Skip to main content

Linux Kernel CVE-2025-40271

| EUVDEUVD-2025-201584 HIGH
2025-12-06 416baaa9-dc9f-4396-8d5f-8c081fb06d67
7.8
CVSS 3.1 · Vendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Share

Severity by source

Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67) PRIMARY
7.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
vuln.today AI
7.0 HIGH

Local unprivileged access (AV:L/PR:L) exploiting a narrow proc_subdir_lock race raises complexity to AC:H; a kernel UAF can yield memory disclosure, corruption, and crashes, so C/I/A:H.

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Ubuntu
MEDIUM
qualitative
SUSE
5.2 MEDIUM
AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:L/A:H
Red Hat
7.0 MEDIUM
qualitative

Primary rating from Vendor (416baaa9-dc9f-4396-8d5f-8c081fb06d67).

CVSS VectorVendor: 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

6
CVSS changed
Jul 30, 2026 - 06:37 NVD
7.8 (HIGH)
Patch released
Mar 16, 2026 - 15:00 nvd
Patch available
EUVD ID Assigned
Mar 15, 2026 - 17:37 euvd
EUVD-2025-201584
Analysis Generated
Mar 15, 2026 - 17:37 vuln.today
CVE Published
Dec 06, 2025 - 22:15 cve.org
HIGH 7.8
CVE Published
Dec 06, 2025 - 22:15 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

fs/proc: fix uaf in proc_readdir_de()

Pde is erased from subdir rbtree through rb_erase(), but not set the node to EMPTY, which may result in uaf access. We should use RB_CLEAR_NODE() set the erased node to EMPTY, then pde_subdir_next() will return NULL to avoid uaf access.

We found an uaf issue while using stress-ng testing, need to run testcase getdent and tun in the same time. The steps of the issue is as follows:

  1. use getdent to traverse dir /proc/pid/net/dev_snmp6/, and current

pde is tun3;

  1. in the [time windows] unregister netdevice tun3 and tun2, and erase

them from rbtree. erase tun3 first, and then erase tun2. the pde(tun2) will be released to slab;

  1. continue to getdent process, then pde_subdir_next() will return

pde(tun2) which is released, it will case uaf access.

CPU 0 | CPU 1 ------------------------------------------------------------------------- traverse dir /proc/pid/net/dev_snmp6/ | unregister_netdevice(tun->dev) //tun3 tun2 sys_getdents64() | iterate_dir() | proc_readdir() | proc_readdir_de() | snmp6_unregister_dev() pde_get(de); | proc_remove() read_unlock(&proc_subdir_lock); | remove_proc_subtree()

| write_lock(&proc_subdir_lock); [time window] | rb_erase(&root->subdir_node, &parent->subdir);

| write_unlock(&proc_subdir_lock); read_lock(&proc_subdir_lock); | next = pde_subdir_next(de); | pde_put(de); | de = next; //UAF |

rbtree of dev_snmp6

| pde(tun3) / \ NULL pde(tun2)

AnalysisAI

Use-after-free in the Linux kernel's procfs directory-reading path (proc_readdir_de() in fs/proc) allows a local user to trigger a race between directory traversal and concurrent removal of proc entries, corrupting kernel memory. The bug arises because a proc_dir_entry is erased from the subdir red-black tree without clearing the node, so pde_subdir_next() can return a freed node; it was found via stress-ng running getdents against /proc/<pid>/net/dev_snmp6/ while network devices (tun interfaces) are unregistered. Publicly available exploit code exists and a vendor patch is available, but the CVE is not listed in CISA KEV and carries a very low EPSS score (0.05%), indicating no evidence of widespread exploitation.

Technical ContextAI

The flaw lives in the Linux proc filesystem (fs/proc), which exposes kernel and process state under /proc. Directory entries are tracked as proc_dir_entry (pde) objects held in a per-directory red-black tree (subdir), guarded by proc_subdir_lock. During readdir, proc_readdir_de() takes a reference on the current pde, drops the read lock, then re-acquires it and calls pde_subdir_next() to advance. If another CPU removes an entry via proc_remove()/remove_proc_subtree() in that window, rb_erase() detaches the node from the tree but leaves its rb pointers stale; the freed node's parent/child links can still be followed, so pde_subdir_next() dereferences freed slab memory - a classic use-after-free (CWE-416, though the feed lists CWE as N/A). The concrete trigger is unregistering netdevices (e.g. tun2/tun3), which calls snmp6_unregister_dev() and tears down the dev_snmp6 proc subtree. The fix uses RB_CLEAR_NODE() after rb_erase() so pde_subdir_next() returns NULL instead of walking freed memory.

RemediationAI

Vendor-released patch: upgrade to a fixed Linux kernel - 5.4.302, 5.10.247, 5.15.197, 6.1.159, 6.6.117, 6.12.59, 6.17.9, or mainline 6.18, whichever matches your branch. Distribution users should apply the corresponding update and reboot: Ubuntu via USN-8029-1/USN-8029-2/USN-8029-3/USN-8030-1/USN-8048-1 (https://ubuntu.com/security/notices/USN-8029-1) and Debian via DLA-4404-1/DLA-4436-1 (https://security-tracker.debian.org/tracker/dla-4404-1). The upstream fix is the addition of RB_CLEAR_NODE() after rb_erase() in fs/proc (stable commits at git.kernel.org). No configuration-only workaround fully removes the race, but exposure can be reduced by limiting untrusted local user access to the host and curbing the ability to rapidly create/destroy network namespaces or netdevices - for example restricting unprivileged user namespaces via sysctl kernel.unprivileged_userns_clone=0 on Debian/Ubuntu, which reduces the ability to churn dev_snmp6 proc subtrees; the trade-off is that disabling unprivileged user namespaces can break container runtimes and sandboxed applications that rely on them.

Vendor StatusVendor

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
xenial needed -
trusty DNE -
focal DNE -
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-hwe-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-hwe-5.11
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-hwe-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-172.182~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104~22.04.1
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-edge
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
bionic ignored end of standard support
xenial ignored end of standard support
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
xenial DNE -
bionic DNE -
focal DNE -
trusty ignored end of standard support, was needed
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
focal needed -
upstream released 6.18~rc6
xenial needed -
jammy pending 5.15.0-1094.99
trusty DNE -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-aws-5.3
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-aws-5.11
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-aws-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal pending 5.15.0-1102.109~20.04.1
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
xenial needed -
trusty DNE -
bionic DNE -
focal DNE -
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.3
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-1049.55~22.04.1
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde
Release Status Version
questing needed -
jammy needed -
noble needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 5.15.0-172.182+fips1
noble pending 6.8.0-104.104+fips1
trusty DNE -
bionic needed -
focal needed -
xenial needed -
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 5.15.0-1102.109+fips1
noble pending 6.8.0-1048.51+fips1
trusty DNE -
bionic needed -
focal needed -
xenial DNE -
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-1049.55+fips1
trusty DNE -
bionic needed -
focal needed -
jammy pending 5.15.0-1106.115+fips1
xenial DNE -
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-1050.53+fips1
trusty DNE -
bionic needed -
focal needed -
jammy pending 5.15.0-1102.111+fips1
xenial DNE -
linux-gcp
Release Status Version
bionic ignored end of standard support
focal needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
jammy pending 5.15.0-1102.111
questing released 6.17.0-1007.7
trusty DNE -
noble pending 6.8.0-1050.53
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-1102.111~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1050.53~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial ignored end of standard support
bionic DNE -
noble pending 6.8.0-1046.51
jammy pending 5.15.0-1098.104
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 5.15.0-1085.93
noble pending 6.8.0-1033.36
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
jammy pending 5.15.0-1096.99
noble pending 6.8.0-1047.47
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-1096.99~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1047.47~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 5.15.0-1097.103
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal pending 5.15.0-1097.103~20.04.1
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 5.15.0-1094.96
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-104.104.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 5.15.0-172.182
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-172.182~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-104.104.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-1048.51
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 5.15.0-1097.98
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1048.51~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-1048.51.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 5.15.0-1054.54
noble pending 6.8.0-1019.19
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-1054.54~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 5.15.0-1043.43
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-5.0
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-oracle-5.3
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.11
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-1099.105~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.0-1045.46~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
linux-oem
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
bionic ignored end of standard support
linux-oem-5.6
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oem-5.14
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
linux-raspi2
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
focal ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
focal DNE -
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble pending 6.8.0-2039.40
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
jammy pending 6.8.1-1044.45~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
linux-riscv
Release Status Version
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
questing released 6.17.0-14.14.1
focal ignored end of standard support
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
focal pending 5.15.0-1097.101~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104~22.04.1
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
noble pending 6.8.0-1025.26
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6
trusty DNE -
xenial DNE -
bionic DNE -
jammy pending 5.15.0-1066.70
linux
Release Status Version
bionic needed -
focal needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
questing released 6.17.0-14.14
jammy pending 5.15.0-172.182
noble pending 6.8.0-104.104
trusty ignored end of standard support, was needed
linux-aws
Release Status Version
bionic needed -
focal needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
questing released 6.17.0-1007.7
jammy pending 5.15.0-1102.109
noble pending 6.8.0-1048.51
trusty ignored end of standard support, was needed
linux-azure
Release Status Version
focal needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
jammy pending 5.15.0-1106.115
noble pending 6.8.0-1049.55
questing released 6.17.0-1008.8
bionic ignored end of standard support
trusty ignored end of standard support, was needed
linux-oracle
Release Status Version
bionic needed -
focal needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
xenial needed -
questing released 6.17.0-1007.7
noble pending 6.8.0-1045.46
trusty DNE -
jammy pending 5.15.0-1099.105
linux-raspi
Release Status Version
focal needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
questing released 6.17.0-1008.8
trusty DNE -
xenial DNE -
bionic DNE -
jammy pending 5.15.0-1096.99
noble pending 6.8.0-1049.53
linux-realtime
Release Status Version
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6
questing released 6.17.0-1006.7
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble pending 6.8.1-1044.45
jammy pending 5.15.0-1101.110
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
noble released 6.17.0-1011.11
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc6
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1008.8~24.04.1
upstream released 6.18~rc6
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14~24.04.1
questing DNE -
upstream released 6.18~rc6
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc6
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
upstream released 6.18~rc6
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.18~rc6
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
questing DNE -
upstream released 6.18~rc6

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.247-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.159-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.63-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.17.9-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.159-1~deb11u1 -

SUSE

Severity: Moderate
Product Status
Container suse/sl-micro/6.0/baremetal-os-container:latest Affected
Container suse/sl-micro/6.0/base-os-container:2.1.3-7.95 Image SL-Micro Affected
Container suse/sl-micro/6.0/kvm-os-container:2.1.3-6.115 Affected
Container suse/sl-micro/6.0/rt-os-container:2.1.3-7.146 Affected
Container suse/sl-micro/6.0/toolbox:latest Affected

Share

CVE-2025-40271 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy