Skip to main content

Ubuntu EUVDEUVD-2025-201157

| CVE-2025-40215
2025-12-04 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Severity by source

Ubuntu
MEDIUM
qualitative

Lifecycle Timeline

4
Patch released
Mar 16, 2026 - 16:00 nvd
Patch available
EUVD ID Assigned
Mar 15, 2026 - 16:35 euvd
EUVD-2025-201157
Analysis Generated
Mar 15, 2026 - 16:35 vuln.today
CVE Published
Dec 04, 2025 - 13:15 nvd
N/A

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

xfrm: delete x->tunnel as we delete x

The ipcomp fallback tunnels currently get deleted (from the various lists and hashtables) as the last user state that needed that fallback is destroyed (not deleted). If a reference to that user state still exists, the fallback state will remain on the hashtables/lists, triggering the WARN in xfrm_state_fini. Because of those remaining references, the fix in commit f75a2804da39 ("xfrm: destroy xfrm_state synchronously on net exit path") is not complete.

We recently fixed one such situation in TCP due to defered freeing of skbs (commit 9b6412e6979f ("tcp: drop secpath at the same time as we currently drop dst")). This can also happen due to IP reassembly: skbs with a secpath remain on the reassembly queue until netns destruction. If we can't guarantee that the queues are flushed by the time xfrm_state_fini runs, there may still be references to a (user) xfrm_state, preventing the timely deletion of the corresponding fallback state.

Instead of chasing each instance of skbs holding a secpath one by one, this patch fixes the issue directly within xfrm, by deleting the fallback state as soon as the last user state depending on it has been deleted. Destruction will still happen when the final reference is dropped.

A separate lockdep class for the fallback state is required since we're going to lock x->tunnel while x is locked.

Analysis

In the Linux kernel, the following vulnerability has been resolved:

xfrm: delete x->tunnel as we delete x

The ipcomp fallback tunnels currently get deleted (from the various lists and hashtables) as the last user state that needed that fallback is destroyed (not deleted). If a reference to that user state still exists, the fallback state will remain on the hashtables/lists, triggering the WARN in xfrm_state_fini. Because of those remaining references, the fix in commit f75a2804da39 ("xfrm: destroy xfrm_state synchronously on net exit path") is not complete.

We recently fixed one such situation in TCP due to defered freeing of skbs (commit 9b6412e6979f ("tcp: drop secpath at the same time as we currently drop dst")). This can also happen due to IP reassembly: skbs with a secpath remain on the reassembly queue until netns destruction. If we can't guarantee that the queues are flushed by the time xfrm_state_fini runs, there may still be references to a (user) xfrm_state, preventing the timely deletion of the corresponding fallback state.

Instead of chasing each instance of skbs holding a secpath one by one, this patch fixes the issue directly within xfrm, by deleting the fallback state as soon as the last user state depending on it has been deleted. Destruction will still happen when the final reference is dropped.

A separate lockdep class for the fallback state is required since we're going to lock x->tunnel while x is locked.

RemediationAI

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

CVE-2022-0847 HIGH POC
7.8 Mar 10

Linux kernel contains a flaw known as 'Dirty Pipe' where improper pipe buffer flag initialization allows unprivileged lo

CVE-2015-1328 HIGH POC
7.8 Nov 28

The overlayfs implementation in the linux (aka Linux kernel) package before 3.19.0-21.21 in Ubuntu through 15.04 does no

CVE-2017-7308 HIGH POC
7.8 Mar 29

The packet_set_ring function in net/packet/af_packet.c in the Linux kernel through 4.10.6 does not properly validate cer

CVE-2017-16995 HIGH POC
7.8 Dec 27

The check_alu_op function in kernel/bpf/verifier.c in the Linux kernel through 4.4 allows local users to cause a denial

CVE-2017-1000112 HIGH POC
7.0 Oct 05

Linux kernel: Exploitable memory corruption due to UFO to non-UFO path switch. Rated high severity (CVSS 7.0). Public ex

CVE-2015-8660 MEDIUM POC
6.7 Dec 28

The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr op

CVE-2012-0056 MEDIUM POC
6.9 Jan 27

The mem_write function in the Linux kernel before 3.2.2, when ASLR is disabled, does not properly check permissions when

CVE-2014-0038 MEDIUM POC
6.9 Feb 06

The compat_sys_recvmmsg function in net/compat.c in the Linux kernel before 3.13.2, when CONFIG_X86_X32 is enabled, allo

CVE-2016-8655 HIGH POC
7.8 Dec 08

Race condition in net/packet/af_packet.c in the Linux kernel through 4.8.12 allows local users to gain privileges or cau

CVE-2016-0728 HIGH POC
7.8 Feb 08

The join_session_keyring function in security/keys/process_keys.c in the Linux kernel before 4.4.1 mishandles object ref

CVE-2017-0561 CRITICAL POC
9.8 Apr 07

A remote code execution vulnerability in the Broadcom Wi-Fi firmware could enable a remote attacker to execute arbitrary

CVE-2022-2588 MEDIUM POC
5.3 Jan 08

It was discovered that the cls_route filter implementation in the Linux kernel would not remove an old filter from the h

Vendor StatusVendor

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial pending 4.15.0-247.259~16.04.1
trusty DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic pending 5.4.0-226.246~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-170.180~20.04.3
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 6.8.0-100.100~22.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-edge
Release Status Version
xenial ignored end of standard support
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty released 4.4.0-278.312~14.04.1
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux
Release Status Version
bionic pending 4.15.0-247.259
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-13.13
trusty ignored end of standard support, was needed
upstream released 6.16, 6.8.y, 6.14.y
focal pending 5.4.0-226.246
jammy released 5.15.0-170.180
xenial released 4.4.0-278.312
noble released 6.8.0-100.100
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic pending 4.15.0-1171.176
focal pending 5.4.0-1142.151
jammy released 5.15.0-1092.97
xenial released 4.4.0-1153.164
trusty DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 5.4.0-1155.165~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1100.107~20.04.2
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.16, 6.8.y, 6.14.y
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
xenial pending 4.15.0-1189.202~16.04.1
trusty DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure
Release Status Version
bionic ignored end of standard support
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
trusty pending 4.15.0-1197.212~14.04.1
xenial pending 4.15.0-1197.212~16.04.1
focal pending 5.4.0-1159.165
noble released 6.8.0-1046.52
jammy pending 5.15.0-1104.113
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
focal DNE -
bionic pending 4.15.0-1197.212
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
focal DNE -
bionic pending 5.4.0-1159.165~18.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.15.0-1104.113~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy pending 6.8.0-1046.52~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde
Release Status Version
focal ignored end of standard support
questing needs-triage -
jammy needed -
noble needed -
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble pending 6.8.0-1031.34
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.4.0-1114.121
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
xenial released 4.4.0-1122.129
trusty DNE -
noble released 6.8.0-100.100+fips1
jammy released 5.15.0-170.180+fips1
bionic pending 4.15.0-1144.156
focal pending 5.4.0-1129.139
upstream released 6.16, 6.8.y, 6.14.y
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
noble released 6.8.0-1046.49+fips1
focal pending 5.4.0-1155.165+fips1
bionic pending 4.15.0-2127.133
trusty DNE -
jammy released 5.15.0-1100.107+fips1
xenial DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
jammy pending 5.15.0-1104.113+fips1
noble released 6.8.0-1046.52+fips1
trusty DNE -
bionic pending 4.15.0-2106.112
focal pending 5.4.0-1159.165+fips1
xenial DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
jammy released 5.15.0-1100.109+fips1
noble released 6.8.0-1047.50+fips1
bionic pending 4.15.0-2090.96
focal pending 5.4.0-1158.167+fips1
trusty DNE -
xenial DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp
Release Status Version
bionic ignored end of standard support
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
upstream released 6.16, 6.8.y, 6.14.y
focal pending 5.4.0-1158.167
jammy released 5.15.0-1100.109
xenial pending 4.15.0-1182.199~16.04.1
noble released 6.8.0-1047.50
trusty DNE -
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 4.15.0-1182.199
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 5.4.0-1158.167~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
focal released 5.15.0-1100.109~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 6.8.0-1047.50~22.04.2
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble needed -
upstream released 6.16, 6.8.y, 6.14.y
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy released 5.15.0-1096.102
trusty DNE -
xenial ignored end of standard support
bionic DNE -
noble released 6.8.0-1043.48
upstream released 6.16, 6.8.y, 6.14.y
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1083.91
noble released 6.8.0-1030.33
upstream released 6.16, 6.8.y, 6.14.y
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal pending 5.4.0-1101.106
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1094.97
noble released 6.8.0-1044.44
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic pending 5.4.0-1101.106~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal released 5.15.0-1094.97~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1044.44~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 5.15.0-1095.101
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal released 5.15.0-1095.101~20.04.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.4.0-1059.62
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 5.15.0-1092.94
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-170.180
noble released 6.8.0-100.100.1
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-170.180~20.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-100.100.1~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
noble released 6.8.0-1046.49
jammy released 5.15.0-1095.96
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1046.49~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble released 6.8.0-1046.49.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
noble pending 6.8.0-1017.17
jammy released 5.15.0-1052.52
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1052.52~20.04.2
upstream released 6.16, 6.8.y, 6.14.y
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 5.15.0-1041.41
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 5.4.0-1153.163~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1097.103~20.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-1043.44~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
linux-oem-5.6
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.10
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic pending 5.4.0-1138.151~18.04.1
trusty DNE -
xenial DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble released 6.8.0-2037.38
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.1-1041.42~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored end of life, was needed
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
questing not-affected 6.17.0-4.4.1
trusty DNE -
xenial DNE -
bionic DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal released 5.15.0-1095.99~20.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy released 6.8.0-100.100~22.04.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
upstream released 6.16, 6.8.y, 6.14.y
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
plucky ignored end of life, was needs-triage
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble released 6.8.0-1023.24
upstream released 6.16, 6.8.y, 6.14.y
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal pending 5.4.0-1073.77
trusty DNE -
xenial DNE -
bionic DNE -
jammy released 5.15.0-1064.68
upstream released 6.16, 6.8.y, 6.14.y
linux-aws
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
upstream released 6.16, 6.8.y, 6.14.y
bionic pending 4.15.0-1189.202
jammy released 5.15.0-1100.107
focal pending 5.4.0-1155.165
noble released 6.8.0-1046.49
trusty released 4.4.0-1152.158
xenial released 4.4.0-1190.205
linux-oracle
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.16.0-1001.1
noble released 6.8.0-1043.44
trusty DNE -
jammy released 5.15.0-1097.103
bionic pending 4.15.0-1151.162
focal pending 5.4.0-1153.163
xenial pending 4.15.0-1151.162~16.04.1
upstream released 6.16, 6.8.y, 6.14.y
linux-raspi
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.17.0-1003.3
jammy pending 5.15.0-1095.98
focal pending 5.4.0-1138.151
trusty DNE -
xenial DNE -
bionic DNE -
noble released 6.8.0-1047.51
upstream released 6.16, 6.8.y, 6.14.y
linux-realtime
Release Status Version
plucky ignored end of life, was needs-triage
questing not-affected 6.17.0-1001.2
noble released 6.8.1-1041.42
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy released 5.15.0-1099.108
upstream released 6.16, 6.8.y, 6.14.y
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy needed -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1005.5~24.04.2
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.3
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14~24.04.1
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1004.4~24.04.2
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needs-triage -
questing DNE -
upstream released 6.16, 6.8.y, 6.14.y

Debian

linux
Release Status Fixed Version Urgency
bullseye fixed 5.10.249-1 -
bullseye (security) fixed 5.10.251-1 -
bookworm fixed 6.1.162-1 -
bookworm (security) fixed 6.1.164-1 -
trixie fixed 6.12.63-1 -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.16.3-1 -
linux-6.1
Release Status Fixed Version Urgency
bullseye (security) fixed 6.1.164-1~deb11u1 -
bullseye fixed 6.1.162-1~deb11u1 -

Share

EUVD-2025-201157 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy