CVE-2025-40281

| EUVD-2025-201574
2025-12-06 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Lifecycle Timeline

4
Patch Released
Mar 16, 2026 - 15:00 nvd
Patch available
Analysis Generated
Mar 15, 2026 - 17:37 vuln.today
EUVD ID Assigned
Mar 15, 2026 - 17:37 euvd
EUVD-2025-201574
CVE Published
Dec 06, 2025 - 22:15 nvd
N/A

Description

In the Linux kernel, the following vulnerability has been resolved: sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto syzbot reported a possible shift-out-of-bounds [1] Blamed commit added rto_alpha_max and rto_beta_max set to 1000. It is unclear if some sctp users are setting very large rto_alpha and/or rto_beta. In order to prevent user regression, perform the test at run time. Also add READ_ONCE() annotations as sysctl values can change under us. [1] UBSAN: shift-out-of-bounds in net/sctp/transport.c:509:41 shift exponent 64 is too large for 32-bit type 'unsigned int' CPU: 0 UID: 0 PID: 16704 Comm: syz.2.2320 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:233 [inline] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 lib/ubsan.c:494 sctp_transport_update_rto.cold+0x1c/0x34b net/sctp/transport.c:509 sctp_check_transmitted+0x11c4/0x1c30 net/sctp/outqueue.c:1502 sctp_outq_sack+0x4ef/0x1b20 net/sctp/outqueue.c:1338 sctp_cmd_process_sack net/sctp/sm_sideeffect.c:840 [inline] sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1372 [inline]

Analysis

In the Linux kernel, the following vulnerability has been resolved:

sctp: prevent possible shift-out-of-bounds in sctp_transport_update_rto

syzbot reported a possible shift-out-of-bounds [1]

Blamed commit added rto_alpha_max and rto_beta_max set to 1000.

It is unclear if some sctp users are setting very large rto_alpha and/or rto_beta.

In order to prevent user regression, perform the test at run time.

Also add READ_ONCE() annotations as sysctl values can change under us.

[1]

UBSAN: shift-out-of-bounds in net/sctp/transport.c:509:41 shift exponent 64 is too large for 32-bit type 'unsigned int' CPU: 0 UID: 0 PID: 16704 Comm: syz.2.2320 Not tainted syzkaller #0 PREEMPT(full) Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 Call Trace: <TASK> __dump_stack lib/dump_stack.c:94 [inline] dump_stack_lvl+0x16c/0x1f0 lib/dump_stack.c:120 ubsan_epilogue lib/ubsan.c:233 [inline] __ubsan_handle_shift_out_of_bounds+0x27f/0x420 lib/ubsan.c:494 sctp_transport_update_rto.cold+0x1c/0x34b net/sctp/transport.c:509 sctp_check_transmitted+0x11c4/0x1c30 net/sctp/outqueue.c:1502 sctp_outq_sack+0x4ef/0x1b20 net/sctp/outqueue.c:1338 sctp_cmd_process_sack net/sctp/sm_sideeffect.c:840 [inline] sctp_cmd_interpreter net/sctp/sm_sideeffect.c:1372 [inline]

Remediation

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Priority Score

0
Low Medium High Critical
KEV: 0
EPSS: +0.1
CVSS: +0
POC: 0

Vendor Status

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
xenial needed -
trusty DNE -
focal DNE -
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux
Release Status Version
bionic needed -
focal needed -
plucky ignored end of life, was needs-triage
trusty not-affected 3.11.0-12.19
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
xenial needed -
jammy pending 5.15.0-172.182
noble pending 6.8.0-104.104
questing released 6.17.0-14.14
linux-hwe-5.15
Release Status Version
focal pending 5.15.0-172.182~20.04.1
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104~22.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-hwe-edge
Release Status Version
xenial ignored end of standard support
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty ignored end of standard support, was needed
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
xenial DNE -
bionic DNE -
focal DNE -
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
focal needed -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
xenial needed -
jammy pending 5.15.0-1094.99
trusty DNE -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-aws-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
focal pending 5.15.0-1102.109~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial needed -
trusty DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure
Release Status Version
bionic ignored end of standard support
focal needed -
plucky ignored end of life, was needs-triage
jammy pending 5.15.0-1106.115
trusty ignored end of standard support, was needed
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
xenial needed -
questing released 6.17.0-1008.8
noble pending 6.8.0-1049.55
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
jammy pending 6.8.0-1049.55~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde
Release Status Version
focal ignored end of standard support
questing needed -
jammy needed -
noble needed -
plucky ignored end of life, was needs-triage
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
jammy pending 5.15.0-172.182+fips1
noble pending 6.8.0-104.104+fips1
trusty DNE -
bionic needed -
focal needed -
xenial needed -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
jammy pending 5.15.0-1102.109+fips1
trusty DNE -
bionic needed -
focal needed -
xenial DNE -
noble pending 6.8.0-1048.51+fips1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
bionic needed -
focal needed -
noble pending 6.8.0-1049.55+fips1
trusty DNE -
jammy pending 5.15.0-1106.115+fips1
xenial DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
noble pending 6.8.0-1050.53+fips1
trusty DNE -
bionic needed -
focal needed -
jammy pending 5.15.0-1102.111+fips1
xenial DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp
Release Status Version
bionic ignored end of standard support
focal needed -
plucky ignored end of life, was needs-triage
xenial needed -
jammy pending 5.15.0-1102.111
noble pending 6.8.0-1050.53
trusty DNE -
questing released 6.17.0-1007.7
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.15.0-1102.111~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy pending 6.8.0-1050.53~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy pending 5.15.0-1098.104
trusty DNE -
xenial ignored end of standard support
bionic DNE -
noble pending 6.8.0-1046.51
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
jammy pending 5.15.0-1085.93
noble pending 6.8.0-1033.36
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
jammy pending 5.15.0-1096.99
noble pending 6.8.0-1047.47
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.15.0-1096.99~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy pending 6.8.0-1047.47~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy pending 5.15.0-1097.103
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal pending 5.15.0-1097.103~20.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 5.15.0-1094.96
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
jammy pending 5.15.0-172.182
noble pending 6.8.0-104.104.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
focal pending 5.15.0-172.182~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104.1~22.04.1
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
noble pending 6.8.0-1048.51
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 5.15.0-1097.98
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
jammy pending 6.8.0-1048.51~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
noble pending 6.8.0-1048.51.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
jammy pending 5.15.0-1054.54
noble pending 6.8.0-1019.19
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.15.0-1054.54~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy pending 5.15.0-1043.43
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oracle-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.3
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oracle-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal pending 5.15.0-1099.105~20.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-1045.46~22.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oem
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
linux-oem-5.6
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored end of life, was needed
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble pending 6.8.0-2039.40
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.1-1044.45~22.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
questing released 6.17.0-14.14.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal pending 5.15.0-1097.101~20.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy pending 6.8.0-104.104~22.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
plucky ignored end of life, was needs-triage
noble pending 6.8.0-1025.26
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
jammy pending 5.15.0-1066.70
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-aws
Release Status Version
bionic needed -
focal needed -
plucky ignored end of life, was needs-triage
trusty ignored end of standard support, was needed
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
xenial needed -
jammy pending 5.15.0-1102.109
noble pending 6.8.0-1048.51
questing released 6.17.0-1007.7
linux-oracle
Release Status Version
bionic needed -
focal needed -
plucky ignored end of life, was needs-triage
xenial needed -
questing released 6.17.0-1007.7
noble pending 6.8.0-1045.46
jammy pending 5.15.0-1099.105
trusty DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-raspi
Release Status Version
focal needed -
plucky ignored end of life, was needs-triage
questing released 6.17.0-1008.8
jammy pending 5.15.0-1096.99
trusty DNE -
xenial DNE -
bionic DNE -
noble pending 6.8.0-1049.53
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-realtime
Release Status Version
plucky ignored end of life, was needs-triage
questing released 6.17.0-1006.7
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble pending 6.8.1-1044.45
jammy pending 5.15.0-1101.110
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
noble released 6.17.0-1011.11
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1008.8~24.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14~24.04.1
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
questing DNE -
upstream released 6.18~rc6, 6.8.y, 6.14.y, 6.17.9

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.247-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.159-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.63-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.17.9-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.159-1~deb11u1 -

Share

CVE-2025-40281 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy