycles. The kernel models in-flight sockets as a graph of vertices/edges and, to avoid re-running Tarjan's algorithm on every close(), caches SCC grouping in unix_graph_grouped and reuses per-vertex scc_index values via unix_walk_scc_fast(). unix_add_edge() allocates a new unix_vertex but never sets vertex->scc_index, so a newly allocated vertex can retain a leftover value (e.g. UNIX_VERTEX_INDEX_START = 2) from previously freed memory. When two unrelated sockets then compare equal scc_index while the file refcount matches the out_degree, unix_vertex_dead() wrongly declares a live socket dead and frees its queued skbs. The root-cause class is CWE-457 (use of an uninitialised variable) leading to CWE-416 (use-after-free); the upstream CWE field is N/A. The fix tracks the max SCC index from the previous unix_walk_scc() run and assigns max+1 to each new vertex.

Know when the next one hits your stack

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY 7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI 7.0 HIGH

Local unprivileged user (AV:L/PR:L); reliable exploitation needs multi-stage heap spraying and prior GC grouping, so AC:H; a kernel UAF yields full C/I/A impact.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Ubuntu HIGH
SUSE 7.0 HIGH
AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Red Hat 5.8 MEDIUM

Primary rating from Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67).

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
CVSS changed
Jul 30, 2026 - 06:37 NVD
7.8 (HIGH)
Patch released
Mar 31, 2026 - 21:13 nvd
Patch available
CVE Published
Dec 04, 2025 - 13:15 cve.org
HIGH 7.8
CVE Published
Dec 04, 2025 - 13:15 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

af_unix: Initialise scc_index in unix_add_edge().

Quang Le reported that the AF_UNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro.

The repro consists of three stages.

1) 1-a. Create a single cyclic reference with many sockets 1-b. close() all sockets 1-c. Trigger GC

2) 2-a. Pass sk-A to an embryo sk-B 2-b. Pass sk-X to sk-X 2-c. Trigger GC

3) 3-a. accept() the embryo sk-B 3-b. Pass sk-B to sk-C 3-c. close() the in-flight sk-A 3-d. Trigger GC

As of 2-c, sk-A and sk-X are linked to unix_unvisited_vertices, and unix_walk_scc() groups them into two different SCCs:

unix_sk(sk-A)->vertex->scc_index = 2 (UNIX_VERTEX_INDEX_START) unix_sk(sk-X)->vertex->scc_index = 3

Once GC completes, unix_graph_grouped is set to true. Also, unix_graph_maybe_cyclic is set to true due to sk-X's cyclic self-reference, which makes close() trigger GC.

At 3-b, unix_add_edge() allocates unix_sk(sk-B)->vertex and links it to unix_unvisited_vertices.

unix_update_graph() is called at 3-a. and 3-b., but neither unix_graph_grouped nor unix_graph_maybe_cyclic is changed because both sk-B's listener and sk-C are not in-flight.

3-c decrements sk-A's file refcnt to 1.

Since unix_graph_grouped is true at 3-d, unix_walk_scc_fast() is finally called and iterates 3 sockets sk-A, sk-B, and sk-X:

sk-A -> sk-B (-> sk-C) sk-X -> sk-X

This is totally fine. All of them are not yet close()d and should be grouped into different SCCs.

However, unix_vertex_dead() misjudges that sk-A and sk-B are in the same SCC and sk-A is dead.

unix_sk(sk-A)->scc_index unix_sk(sk-B)->scc_index <-- Wrong! && sk-A's file refcnt unix_sk(sk-A)->vertex->out_degree ^-- 1 in-flight count for sk-B -> sk-A is dead !?

The problem is that unix_add_edge() does not initialise scc_index.

Stage 1) is used for heap spraying, making a newly allocated vertex have vertex->scc_index == 2 (UNIX_VERTEX_INDEX_START) set by unix_walk_scc() at 1-c.

Let's track the max SCC index from the previous unix_walk_scc() call and assign the max + 1 to a new vertex's scc_index.

This way, we can continue to avoid Tarjan's algorithm while preventing misjudgments.

Executive ViewAI

Why It Matters

CVE-2025-40214 is a local privilege escalation vulnerability in the Linux kernel that allows unprivileged users to gain administrative access on affected systems. Publicly available exploit code exists, but no confirmed active exploitation has been reported. Organizations should prioritize patching systems with untrusted user access to eliminate this lateral movement and privilege escalation risk.

Business Impact: High
Compensating Controls

Apply vendor patch. Interim mitigations: restrict local account creation, limit sudo privileges, disable unnecessary user accounts, and implement privilege escalation monitoring and alerting on multi-tenant systems.

Threat Intelligence Overview

EPSS Score
0.0%
Top 89% exploitable
Prevalence
Ubiquitous
Linux kernel AF_UNIX IPC present in virtually all Linux deployments
Threat Intel
1
1 source
Data Quality
6 sources
Confidence: High
EUVD NVD CVE.org EPSS CISA Vendor

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.0%
Patch available Yes
Active threat Yes
Deciding rule
Active threat signals + CRITICAL/HIGH severity
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Small
Automatable· derived
No
Human Impact
High

Priority Score

49
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +39
PoC: 0
Weaponized: 0
Threat intel: +10
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

Ubuntu

Priority: High
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial not-affected 4.8.0-39.42~16.04.1
trusty DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-37.41~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-33.34~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-38.38~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-hwe-edge
Release Status Version
xenial ignored end of standard support
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty not-affected 4.4.0-13.29~14.04.1
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-1002.2
focal not-affected 5.4.0-1004.4
jammy not-affected 5.13.0-1004.4
xenial not-affected 4.4.0-1007.12
trusty DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1020.20~18.04.2
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-aws-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1015.19~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1009.9~22.04.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial not-affected 4.15.0-1031.33~16.04.1
trusty DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure
Release Status Version
bionic ignored end of standard support
focal not-affected 5.4.0-1006.6
jammy not-affected 5.13.0-1006.7
noble not-affected 6.5.0-1007.7
plucky ignored end of life, was needs-triage
questing released 6.17.0-1007.7
trusty not-affected 4.15.0-1023.24~14.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
xenial not-affected 4.11.0-1015.15
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-1082.92
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1022.22~18.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1007.8~20.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde
Release Status Version
focal ignored end of standard support
questing needed -
jammy not-affected 5.15.0-1019.24.1
noble not-affected 6.8.0-1041.48
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.8.0-1013.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1011.14
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-92.102+fips1
noble not-affected 6.8.0-38.38+fips4
trusty DNE -
bionic not-affected 4.15.0-1011.12
focal not-affected 5.4.0-1007.8
xenial not-affected 4.4.0-1001.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-2000.4
focal not-affected 5.4.0-1021.21+fips2
jammy not-affected 5.15.0-1052.57+fips1
noble not-affected 6.8.0-1035.37+fips1
trusty DNE -
xenial DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1058.66+fips1
noble not-affected 6.8.0-1034.39+fips1
trusty DNE -
bionic not-affected 4.15.0-1002.2
focal not-affected 5.4.0-1022.22+fips1
xenial DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1048.56+fips1
noble not-affected 6.8.0-1036.38+fips1
trusty DNE -
bionic not-affected 4.15.0-1001.1
focal not-affected 5.4.0-1021.21+fips1
xenial DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp
Release Status Version
bionic ignored end of standard support
focal not-affected 5.4.0-1005.5
jammy not-affected 5.13.0-1005.6
noble not-affected 6.5.0-1007.7
plucky ignored end of life, was needs-triage
xenial not-affected 4.10.0-1004.4
trusty DNE -
questing released 6.17.0-1006.6
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-1071.81
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1021.21~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1006.9~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1010.11~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1002.2
noble not-affected 6.8.0-1003.5
trusty DNE -
xenial ignored end of standard support
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1001.2
noble not-affected 6.8.0-1001.3
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1004.5
jammy not-affected 5.15.0-1002.2
noble not-affected 6.5.0-1009.9
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1010.11~18.04.2
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1034.37~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1004.6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1003.5~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1001.3
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1021.26
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-22.22
noble not-affected 6.5.0-9.9.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-33.34~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-38.38.1~22.04.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1005.5
noble not-affected 6.8.0-1007.7
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.8.0-1009.9.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1013.13
noble not-affected 6.8.0-1003.3
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1009.9~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1001.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oracle-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1021.21~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oracle-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1007.9~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1006.6~22.04.3
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oem
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
linux-oem-5.6
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1013.13~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.7.0-2001.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.1-1004.4~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
questing released 6.17.0-12.12.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1015.17~20.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-38.38.1~22.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
noble not-affected 6.8.0-1008.9
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1020.24
jammy not-affected 5.15.0-1022.26
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux
Release Status Version
bionic not-affected 4.13.0-16.19
focal not-affected 5.4.0-9.12
jammy not-affected 5.13.0-19.19
plucky ignored end of life, was needs-triage
trusty not-affected 3.11.0-12.19
upstream released 6.18~rc6, 6.14.y, 6.17.9
xenial not-affected 4.4.0-2.16
noble not-affected 6.5.0-9.9
questing released 6.17.0-12.12
linux-aws
Release Status Version
bionic not-affected 4.15.0-1001.1
focal not-affected 5.4.0-1005.5
jammy not-affected 5.13.0-1005.6
noble not-affected 6.5.0-1008.8
plucky ignored end of life, was needs-triage
trusty not-affected 4.4.0-1002.2
upstream released 6.18~rc6, 6.14.y, 6.17.9
xenial not-affected 4.4.0-1001.10
questing released 6.17.0-1006.6
linux-oracle
Release Status Version
bionic not-affected 4.15.0-1008.10
focal not-affected 5.4.0-1005.5
jammy not-affected 5.13.0-1008.10
noble not-affected 6.5.0-1010.10
plucky ignored end of life, was needs-triage
xenial not-affected 4.15.0-1008.10~16.04.1
questing released 6.17.0-1006.6
trusty DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-raspi
Release Status Version
focal not-affected 5.4.0-1007.7
jammy not-affected 5.13.0-1008.9
noble not-affected 6.5.0-1005.7
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
questing released 6.17.0-1007.7
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-realtime
Release Status Version
jammy not-affected 5.15.0-1006.6
noble not-affected 6.8.0-1008.19
plucky ignored end of life, was needs-triage
questing released 6.17.0-1005.6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
noble released 6.17.0-1010.10
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy not-affected 6.8.0-1046.53~22.04.1
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1008.8~24.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14~24.04.1
questing DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
questing DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
questing DNE -
upstream released 6.18~rc6, 6.14.y, 6.17.9
USN-8014-1 LSN-0118-1

Debian

linux
Release Status Fixed Version Urgency
bullseye not-affected - -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.159-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.63-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.17.9-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.159-1~deb11u1 -
DLA-4436-1

SUSE

Severity: Important
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:latest Affected
Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Affected
Container suse/sl-micro/6.0/toolbox:latest Affected
Container suse/sl-micro/6.1/baremetal-os-container:latest Affected
Image SL-Micro-Azure Image SL-Micro-BYOS-Azure Image SL-Micro-BYOS-EC2 Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Proxy-BYOS-Azure Image SUSE-Multi-Linux-Manager-Proxy-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-Azure-llc Image SUSE-Multi-Linux-Manager-Server-Azure-ltd Image SUSE-Multi-Linux-Manager-Server-BYOS-Azure Image SUSE-Multi-Linux-Manager-Server-BYOS-EC2 Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd Affected

Threat IntelligenceMISP

CISA Advisories
ICSA-26-188-05
Sources: CISA (public domain)

References

Advisories & patches
ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2025-40214 ADVISORY https://security-tracker.debian.org/tracker/dla-4436-1 ADVISORY https://ubuntu.com/security/notices/LSN-0118-1 ADVISORY https://ubuntu.com/security/notices/USN-8014-1 ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20207/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20220/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20228/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20564/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20828/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20829/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20831/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20832/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20837/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20840/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20841/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20842/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20944/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20945/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20946/ ADVISORY https://www.suse.com/support/update/SUSE-SU-2026:20947/ REF https://cert-portal.siemens.com/productcert/html/ssa-253495.html REF https://git.kernel.org/stable/c/1aa7e40ee850c9053e769957ce6541173891204d REF https://git.kernel.org/stable/c/20003fbb9174121b27bd1da6ebe61542ac4c327d REF https://git.kernel.org/stable/c/4cd8d755c7d4f515dd9abf483316aca2f1b7b0f3 REF https://git.kernel.org/stable/c/60e6489f8e3b086bd1130ad4450a2c112e863791 REF https://git.kernel.org/stable/c/db81ad20fd8aef7cc7d536c52ee5ea4c1f979128 REF https://mohandacherir.github.io/Qdiv7/posts/unix_new_gc/

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy