Skip to main content

Linux Kernel CVE-2025-40266

| EUVDEUVD-2025-201191 HIGH
2025-12-04 416baaa9-dc9f-4396-8d5f-8c081fb06d67
8.2
CVSS 3.1 · Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Share

Severity by source

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY
8.2 HIGH
AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
vuln.today AI
7.9 HIGH

Attacker needs host-kernel privileges (PR:H, AV:L); crossing the host→hypervisor boundary is S:C; OOB read discloses hyp memory (C:H) and can crash EL2 (A:H), with no clear write primitive (I:N).

3.1 AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:H
4.0 AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:H/SC:H/SI:N/SA:H
Ubuntu
MEDIUM
qualitative
SUSE
6.6 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Primary rating from Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67).

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Local
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
CVSS changed
Jul 30, 2026 - 06:37 NVD
8.2 (HIGH)
Patch released
Mar 16, 2026 - 15:00 nvd
Patch available
EUVD ID Assigned
Mar 15, 2026 - 16:35 euvd
EUVD-2025-201191
Analysis Generated
Mar 15, 2026 - 16:35 vuln.today
CVE Published
Dec 04, 2025 - 16:16 cve.org
HIGH 8.2
CVE Published
Dec 04, 2025 - 16:16 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

KVM: arm64: Check the untrusted offset in FF-A memory share

Verify the offset to prevent OOB access in the hypervisor FF-A buffer in case an untrusted large enough value [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX] is set from the host kernel.

AnalysisAI

Out-of-bounds memory access in the Linux kernel's arm64 protected-KVM (pKVM) hypervisor allows a compromised or malicious host kernel to read beyond the bounds of the hypervisor's FF-A (Arm Firmware Framework) shared-memory buffer by supplying an unvalidated composite-memory-region offset in the range [U32_MAX - sizeof(struct ffa_composite_mem_region) + 1, U32_MAX]. Because the host is normally treated as untrusted relative to the hypervisor in the pKVM confidential-compute model, this breaks the host/hypervisor isolation boundary (CVSS scope change) and can disclose hypervisor memory or crash it. There is no public exploit identified at time of analysis, and the EPSS score is very low (0.03%), consistent with a hard-to-reach, config-specific hypervisor bug rather than mass exploitation.

Technical ContextAI

The flaw lives in KVM's arm64 FF-A proxy inside the protected-KVM (pKVM) hypervisor at EL2. FF-A (Firmware Framework for Arm) is the standardized protocol used to broker memory sharing and messaging between the normal-world host, the hypervisor, and secure-world/firmware endpoints. When the host requests an FF-A memory share, it passes a descriptor containing an offset to a struct ffa_composite_mem_region within the shared buffer; the hypervisor uses that offset to locate the composite region. The bug is a missing bounds/overflow check on this host-controlled offset: a value near U32_MAX, once the size of the composite structure is added, wraps or points past the end of the hypervisor's FF-A buffer, producing an out-of-bounds access in EL2 memory. The root cause is a classic untrusted-input arithmetic/bounds failure (CWE-125 out-of-bounds read / CWE-190 integer overflow class), notably from data crossing the host→hypervisor trust boundary. No CWE was assigned in the source data; the vendor tags label it Information Disclosure, consistent with an OOB read.

RemediationAI

Apply the vendor-released kernel patch: upgrade to Linux 6.6.118, 6.12.60, 6.17.10, 6.18, or your distribution's fixed build - Ubuntu users should install the updates from USN-8095-1 (https://ubuntu.com/security/notices/USN-8095-1) and USN-8094-1 (https://ubuntu.com/security/notices/USN-8094-1), and can cherry-pick the upstream stable commits from https://git.kernel.org/stable/c/fc3139d9f4c1fe1c7d5f25f99676bd8e9c6a1041 if building from source. Reboot is required for the new kernel to take effect. If immediate patching is not possible on arm64 confidential-compute hosts, the practical compensating control is to avoid running protected KVM / FF-A memory-sharing guests until patched, since the OOB is reachable only through the pKVM FF-A share path - the trade-off is loss of that virtualization capability. On conventional (non-pKVM) hosts the host kernel is already the trust root, so risk is minimal and standard scheduled kernel patching suffices.

Vendor StatusVendor

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
xenial needed -
trusty DNE -
focal DNE -
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux
Release Status Version
bionic needed -
focal needed -
jammy needed -
plucky ignored end of life, was needs-triage
trusty ignored end of standard support, was needed
upstream released 6.18~rc6
xenial needed -
questing pending 6.17.0-16.16
noble pending 6.8.0-104.104
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104~22.04.1
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-edge
Release Status Version
xenial ignored end of standard support
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
xenial DNE -
bionic DNE -
focal DNE -
trusty ignored end of standard support, was needed
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
focal needed -
jammy needed -
upstream released 6.18~rc6
xenial needed -
trusty DNE -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
xenial needed -
trusty DNE -
bionic DNE -
focal DNE -
linux-azure
Release Status Version
bionic ignored end of standard support
focal needed -
jammy needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
noble pending 6.8.0-1049.55
questing pending 6.17.0-1009.9
trusty ignored end of standard support, was needed
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-1049.55~22.04.1
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde
Release Status Version
focal ignored end of standard support
questing needed -
jammy needed -
noble needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
bionic needed -
focal needed -
jammy needed -
upstream released 6.18~rc6
xenial needed -
noble pending 6.8.0-104.104+fips1
trusty DNE -
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
noble pending 6.8.0-1048.51+fips1
trusty DNE -
bionic needed -
focal needed -
xenial DNE -
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
noble pending 6.8.0-1049.55+fips1
trusty DNE -
bionic needed -
focal needed -
xenial DNE -
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
bionic needed -
jammy needed -
upstream released 6.18~rc6
noble pending 6.8.0-1050.53+fips1
trusty DNE -
focal needed -
xenial DNE -
linux-gcp
Release Status Version
bionic ignored end of standard support
focal needed -
jammy needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
trusty DNE -
noble pending 6.8.0-1050.53
questing pending 6.17.0-1008.8
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1050.53~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial ignored end of standard support
bionic DNE -
noble pending 6.8.0-1046.51
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
noble pending 6.8.0-1033.36
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal needed -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
noble pending 6.8.0-1047.47
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1047.47~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
noble pending 6.8.0-104.104.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-104.104.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
noble pending 6.8.0-1048.51
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1048.51~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-1048.51.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble pending 6.8.0-1019.19
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1045.46~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
linux-oem
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
linux-oem-5.6
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-2039.40
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.1-1044.45~22.04.1
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
questing pending 6.17.0-16.16.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104~22.04.1
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
noble pending 6.8.0-1025.26
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal needed -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws
Release Status Version
bionic needed -
focal needed -
jammy needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
noble pending 6.8.0-1048.51
questing pending 6.17.0-1008.8
trusty ignored end of standard support, was needed
linux-oracle
Release Status Version
bionic needed -
focal needed -
jammy needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
questing pending 6.17.0-1008.8
noble pending 6.8.0-1045.46
trusty DNE -
linux-raspi
Release Status Version
focal needed -
jammy needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
questing pending 6.17.0-1009.9
trusty DNE -
xenial DNE -
bionic DNE -
noble pending 6.8.0-1049.53
linux-realtime
Release Status Version
jammy needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble pending 6.8.1-1044.45
questing pending 6.17.0-1007.8
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.17.0-1013.13
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble pending 6.17.0-1008.8~24.04.1
upstream released 6.18~rc6
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.17.0-1009.9~24.04.2
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble pending 6.17.0-16.16~24.04.1
upstream released 6.18~rc6
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble pending 6.17.0-1008.8~24.04.1
upstream released 6.18~rc6
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble pending 6.17.0-16.16.1~24.04.1
upstream released 6.18~rc6
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble pending 6.17.0-1009.9~24.04.1
upstream released 6.18~rc6
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
questing DNE -
upstream released 6.18~rc6

Debian

linux
Release Status Fixed Version Urgency
bullseye vulnerable 5.10.223-1 -
bullseye (security) vulnerable 5.10.251-1 -
bookworm vulnerable 6.1.159-1 -
bookworm (security) vulnerable 6.1.164-1 -
trixie fixed 6.12.63-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.17.10-1 -

SUSE

Severity: Moderate
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:latest Container suse/sl-micro/6.0/base-os-container:latest Container suse/sl-micro/6.0/kvm-os-container:latest Container suse/sl-micro/6.0/rt-os-container:latest Image SL-Micro Affected
Container suse/sl-micro/6.0/toolbox:latest Affected
Image SLES-Azure-3P Image SLES-Azure-Basic Image SLES-Azure-Standard Image SLES-BYOS-Azure Image SLES-BYOS-EC2 Image SLES-BYOS-GCE Image SLES-CHOST-BYOS-Aliyun Image SLES-CHOST-BYOS-Azure Image SLES-CHOST-BYOS-EC2 Image SLES-CHOST-BYOS-GCE Image SLES-CHOST-BYOS-GDC Image SLES-CHOST-BYOS-SAP-CCloud Image SLES-EC2 Image SLES-EC2-ECS Image SLES-GCE Image SLES-GCE-3P Image SLES-Hardened-BYOS-Azure Image SLES-Hardened-BYOS-EC2 Image SLES-Hardened-BYOS-GCE Image SLES-SAPCAL-Azure Image SLES-SAPCAL-EC2 Image SLES-SAPCAL-GCE Affected
Image SLES-SAP-Azure Image SLES-SAP-Azure-3P Image SLES-SAP-BYOS-Azure Image SLES-SAP-BYOS-EC2 Image SLES-SAP-BYOS-GCE Image SLES-SAP-EC2 Image SLES-SAP-GCE Image SLES-SAP-GCE-3P Affected
SUSE Linux Enterprise High Availability Extension 16.0 Fixed

Share

CVE-2025-40266 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy