EUVD-2025-18585

| CVE-2025-38068 HIGH
2025-06-18 416baaa9-dc9f-4396-8d5f-8c081fb06d67
7.8
CVSS 3.1
Share

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Lifecycle Timeline

4
Analysis Generated
Mar 14, 2026 - 22:49 vuln.today
EUVD ID Assigned
Mar 14, 2026 - 22:49 euvd
EUVD-2025-18585
Patch Released
Mar 14, 2026 - 22:49 nvd
Patch available
CVE Published
Jun 18, 2025 - 10:15 nvd
HIGH 7.8

Description

In the Linux kernel, the following vulnerability has been resolved: crypto: lzo - Fix compression buffer overrun Unlike the decompression code, the compression code in LZO never checked for output overruns. It instead assumes that the caller always provides enough buffer space, disregarding the buffer length provided by the caller. Add a safe compression interface that checks for the end of buffer before each write. Use the safe interface in crypto/lzo.

Analysis

A buffer overrun vulnerability exists in the Linux kernel's LZO compression implementation (crypto/lzo) where the compression code fails to validate output buffer boundaries before writing data, unlike the decompression counterpart. This allows a local attacker with low privileges to trigger a heap/stack buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability affects all Linux kernel versions using the vulnerable LZO compression code path in cryptographic operations.

Technical Context

LZO (Lempel-Ziv-Oberhauber) is a lossless data compression library used in the Linux kernel's crypto subsystem for compression operations. The vulnerability (CWE-787: Out-of-bounds Write) stems from asymmetric design between compression and decompression functions: while decompression properly checks output buffer boundaries, compression assumes the caller provides sufficient buffer space and ignores the buffer_length parameter passed by the caller. This creates a classic out-of-bounds write condition. The affected code is in crypto/lzo.c, specifically in the compression interface that wraps the underlying LZO library calls. The fix introduces a 'safe compression interface' that validates buffer boundaries before each write operation, mirroring the defensive design of the decompression path.

Affected Products

Linux kernel all versions prior to the patch date (CVE-2025-38068 suggests recent disclosure, likely 2025). Affected code path: crypto/lzo.c compression functions. Specific CPE would be CPE:/o:linux:linux_kernel (all versions lacking the buffer boundary check fix). Distributions affected include but are not limited to: Red Hat Enterprise Linux, Ubuntu, Debian, SUSE Linux, Fedora, and any distribution shipping unpatched Linux kernels using the crypto/lzo module. The vulnerability is triggered through any userspace application that calls kernel LZO compression via crypto API (e.g., LUKS disk encryption with LZO, dm-crypt, or custom applications using the kernel crypto interface). Specific products: cryptographic services, full-disk encryption systems, and any kernel module or userspace tool invoking crypto_compress with LZO algorithm.

Remediation

Apply Linux kernel security patch that adds buffer boundary checking to crypto/lzo compression functions. Patch details: implement the 'safe compression interface' described in the CVE, validating buffer end before each write operation. Specific patch: search Linux kernel git repository (kernel.org) for commits addressing CVE-2025-38068 in crypto/lzo.c (likely in stable branches 6.1.x, 6.6.x, 6.12.x depending on kernel version). For distribution-specific patches: Red Hat (RHSA advisories), Ubuntu (USN advisories), Debian (DSA advisories) - check each vendor's security advisory database. Immediate mitigation: if LZO compression is not required, disable the crypto/lzo module (modprobe -r lzo_compress lzo_decompress) or recompile kernel without CONFIG_CRYPTO_LZO. Workaround: use alternative compression algorithms (e.g., DEFLATE, LZ4, ZSTD) for crypto operations that do not require LZO specifically. Patch availability: expected in Linux stable kernels (6.1-stable, 6.6-stable, mainline) within days of disclosure.

Priority Score

39
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +39
POC: 0

Vendor Status

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
focal DNE -
questing DNE -
xenial needed -
bionic ignored end of standard support
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
linux-hwe-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-hwe-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-hwe-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-152.162~20.04.1
questing DNE -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
jammy released 6.8.0-100.100~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-hwe-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-hwe-6.14, was needed
questing DNE -
linux-hwe-edge
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
xenial ignored end of standard support
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty ignored end of standard support, was needed
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-kvm
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 5.15.0-1086.91
trusty DNE -
questing DNE -
bionic needed -
focal needed -
xenial needed -
upstream released 6.15~rc1
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-5.0
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-aws-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
linux-aws-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-aws-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-aws-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1090.97~20.04.1
questing DNE -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
bionic DNE -
focal DNE -
questing DNE -
xenial needed -
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
linux-azure-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
linux-azure-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-azure-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-azure-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1094.103~20.04.1
questing DNE -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
jammy pending 6.8.0-1046.52~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-azure-6.14, was needed
questing DNE -
linux-azure-fde
Release Status Version
oracular DNE -
jammy needed -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
plucky not-affected 6.14.0-1014.14
noble needed -
questing needs-triage -
focal ignored end of standard support
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal needed -
upstream released 6.15~rc1
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble pending 6.8.0-1031.34
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal needed -
upstream released 6.15~rc1
linux-azure-edge
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-fips
Release Status Version
oracular DNE -
plucky DNE -
xenial needed -
trusty DNE -
jammy released 5.15.0-152.162+fips1
questing DNE -
noble released 6.8.0-100.100+fips1
upstream released 6.15~rc1
bionic needed -
focal needed -
linux-aws-fips
Release Status Version
oracular DNE -
plucky DNE -
noble released 6.8.0-1046.49+fips1
upstream released 6.15~rc1
trusty DNE -
jammy released 5.15.0-1090.97+fips1
questing DNE -
bionic needed -
focal needed -
xenial DNE -
linux-azure-fips
Release Status Version
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
jammy released 5.15.0-1094.103+fips1
trusty DNE -
questing DNE -
noble released 6.8.0-1046.52+fips1
bionic needed -
focal needed -
xenial DNE -
linux-gcp-fips
Release Status Version
oracular DNE -
plucky DNE -
bionic needed -
focal needed -
upstream released 6.15~rc1
trusty DNE -
jammy released 5.15.0-1090.99+fips1
questing DNE -
noble released 6.8.0-1047.50+fips1
xenial DNE -
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
linux-gcp-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-gcp-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-gcp-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-gcp-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1090.99~20.04.1
questing DNE -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
jammy released 6.8.0-1047.50~22.04.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-gcp-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-gcp-6.14, was needed
questing DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
noble released 6.8.0-1043.48
jammy released 5.15.0-1087.93
trusty DNE -
xenial ignored end of standard support
bionic DNE -
questing DNE -
linux-gke-4.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gke-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
noble released 6.8.0-1030.33
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1073.81
questing DNE -
linux-gkeop-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-ibm
Release Status Version
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
noble released 6.8.0-1044.44
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1084.87
questing DNE -
focal needed -
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
upstream released 6.15~rc1
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1083.86~20.04.1
questing DNE -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
linux-intel-iotg
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 5.15.0-1085.91
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1085.91~20.04.1
questing DNE -
upstream released 6.15~rc1
linux-iot
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal needed -
upstream released 6.15~rc1
linux-intel-iot-realtime
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-1083.85
questing DNE -
upstream released 6.15~rc1
linux-lowlatency
Release Status Version
plucky DNE -
oracular ignored end of life, was needed
noble released 6.8.0-100.100.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-152.162
questing DNE -
upstream released 6.15~rc1
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-152.162~20.04.1
questing DNE -
upstream released 6.15~rc1
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-100.100.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored replaced by linux-hwe-6.14, was needed
questing DNE -
upstream released 6.15~rc1
linux-nvidia
Release Status Version
oracular DNE -
plucky DNE -
noble released 6.8.0-1046.49
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-1085.86
questing DNE -
upstream released 6.15~rc1
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble released 6.8.0-1046.49.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-nvidia-tegra
Release Status Version
oracular DNE -
plucky DNE -
noble pending 6.8.0-1017.17
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-1043.43
questing DNE -
upstream released 6.15~rc1
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1043.43~20.04.1
questing DNE -
upstream released 6.15~rc1
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-1032.32
questing DNE -
upstream released 6.15~rc1
linux-oracle-5.0
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-oracle-5.3
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
bionic needed -
upstream released 6.15~rc1
linux-oracle-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oracle-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oracle-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1088.94~20.04.1
questing DNE -
upstream released 6.15~rc1
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
jammy released 6.8.0-1043.44~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
questing DNE -
bionic ignored end of standard support
linux-oem-5.6
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.10
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.13
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.14
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-oem-6.14, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-oem-6.11
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble ignored superseded by linux-oem-6.14, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-oem-6.14
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble released 6.14.0-1012.12
questing DNE -
upstream released 6.15~rc1
linux-raspi2
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
questing DNE -
focal ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
bionic needed -
trusty DNE -
xenial DNE -
focal DNE -
questing DNE -
linux-raspi-realtime
Release Status Version
jammy DNE -
oracular DNE -
plucky DNE -
noble released 6.8.0-2037.38
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
linux-riscv
Release Status Version
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
oracular ignored end of life, was needed
plucky released 6.14.0-32.32.1
questing not-affected 6.17.0-4.4.1
upstream released 6.15~rc1
focal ignored end of standard support
linux-riscv-5.8
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-riscv-5.11
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
questing DNE -
focal ignored end of standard support
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1085.89~20.04.1
questing DNE -
upstream released 6.15~rc1
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
upstream released 6.15~rc1
jammy released 6.8.0-100.100~22.04.1
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
oracular DNE -
plucky DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
questing DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
oracular DNE -
plucky DNE -
focal needed -
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1054.58
questing DNE -
upstream released 6.15~rc1
linux
Release Status Version
trusty ignored end of standard support, was needed
upstream released 6.15~rc1
bionic needed -
focal needed -
noble released 6.8.0-100.100
jammy released 5.15.0-152.162
plucky released 6.14.0-32.32
oracular ignored end of life, was needed
questing not-affected 6.15.0-3.3
xenial needed -
linux-aws
Release Status Version
trusty ignored end of standard support, was needed
upstream released 6.15~rc1
noble released 6.8.0-1046.49
oracular ignored end of life, was needed
jammy released 5.15.0-1090.97
plucky released 6.14.0-1013.13
questing not-affected 6.16.0-1001.1
bionic needed -
focal needed -
xenial needed -
linux-azure
Release Status Version
upstream released 6.15~rc1
noble released 6.8.0-1046.52
jammy released 5.15.0-1094.103
oracular ignored end of life, was needed
plucky released 6.14.0-1012.12
questing not-affected 6.16.0-1001.1
focal needed -
xenial needed -
bionic ignored end of standard support
trusty ignored end of standard support, was needed
linux-gcp
Release Status Version
upstream released 6.15~rc1
oracular ignored end of life, was needed
focal needed -
xenial needed -
noble released 6.8.0-1047.50
trusty DNE -
jammy released 5.15.0-1090.99
plucky released 6.14.0-1016.17
questing not-affected 6.16.0-1001.1
bionic ignored end of standard support
linux-oracle
Release Status Version
noble released 6.8.0-1043.44
oracular ignored end of life, was needed
jammy released 5.15.0-1088.94
trusty DNE -
plucky released 6.14.0-1013.13
questing not-affected 6.16.0-1001.1
bionic needed -
focal needed -
xenial needed -
upstream released 6.15~rc1
linux-raspi
Release Status Version
upstream released 6.15~rc1
focal needed -
noble released 6.8.0-1047.51
jammy released 5.15.0-1084.87
trusty DNE -
xenial DNE -
bionic DNE -
oracular ignored end of life, was needed
plucky released 6.14.0-1014.14
questing not-affected 6.17.0-1003.3
linux-realtime
Release Status Version
noble released 6.8.1-1041.42
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
oracular ignored end of life, was needed
jammy released 5.15.0-1090.99
plucky released 6.14.0-1012.12
questing not-affected 6.17.0-1001.2
upstream released 6.15~rc1
linux-intel
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
noble ignored end of kernel support, was needed
questing DNE -
linux-riscv-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
oracular DNE -
plucky DNE -
noble released 6.14.0-32.32.1~24.04.1
upstream released 6.15~rc1
questing DNE -
linux-ibm-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble DNE -
oracular DNE -
plucky DNE -
upstream released 6.15~rc1
questing DNE -
jammy released 6.8.0-1044.44~22.04.1
linux-aws-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble released 6.14.0-1013.13~24.04.1
questing DNE -
upstream released 6.15~rc1
linux-gcp-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.15~rc1
noble released 6.14.0-1016.17~24.04.1
questing DNE -
linux-hwe-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.15~rc1
noble not-affected -
questing DNE -
linux-oracle-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
noble released 6.14.0-1013.13~24.04.1
questing DNE -
upstream released 6.15~rc1
linux-nvidia-6.11
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.15~rc1
noble ignored end of kernel support, was needed
linux-realtime-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
upstream released 6.15~rc1
noble released 6.14.0-1012.12~24.04.1
questing DNE -
linux-realtime-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble DNE -
plucky DNE -
upstream released 6.15~rc1
jammy released 6.8.1-1041.42~22.04.1
questing DNE -
linux-azure-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-1012.12~24.04.1
plucky DNE -
questing DNE -
upstream released 6.15~rc1
linux-azure-fde-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.14.0-1014.14~24.04.1
plucky DNE -
questing DNE -
upstream released 6.15~rc1
linux-azure-nvidia-6.14
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.15~rc1
noble released 6.14.0-1007.7
linux-xilinx
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky not-affected -
questing DNE -
upstream released 6.15~rc1
noble released 6.8.0-1023.24
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5
plucky DNE -
questing DNE -
upstream released 6.15~rc1
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.15~rc1
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5~24.04.2
questing DNE -
upstream released 6.15~rc1
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.3
questing DNE -
upstream released 6.15~rc1
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14~24.04.1
upstream released 6.15~rc1
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-1004.4~24.04.2
upstream released 6.15~rc1
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
upstream released 6.15~rc1
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-1008.8~24.04.1
upstream released 6.15~rc1
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needs-triage -
questing DNE -
upstream released 6.15~rc1

Debian

linux
Release Status Fixed Version Urgency
bullseye vulnerable 5.10.223-1 -
bullseye (security) vulnerable 5.10.251-1 -
bookworm fixed 6.1.147-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.73-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.12.32-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.153-1~deb11u1 -

Share

EUVD-2025-18585 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy