EUVD-2025-201157

| CVE-2025-40215
2025-12-04 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Lifecycle Timeline

4
Patch Released
Mar 16, 2026 - 16:00 nvd
Patch available
Analysis Generated
Mar 15, 2026 - 16:35 vuln.today
EUVD ID Assigned
Mar 15, 2026 - 16:35 euvd
EUVD-2025-201157
CVE Published
Dec 04, 2025 - 13:15 nvd
N/A

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: delete x->tunnel as we delete x The ipcomp fallback tunnels currently get deleted (from the various lists and hashtables) as the last user state that needed that fallback is destroyed (not deleted). If a reference to that user state still exists, the fallback state will remain on the hashtables/lists, triggering the WARN in xfrm_state_fini. Because of those remaining references, the fix in commit f75a2804da39 ("xfrm: destroy xfrm_state synchronously on net exit path") is not complete. We recently fixed one such situation in TCP due to defered freeing of skbs (commit 9b6412e6979f ("tcp: drop secpath at the same time as we currently drop dst")). This can also happen due to IP reassembly: skbs with a secpath remain on the reassembly queue until netns destruction. If we can't guarantee that the queues are flushed by the time xfrm_state_fini runs, there may still be references to a (user) xfrm_state, preventing the timely deletion of the corresponding fallback state. Instead of chasing each instance of skbs holding a secpath one by one, this patch fixes the issue directly within xfrm, by deleting the fallback state as soon as the last user state depending on it has been deleted. Destruction will still happen when the final reference is dropped. A separate lockdep class for the fallback state is required since we're going to lock x->tunnel while x is locked.

Analysis

In the Linux kernel, the following vulnerability has been resolved:

xfrm: delete x->tunnel as we delete x

The ipcomp fallback tunnels currently get deleted (from the various lists and hashtables) as the last user state that needed that fallback is destroyed (not deleted). If a reference to that user state still exists, the fallback state will remain on the hashtables/lists, triggering the WARN in xfrm_state_fini. Because of those remaining references, the fix in commit f75a2804da39 ("xfrm: destroy xfrm_state synchronously on net exit path") is not complete.

We recently fixed one such situation in TCP due to defered freeing of skbs (commit 9b6412e6979f ("tcp: drop secpath at the same time as we currently drop dst")). This can also happen due to IP reassembly: skbs with a secpath remain on the reassembly queue until netns destruction. If we can't guarantee that the queues are flushed by the time xfrm_state_fini runs, there may still be references to a (user) xfrm_state, preventing the timely deletion of the corresponding fallback state.

Instead of chasing each instance of skbs holding a secpath one by one, this patch fixes the issue directly within xfrm, by deleting the fallback state as soon as the last user state depending on it has been deleted. Destruction will still happen when the final reference is dropped.

A separate lockdep class for the fallback state is required since we're going to lock x->tunnel while x is locked.

Remediation

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Priority Score

0
Low Medium High Critical
KEV: 0
EPSS: +0.1
CVSS: +0
POC: 0

Vendor Status

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial pending 4.15.0-247.259~16.04.1
trusty DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic pending 5.4.0-226.246~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-170.180~20.04.3
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 6.8.0-100.100~22.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-edge
Release Status Version
xenial ignored end of standard support
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty released 4.4.0-278.312~14.04.1
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux
Release Status Version
bionic pending 4.15.0-247.259
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-13.13
trusty ignored end of standard support, was needed
upstream released 6.16, 6.8.y, 6.14.y
focal pending 5.4.0-226.246
jammy released 5.15.0-170.180
xenial released 4.4.0-278.312
noble released 6.8.0-100.100
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic pending 4.15.0-1171.176
focal pending 5.4.0-1142.151
jammy released 5.15.0-1092.97
xenial released 4.4.0-1153.164
trusty DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 5.4.0-1155.165~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1100.107~20.04.2
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.16, 6.8.y, 6.14.y
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial pending 4.15.0-1189.202~16.04.1
trusty DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure
Release Status Version
bionic ignored end of standard support
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
trusty pending 4.15.0-1197.212~14.04.1
xenial pending 4.15.0-1197.212~16.04.1
focal pending 5.4.0-1159.165
noble released 6.8.0-1046.52
jammy pending 5.15.0-1104.113
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
focal DNE -
bionic pending 4.15.0-1197.212
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
focal DNE -
bionic pending 5.4.0-1159.165~18.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.15.0-1104.113~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy pending 6.8.0-1046.52~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde
Release Status Version
focal ignored end of standard support
questing needs-triage -
jammy needed -
noble needed -
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble pending 6.8.0-1031.34
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.4.0-1114.121
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
xenial released 4.4.0-1122.129
trusty DNE -
noble released 6.8.0-100.100+fips1
jammy released 5.15.0-170.180+fips1
bionic pending 4.15.0-1144.156
focal pending 5.4.0-1129.139
upstream released 6.16, 6.8.y, 6.14.y
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
noble released 6.8.0-1046.49+fips1
focal pending 5.4.0-1155.165+fips1
bionic pending 4.15.0-2127.133
trusty DNE -
jammy released 5.15.0-1100.107+fips1
xenial DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
jammy pending 5.15.0-1104.113+fips1
noble released 6.8.0-1046.52+fips1
trusty DNE -
bionic pending 4.15.0-2106.112
focal pending 5.4.0-1159.165+fips1
xenial DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
jammy released 5.15.0-1100.109+fips1
noble released 6.8.0-1047.50+fips1
bionic pending 4.15.0-2090.96
focal pending 5.4.0-1158.167+fips1
trusty DNE -
xenial DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp
Release Status Version
bionic ignored end of standard support
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
upstream released 6.16, 6.8.y, 6.14.y
focal pending 5.4.0-1158.167
jammy released 5.15.0-1100.109
xenial pending 4.15.0-1182.199~16.04.1
noble released 6.8.0-1047.50
trusty DNE -
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 4.15.0-1182.199
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 5.4.0-1158.167~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
focal released 5.15.0-1100.109~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 6.8.0-1047.50~22.04.2
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.16, 6.8.y, 6.14.y
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy released 5.15.0-1096.102
trusty DNE -
xenial ignored end of standard support
bionic DNE -
noble released 6.8.0-1043.48
upstream released 6.16, 6.8.y, 6.14.y
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1083.91
noble released 6.8.0-1030.33
upstream released 6.16, 6.8.y, 6.14.y
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal pending 5.4.0-1101.106
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1094.97
noble released 6.8.0-1044.44
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic pending 5.4.0-1101.106~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal released 5.15.0-1094.97~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1044.44~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 5.15.0-1095.101
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal released 5.15.0-1095.101~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.4.0-1059.62
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 5.15.0-1092.94
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-170.180
noble released 6.8.0-100.100.1
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-170.180~20.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-100.100.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
noble released 6.8.0-1046.49
jammy released 5.15.0-1095.96
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble released 6.8.0-1046.49.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
noble pending 6.8.0-1017.17
jammy released 5.15.0-1052.52
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1052.52~20.04.2
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 5.15.0-1041.41
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 5.4.0-1153.163~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1097.103~20.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1043.44~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
linux-oem-5.6
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic pending 5.4.0-1138.151~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble released 6.8.0-2037.38
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.1-1041.42~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
questing not-affected 6.17.0-4.4.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1095.99~20.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-100.100~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
upstream released 6.16, 6.8.y, 6.14.y
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble released 6.8.0-1023.24
upstream released 6.16, 6.8.y, 6.14.y
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.4.0-1073.77
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1064.68
upstream released 6.16, 6.8.y, 6.14.y
linux-aws
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 4.15.0-1189.202
jammy released 5.15.0-1100.107
focal pending 5.4.0-1155.165
noble released 6.8.0-1046.49
trusty released 4.4.0-1152.158
xenial released 4.4.0-1190.205
linux-oracle
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
noble released 6.8.0-1043.44
trusty DNE -
jammy released 5.15.0-1097.103
bionic pending 4.15.0-1151.162
focal pending 5.4.0-1153.163
xenial pending 4.15.0-1151.162~16.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-raspi
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.17.0-1003.3
jammy pending 5.15.0-1095.98
focal pending 5.4.0-1138.151
trusty DNE -
xenial DNE -
bionic DNE -
noble released 6.8.0-1047.51
upstream released 6.16, 6.8.y, 6.14.y
linux-realtime
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.17.0-1001.2
noble released 6.8.1-1041.42
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-1099.108
upstream released 6.16, 6.8.y, 6.14.y
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5~24.04.2
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.3
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14~24.04.1
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.2
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needs-triage -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.249-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.162-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.63-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.16.3-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.162-1~deb11u1 -

Share

EUVD-2025-201157 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy