Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.0

Ubuntu 22.04 Linux could allow unauthorized access

CVE-2025-1369 · published 9 days ago
Summary

A security weakness was found in several Linux packages used on Ubuntu 22.04, which could let an attacker gain unauthorized access to the system. The issue has been fixed in newer package versions. Install the latest updates for the affected Linux packages as soon as possible.

What to do
  • Update canonical linux to version 5.15.0-191.201.aikido.115.
  • Update canonical rootio-linux to version 5.15.0-191.201.aikido.115.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
Affected software
Ecosystem VendorProductAffected versions
Root:Ubuntu:22.04 canonical linux < 5.15.0-191.201.aikido.115
Fix: upgrade to 5.15.0-191.201.aikido.115
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-191.201.aikido.115
Fix: upgrade to 5.15.0-191.201.aikido.115
– escanav escan_anti-virus 7.0.32
cpe:2.3:a:escanav:escan_anti-virus:7.0.32:*:*:*:*:linux:*:*
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Original advisory text
CVE-2025-1369 in linux - Patched by Root
Root has patched CVE-2025-1369 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.0 Low
Exploitation
3% chance of attack within 30 days
Type
CWE-77Command Injection
CWE-78OS Command Injection
Timeline
Published9 Oct 2026
Updated15 Oct 2026
First seen5 Sep 2026
Sources
ROOT-OS-UBUNTU-2204-CVE-2025-1369 · OSV
CVE-2025-1369 · NVD
Track software like this
Free during beta