EUVD-2025-201201

| CVE-2025-40256
2025-12-04 416baaa9-dc9f-4396-8d5f-8c081fb06d67

Lifecycle Timeline

4
Patch Released
Mar 31, 2026 - 21:13 nvd
Patch available
Analysis Generated
Mar 15, 2026 - 16:35 vuln.today
EUVD ID Assigned
Mar 15, 2026 - 16:35 euvd
EUVD-2025-201201
CVE Published
Dec 04, 2025 - 16:16 nvd
N/A

Description

In the Linux kernel, the following vulnerability has been resolved: xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added In commit b441cf3f8c4b ("xfrm: delete x->tunnel as we delete x"), I missed the case where state creation fails between full initialization (->init_state has been called) and being inserted on the lists. In this situation, ->init_state has been called, so for IPcomp tunnels, the fallback tunnel has been created and added onto the lists, but the user state never gets added, because we fail before that. The user state doesn't go through __xfrm_state_delete, so we don't call xfrm_state_delete_tunnel for those states, and we end up leaking the FB tunnel. There are several codepaths affected by this: the add/update paths, in both net/key and xfrm, and the migrate code (xfrm_migrate, xfrm_state_migrate). A "proper" rollback of the init_state work would probably be doable in the add/update code, but for migrate it gets more complicated as multiple states may be involved. At some point, the new (not-inserted) state will be destroyed, so call xfrm_state_delete_tunnel during xfrm_state_gc_destroy. Most states will have their fallback tunnel cleaned up during __xfrm_state_delete, which solves the issue that b441cf3f8c4b (and other patches before it) aimed at. All states (including FB tunnels) will be removed from the lists once xfrm_state_fini has called flush_work(&xfrm_state_gc_work).

Analysis

In the Linux kernel, the following vulnerability has been resolved:

xfrm: also call xfrm_state_delete_tunnel at destroy time for states that were never added

In commit b441cf3f8c4b ("xfrm: delete x->tunnel as we delete x"), I missed the case where state creation fails between full initialization (->init_state has been called) and being inserted on the lists.

In this situation, ->init_state has been called, so for IPcomp tunnels, the fallback tunnel has been created and added onto the lists, but the user state never gets added, because we fail before that. The user state doesn't go through __xfrm_state_delete, so we don't call xfrm_state_delete_tunnel for those states, and we end up leaking the FB tunnel.

There are several codepaths affected by this: the add/update paths, in both net/key and xfrm, and the migrate code (xfrm_migrate, xfrm_state_migrate). A "proper" rollback of the init_state work would probably be doable in the add/update code, but for migrate it gets more complicated as multiple states may be involved.

At some point, the new (not-inserted) state will be destroyed, so call xfrm_state_delete_tunnel during xfrm_state_gc_destroy. Most states will have their fallback tunnel cleaned up during __xfrm_state_delete, which solves the issue that b441cf3f8c4b (and other patches before it) aimed at. All states (including FB tunnels) will be removed from the lists once xfrm_state_fini has called flush_work(&xfrm_state_gc_work).

Remediation

Monitor vendor advisories for patches. Apply mitigations such as network segmentation, access restrictions, and monitoring.

Priority Score

0
Low Medium High Critical
KEV: 0
EPSS: +0.0
CVSS: +0
POC: 0

Vendor Status

Ubuntu

Priority: Medium
linux-hwe
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.8.0-39.42~16.04.1
trusty DNE -
focal DNE -
linux-hwe-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-37.41~18.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-hwe-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-33.34~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-hwe-5.19
Release Status Version
jammy ignored superseded by linux-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.2
Release Status Version
jammy ignored superseded by linux-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.5
Release Status Version
jammy ignored superseded by linux-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-38.38~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected -
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-hwe-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
focal DNE -
xenial ignored end of standard support
linux-lts-xenial
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
trusty not-affected 4.4.0-13.29~14.04.1
upstream released 6.18~rc7, 6.17.10
xenial DNE -
bionic DNE -
focal DNE -
linux-kvm
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-1002.2
focal not-affected 5.4.0-1004.4
jammy not-affected 5.13.0-1004.4
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.4.0-1007.12
trusty DNE -
linux-allwinner-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-5.0
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1020.20~18.04.2
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-aws-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-aws-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1015.19~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-aws-5.19
Release Status Version
jammy ignored superseded by linux-aws-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.2
Release Status Version
jammy ignored superseded by linux-aws-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.5
Release Status Version
jammy ignored superseded by linux-aws-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-aws-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1009.9~22.04.2
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1007.7~24.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-aws-hwe
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.15.0-1031.33~16.04.1
trusty DNE -
bionic DNE -
focal DNE -
linux-azure-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-1082.92
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.3
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.4
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-azure-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1022.22~18.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-azure-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-azure-5.11
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.13
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-azure-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1007.8~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-5.19
Release Status Version
jammy ignored superseded by linux-azure-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.2
Release Status Version
jammy ignored superseded by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.5
Release Status Version
jammy ignored superseded by linux-azure-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-azure-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1012.12~24.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde
Release Status Version
focal ignored end of standard support
questing needed -
jammy not-affected 5.15.0-1019.24.1
noble not-affected 6.8.0-1041.48
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1019.24~20.04.1.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-fde-5.19
Release Status Version
jammy ignored superseded by linux-azure-fde-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-fde-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.2
Release Status Version
jammy ignored replaced by linux-azure-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-azure-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-fde-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1014.14~24.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.8.0-1013.14
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-azure-nvidia-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1003.3
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-bluefield
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1011.14
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-azure-edge
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-azure-5.3
trusty DNE -
xenial DNE -
focal DNE -
linux-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-92.102+fips1
noble not-affected 6.8.0-38.38+fips4
upstream released 6.18~rc7, 6.17.10
trusty DNE -
focal not-affected 5.4.0-1007.8
xenial not-affected 4.4.0-1001.1
bionic not-affected 4.15.0-1011.12
linux-aws-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1052.57+fips1
noble not-affected 6.8.0-1035.37+fips1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
bionic not-affected 4.15.0-2000.4
focal not-affected 5.4.0-1021.21+fips2
xenial DNE -
linux-azure-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1058.66+fips1
noble not-affected 6.8.0-1034.39+fips1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
bionic not-affected 4.15.0-1002.2
focal not-affected 5.4.0-1022.22+fips1
xenial DNE -
linux-gcp-fips
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1048.56+fips1
noble not-affected 6.8.0-1036.38+fips1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
bionic not-affected 4.15.0-1001.1
focal not-affected 5.4.0-1021.21+fips1
xenial DNE -
linux-gcp
Release Status Version
bionic ignored end of standard support
focal not-affected 5.4.0-1005.5
jammy not-affected 5.13.0-1005.6
noble not-affected 6.5.0-1007.7
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.10.0-1004.4
trusty DNE -
questing released 6.17.0-1007.7
linux-gcp-4.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 4.15.0-1071.81
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.3
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.4
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1021.21~18.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-gcp-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.13
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1006.9~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-gcp-5.19
Release Status Version
jammy ignored superseded by linux-gcp-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.2
Release Status Version
jammy ignored superseded by linux-gcp-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.5
Release Status Version
jammy ignored superseded by linux-gcp-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1010.11~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-gcp-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gcp-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gcp-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1007.7~24.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-gke
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1002.2
noble not-affected 6.8.0-1003.5
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial ignored end of standard support
bionic DNE -
linux-gke-4.15
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-gke-5.0
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gke-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop
Release Status Version
focal ignored end of kernel support
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1001.2
noble not-affected 6.8.0-1001.3
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-gkeop-5.4
Release Status Version
bionic ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
focal DNE -
linux-gkeop-5.15
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm
Release Status Version
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1004.5
jammy not-affected 5.15.0-1002.2
noble not-affected 6.5.0-1009.9
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1010.11~18.04.2
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-ibm-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1034.37~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-ibm-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-5.13
Release Status Version
focal ignored end of kernel support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iotg
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1004.6
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-intel-iotg-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1003.5~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-iot
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1001.3
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-intel-iot-realtime
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1021.26
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-22.22
noble not-affected 6.5.0-9.9.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-33.34~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-lowlatency-hwe-5.19
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.2
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.2
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.2
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.5
Release Status Version
jammy ignored superseded by linux-lowlatency-hwe-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-lowlatency-hwe-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-38.38.1~22.04.2
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-lowlatency-hwe-6.11
Release Status Version
jammy DNE -
noble ignored replaced by linux-hwe-6.14
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1005.5
noble not-affected 6.8.0-1007.7
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.2
Release Status Version
jammy ignored superseded by linux-nvidia-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.5
Release Status Version
jammy ignored superseded by linux-nvidia-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-nvidia-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1008.8~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-6.11
Release Status Version
jammy DNE -
noble ignored end of kernel support
plucky DNE -
questing DNE -
upstream ignored end of kernel support
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-lowlatency
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.8.0-1009.9.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-tegra
Release Status Version
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1013.13
noble not-affected 6.8.0-1003.3
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-nvidia-tegra-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1009.9~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-nvidia-tegra-igx
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 5.15.0-1001.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-5.0
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.3
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-oracle-5.3
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.4
trusty DNE -
xenial DNE -
focal DNE -
bionic ignored end of standard support
linux-oracle-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1021.21~18.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-oracle-5.8
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.11
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.11
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.13
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-5.15
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oracle-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1007.9~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-oracle-6.5
Release Status Version
jammy ignored superseded by linux-oracle-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oracle-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-1006.6~22.04.3
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oracle-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1007.7~24.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial ignored end of standard support
focal DNE -
bionic ignored end of standard support
linux-oem-5.6
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.10
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oem-5.10
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.13
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oem-5.13
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-5.14
trusty DNE -
xenial DNE -
bionic DNE -
focal ignored end of standard support
linux-oem-5.14
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-hwe-5.15
trusty DNE -
xenial DNE -
bionic DNE -
linux-oem-5.17
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.0
Release Status Version
jammy ignored superseded by linux-oem-6.1
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.1
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.1
Release Status Version
jammy ignored superseded by linux-oem-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.5
Release Status Version
jammy ignored superseded by linux-oem-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.8
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.11
Release Status Version
jammy DNE -
noble ignored superseded by linux-oem-6.14
plucky DNE -
questing DNE -
upstream ignored superseded by linux-oem-6.14
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1005.5
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-raspi2
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored replaced by linux-raspi
trusty DNE -
xenial ignored end of standard support
bionic ignored end of standard support
linux-raspi-5.4
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
bionic not-affected 5.4.0-1013.13~18.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
focal DNE -
linux-raspi-realtime
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.7.0-2001.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-realtime-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.1-1004.4~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-realtime-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble not-affected 6.14.0-1003.3~24.04.3
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv
Release Status Version
focal ignored end of standard support
jammy ignored end of kernel support
noble ignored replaced by linux-riscv-6.14
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
questing released 6.17.0-14.14.1
linux-riscv-5.8
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.11
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.11
Release Status Version
focal ignored end of standard support
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-5.13
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.15
Release Status Version
jammy DNE -
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.15.0-1015.17~20.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux-riscv-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.5
Release Status Version
jammy ignored superseded by linux-riscv-6.8
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-riscv-6.8
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.8
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
jammy not-affected 6.8.0-38.38.1~22.04.1
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-riscv-6.14
Release Status Version
jammy DNE -
plucky DNE -
questing DNE -
noble ignored superseded by linux-riscv-6.17, was needs-triage
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-5.19
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.2
Release Status Version
jammy ignored superseded by linux-starfive-6.5
noble DNE -
plucky DNE -
questing DNE -
upstream ignored superseded by linux-starfive-6.5
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-starfive-6.5
Release Status Version
jammy ignored end of kernel support
noble DNE -
plucky DNE -
questing DNE -
upstream ignored end of life
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx
Release Status Version
jammy DNE -
questing DNE -
noble not-affected 6.8.0-1008.9
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-xilinx-zynqmp
Release Status Version
noble DNE -
plucky DNE -
questing DNE -
focal not-affected 5.4.0-1020.24
jammy not-affected 5.15.0-1022.26
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
linux
Release Status Version
bionic not-affected 4.13.0-16.19
focal not-affected 5.4.0-9.12
jammy not-affected 5.13.0-19.19
noble not-affected 6.5.0-9.9
plucky ignored end of life, was needs-triage
trusty not-affected 3.11.0-12.19
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.4.0-2.16
questing released 6.17.0-14.14
linux-aws
Release Status Version
bionic not-affected 4.15.0-1001.1
focal not-affected 5.4.0-1005.5
jammy not-affected 5.13.0-1005.6
noble not-affected 6.5.0-1008.8
plucky ignored end of life, was needs-triage
trusty not-affected 4.4.0-1002.2
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.4.0-1001.10
questing released 6.17.0-1007.7
linux-azure
Release Status Version
focal not-affected 5.4.0-1006.6
jammy not-affected 5.13.0-1006.7
noble not-affected 6.5.0-1007.7
plucky ignored end of life, was needs-triage
trusty not-affected 4.15.0-1023.24~14.04.1
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.11.0-1015.15
questing released 6.17.0-1008.8
bionic ignored end of standard support
linux-oracle
Release Status Version
bionic not-affected 4.15.0-1008.10
focal not-affected 5.4.0-1005.5
jammy not-affected 5.13.0-1008.10
noble not-affected 6.5.0-1010.10
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
xenial not-affected 4.15.0-1008.10~16.04.1
questing released 6.17.0-1007.7
trusty DNE -
linux-raspi
Release Status Version
focal not-affected 5.4.0-1007.7
jammy not-affected 5.13.0-1008.9
noble not-affected 6.5.0-1005.7
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
trusty DNE -
xenial DNE -
bionic DNE -
questing released 6.17.0-1008.8
linux-realtime
Release Status Version
jammy not-affected 5.15.0-1006.6
noble not-affected 6.8.0-1008.19
plucky ignored end of life, was needs-triage
upstream released 6.18~rc7, 6.17.10
questing released 6.17.0-1006.7
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
linux-oem-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc7, 6.17.10
noble released 6.17.0-1011.11
linux-azure-fde-6.8
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
noble DNE -
plucky DNE -
questing DNE -
upstream released 6.18~rc7, 6.17.10
jammy not-affected 6.8.0-1046.53~22.04.1
linux-aws-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc7, 6.17.10
linux-gcp-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1008.8~24.04.1
upstream released 6.18~rc7, 6.17.10
linux-hwe-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14~24.04.1
upstream released 6.18~rc7, 6.17.10
linux-oracle-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble released 6.17.0-1007.7~24.04.1
upstream released 6.18~rc7, 6.17.10
linux-riscv-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
questing DNE -
noble not-affected 6.17.0-14.14.1~24.04.1
upstream released 6.18~rc7, 6.17.10
linux-azure-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble not-affected 6.17.0-1008.8~24.04.1
questing DNE -
upstream released 6.18~rc7, 6.17.10
linux-azure-fde-6.17
Release Status Version
trusty DNE -
xenial DNE -
bionic DNE -
focal DNE -
jammy DNE -
noble needed -
questing DNE -
upstream released 6.18~rc7, 6.17.10

Debian

linux
Release Status Fixed Version Urgency
bullseye not-affected - -
bullseye (security) fixed 5.10.251-1 -
bookworm not-affected - -
bookworm (security) fixed 6.1.164-1 -
trixie not-affected - -
trixie (security) fixed 6.12.74-2 -
forky fixed 6.19.6-2 -
sid fixed 6.19.8-1 -
(unstable) fixed 6.17.10-1 -

Share

EUVD-2025-201201 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy