Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2025-21704: Linux kernel USB driver can corrupt memory
CVE-2025-21704 · published 1 year ago
Summary
The USB driver in the Linux kernel may read beyond the data it receives, which can corrupt memory. This can happen when a USB device sends fragmented messages and the system tries to process them. Update the kernel to the latest version or apply the provided patches to fix the issue.
What to do
- Update canonical linux-aws to version 4.4.0-1152.158.
- Update canonical linux-azure to version 4.15.0-1197.212~14.04.1.
- Update canonical linux-lts-xenial to version 4.4.0-278.312~14.04.1.
- Update canonical linux to version 4.4.0-278.312.
- Update canonical linux-aws to version 4.4.0-1190.205.
- Update canonical linux-aws-hwe to version 4.15.0-1189.202~16.04.1.
- Update canonical linux-azure to version 4.15.0-1197.212~16.04.1.
- Update canonical linux-gcp to version 4.15.0-1182.199~16.04.1.
- Update canonical linux-hwe to version 4.15.0-247.259~16.04.1.
- Update canonical linux-kvm to version 4.4.0-1153.164.
- Update canonical linux-oracle to version 4.15.0-1151.162~16.04.1.
- Update canonical linux-fips to version 4.4.0-1122.129.
- Update canonical linux to version 4.15.0-247.259.
- Update canonical linux-aws to version 4.15.0-1189.202.
- Update canonical linux-aws-5.4 to version 5.4.0-1146.156~18.04.1.
- Update canonical linux-azure-4.15 to version 4.15.0-1197.212.
- Update canonical linux-azure-5.4 to version 5.4.0-1151.158~18.04.1.
- Update canonical linux-gcp-4.15 to version 4.15.0-1182.199.
- Update canonical linux-gcp-5.4 to version 5.4.0-1149.158~18.04.1.
- Update canonical linux-hwe-5.4 to version 5.4.0-216.236~18.04.1.
- Update canonical linux-ibm-5.4 to version 5.4.0-1092.97~18.04.1.
- Update canonical linux-kvm to version 4.15.0-1171.176.
- Update canonical linux-oracle to version 4.15.0-1151.162.
- Update canonical linux-oracle-5.4 to version 5.4.0-1144.154~18.04.1.
- Update canonical linux-raspi-5.4 to version 5.4.0-1129.142~18.04.1.
- Update canonical linux-aws-fips to version 4.15.0-2127.133.
- Update canonical linux-azure-fips to version 4.15.0-2106.112.
- Update canonical linux-fips to version 4.15.0-1144.156.
- Update canonical linux-gcp-fips to version 4.15.0-2090.96.
- Update canonical linux to version 5.4.0-216.236.
- Update canonical linux-aws to version 5.4.0-1146.156.
- Update canonical linux-aws-5.15 to version 5.15.0-1084.91~20.04.1.
- Update canonical linux-azure to version 5.4.0-1151.158.
- Update canonical linux-azure-5.15 to version 5.15.0-1089.98~20.04.1.
- Update canonical linux-bluefield to version 5.4.0-1105.112.
- Update canonical linux-gcp to version 5.4.0-1149.158.
- Update canonical linux-gcp-5.15 to version 5.15.0-1083.92~20.04.1.
- Update canonical linux-ibm to version 5.4.0-1092.97.
- Update canonical linux-ibm-5.15 to version 5.15.0-1076.79~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1079.85~20.04.1.
- Update canonical linux-kvm to version 5.4.0-1133.142.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-140.150~20.04.1.
- Update canonical linux-oracle to version 5.4.0-1144.154.
- Update canonical linux-oracle-5.15 to version 5.15.0-1081.87~20.04.1.
- Update canonical linux-raspi to version 5.4.0-1129.142.
- Update canonical linux-riscv-5.15 to version 5.15.0-1079.83~20.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.4.0-1064.68.
- Update canonical linux-hwe-5.15 to version 5.15.0-142.152~20.04.1.
- Update canonical linux-iot to version 5.4.0-1051.54.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
- Update canonical linux-aws-fips to version 5.4.0-1146.156+fips1.
- Update canonical linux-azure-fips to version 5.4.0-1151.158+fips1.
- Update canonical linux-fips to version 5.4.0-1120.130.
- Update canonical linux-gcp-fips to version 5.4.0-1149.158+fips1.
- Update canonical linux to version 5.15.0-140.150.
- Update canonical linux-aws to version 5.15.0-1084.91.
- Update canonical linux-aws-6.8 to version 6.8.0-1035.37~22.04.1.
- Update canonical linux-azure to version 5.15.0-1089.98.
- Update canonical linux-azure-6.8 to version 6.8.0-1034.39~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1083.92.
- Update canonical linux-gcp-6.8 to version 6.8.0-1036.38~22.04.1.
- Update canonical linux-gke to version 5.15.0-1081.87.
- Update canonical linux-gkeop to version 5.15.0-1066.74.
- Update canonical linux-hwe-6.8 to version 6.8.0-78.78~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1076.79.
- Update canonical linux-ibm-6.8 to version 6.8.0-1033.33~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1079.85.
- Update canonical linux-kvm to version 5.15.0-1080.85.
- Update canonical linux-lowlatency to version 5.15.0-140.150.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-78.78.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1078.79.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1035.38~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1037.37.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1026.26.
- Update canonical linux-oracle to version 5.15.0-1081.87.
- Update canonical linux-oracle-6.8 to version 6.8.0-1032.33~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1078.81.
- Update canonical linux-riscv-6.8 to version 6.8.0-78.78~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1050.54.
- Update canonical linux-bluefield to version 5.15.0-1066.68.
- Update canonical linux-aws-fips to version 5.15.0-1084.91+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1089.98+fips1.
- Update canonical linux-fips to version 5.15.0-140.150+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1083.92+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1077.79.
- Update canonical linux-realtime to version 5.15.0-1084.93.
- Update canonical linux-realtime-6.8 to version 6.8.1-1030.31~22.04.1.
- Update canonical linux to version 6.8.0-78.78.
- Update canonical linux-aws to version 6.8.0-1035.37.
- Update canonical linux-azure to version 6.8.0-1034.39.
- Update canonical linux-azure-6.11 to version 6.11.0-1015.15~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1022.23.
- Update canonical linux-gcp to version 6.8.0-1036.38.
- Update canonical linux-gcp-6.11 to version 6.11.0-1015.15~24.04.1.
- Update canonical linux-gke to version 6.8.0-1032.36.
- Update canonical linux-gkeop to version 6.8.0-1019.21.
- Update canonical linux-hwe-6.11 to version 6.11.0-26.26~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1033.33.
- Update canonical linux-lowlatency to version 6.8.0-78.78.1.
- Update canonical linux-lowlatency-hwe-6.11 to version 6.11.0-1014.15~24.04.1.
- Update canonical linux-nvidia to version 6.8.0-1035.38.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1010.10.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1035.38.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1009.9.
- Update canonical linux-oem-6.11 to version 6.11.0-1022.22.
- Update canonical linux-oracle to version 6.8.0-1032.33.
- Update canonical linux-raspi to version 6.8.0-1035.39.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2028.29.
- Update canonical linux-realtime to version 6.8.1-1030.31.
- Update canonical linux to version 6.8.0-138.138.aikido.86.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
- Update canonical linux-azure-fde to version 5.15.0-1089.98.1.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update debian linux to version 6.1.129-1.
- Update debian linux to version 6.12.16-1.
- Update linux kernel to version 6.13.4.
- Update linux linux to version a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 2.6.13, < 5.4.291 >= 5.5, < 5.10.235 >= 5.11, < 5.15.179 >= 5.16, < 6.1.129 >= 6.2, < 6.6.79 >= 6.7, < 6.12.16 >= 6.13, < 6.13.4 2.6.12 6.14 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws |
< 4.4.0-1152.158 Fix: upgrade to 4.4.0-1152.158
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure |
< 4.15.0-1197.212~14.04.1 Fix: upgrade to 4.15.0-1197.212~14.04.1
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial |
< 4.4.0-278.312~14.04.1 Fix: upgrade to 4.4.0-278.312~14.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux |
< 4.4.0-278.312 Fix: upgrade to 4.4.0-278.312
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws |
< 4.4.0-1190.205 Fix: upgrade to 4.4.0-1190.205
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe |
< 4.15.0-1189.202~16.04.1 Fix: upgrade to 4.15.0-1189.202~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure |
< 4.15.0-1197.212~16.04.1 Fix: upgrade to 4.15.0-1197.212~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp |
< 4.15.0-1182.199~16.04.1 Fix: upgrade to 4.15.0-1182.199~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe |
< 4.15.0-247.259~16.04.1 Fix: upgrade to 4.15.0-247.259~16.04.1
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm |
< 4.4.0-1153.164 Fix: upgrade to 4.4.0-1153.164
|
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle |
< 4.15.0-1151.162~16.04.1 Fix: upgrade to 4.15.0-1151.162~16.04.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips |
< 4.4.0-1122.129 Fix: upgrade to 4.4.0-1122.129
|
| Ubuntu:Pro:18.04:LTS | canonical | linux |
< 4.15.0-247.259 Fix: upgrade to 4.15.0-247.259
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws |
< 4.15.0-1189.202 Fix: upgrade to 4.15.0-1189.202
|
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 |
< 5.4.0-1146.156~18.04.1 Fix: upgrade to 5.4.0-1146.156~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 |
< 4.15.0-1197.212 Fix: upgrade to 4.15.0-1197.212
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 |
< 5.4.0-1151.158~18.04.1 Fix: upgrade to 5.4.0-1151.158~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 |
< 4.15.0-1182.199 Fix: upgrade to 4.15.0-1182.199
|
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 |
< 5.4.0-1149.158~18.04.1 Fix: upgrade to 5.4.0-1149.158~18.04.1
|
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 |
< 5.4.0-216.236~18.04.1 Fix: upgrade to 5.4.0-216.236~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 |
< 5.4.0-1092.97~18.04.1 Fix: upgrade to 5.4.0-1092.97~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm |
< 4.15.0-1171.176 Fix: upgrade to 4.15.0-1171.176
|
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle |
< 4.15.0-1151.162 Fix: upgrade to 4.15.0-1151.162
|
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 |
< 5.4.0-1144.154~18.04.1 Fix: upgrade to 5.4.0-1144.154~18.04.1
|
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 |
< 5.4.0-1129.142~18.04.1 Fix: upgrade to 5.4.0-1129.142~18.04.1
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips |
< 4.15.0-2127.133 Fix: upgrade to 4.15.0-2127.133
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips |
< 4.15.0-2106.112 Fix: upgrade to 4.15.0-2106.112
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips |
< 4.15.0-1144.156 Fix: upgrade to 4.15.0-1144.156
|
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips |
< 4.15.0-2090.96 Fix: upgrade to 4.15.0-2090.96
|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:20.04:LTS | canonical | linux |
< 5.4.0-216.236 Fix: upgrade to 5.4.0-216.236
|
Showing 50 of 205. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-aws |
< 5.4.0-1146.156 Fix: upgrade to 5.4.0-1146.156
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1084.91~20.04.1 Fix: upgrade to 5.15.0-1084.91~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure |
< 5.4.0-1151.158 Fix: upgrade to 5.4.0-1151.158
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1089.98~20.04.1 Fix: upgrade to 5.15.0-1089.98~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-bluefield |
< 5.4.0-1105.112 Fix: upgrade to 5.4.0-1105.112
|
| Ubuntu:20.04:LTS | canonical | linux-gcp |
< 5.4.0-1149.158 Fix: upgrade to 5.4.0-1149.158
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1083.92~20.04.1 Fix: upgrade to 5.15.0-1083.92~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-ibm |
< 5.4.0-1092.97 Fix: upgrade to 5.4.0-1092.97
|
| Ubuntu:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1076.79~20.04.1 Fix: upgrade to 5.15.0-1076.79~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1079.85~20.04.1 Fix: upgrade to 5.15.0-1079.85~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-kvm |
< 5.4.0-1133.142 Fix: upgrade to 5.4.0-1133.142
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-140.150~20.04.1 Fix: upgrade to 5.15.0-140.150~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle |
< 5.4.0-1144.154 Fix: upgrade to 5.4.0-1144.154
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1081.87~20.04.1 Fix: upgrade to 5.15.0-1081.87~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-raspi |
< 5.4.0-1129.142 Fix: upgrade to 5.4.0-1129.142
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1079.83~20.04.1 Fix: upgrade to 5.15.0-1079.83~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.4.0-1064.68 Fix: upgrade to 5.4.0-1064.68
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-142.152~20.04.1 Fix: upgrade to 5.15.0-142.152~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot |
< 5.4.0-1051.54 Fix: upgrade to 5.4.0-1051.54
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1039.39~20.04.1 Fix: upgrade to 5.15.0-1039.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips |
< 5.4.0-1146.156+fips1 Fix: upgrade to 5.4.0-1146.156+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips |
< 5.4.0-1151.158+fips1 Fix: upgrade to 5.4.0-1151.158+fips1
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips |
< 5.4.0-1120.130 Fix: upgrade to 5.4.0-1120.130
|
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips |
< 5.4.0-1149.158+fips1 Fix: upgrade to 5.4.0-1149.158+fips1
|
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-140.150 Fix: upgrade to 5.15.0-140.150
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1084.91 Fix: upgrade to 5.15.0-1084.91
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1035.37~22.04.1 Fix: upgrade to 6.8.0-1035.37~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1089.98 Fix: upgrade to 5.15.0-1089.98
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1034.39~22.04.1 Fix: upgrade to 6.8.0-1034.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1083.92 Fix: upgrade to 5.15.0-1083.92
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1036.38~22.04.1 Fix: upgrade to 6.8.0-1036.38~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1081.87 Fix: upgrade to 5.15.0-1081.87
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1066.74 Fix: upgrade to 5.15.0-1066.74
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-78.78~22.04.1 Fix: upgrade to 6.8.0-78.78~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1076.79 Fix: upgrade to 5.15.0-1076.79
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1033.33~22.04.1 Fix: upgrade to 6.8.0-1033.33~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1079.85 Fix: upgrade to 5.15.0-1079.85
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1080.85 Fix: upgrade to 5.15.0-1080.85
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-140.150 Fix: upgrade to 5.15.0-140.150
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-78.78.1~22.04.1 Fix: upgrade to 6.8.0-78.78.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1078.79 Fix: upgrade to 5.15.0-1078.79
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1035.38~22.04.1 Fix: upgrade to 6.8.0-1035.38~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1037.37 Fix: upgrade to 5.15.0-1037.37
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1026.26 Fix: upgrade to 5.15.0-1026.26
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1081.87 Fix: upgrade to 5.15.0-1081.87
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1032.33~22.04.1 Fix: upgrade to 6.8.0-1032.33~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1078.81 Fix: upgrade to 5.15.0-1078.81
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-78.78~22.04.1 Fix: upgrade to 6.8.0-78.78~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1050.54 Fix: upgrade to 5.15.0-1050.54
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1066.68 Fix: upgrade to 5.15.0-1066.68
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1084.91+fips1 Fix: upgrade to 5.15.0-1084.91+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1089.98+fips1 Fix: upgrade to 5.15.0-1089.98+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-140.150+fips1 Fix: upgrade to 5.15.0-140.150+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1083.92+fips1 Fix: upgrade to 5.15.0-1083.92+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1077.79 Fix: upgrade to 5.15.0-1077.79
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1084.93 Fix: upgrade to 5.15.0-1084.93
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1030.31~22.04.1 Fix: upgrade to 6.8.1-1030.31~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-78.78 Fix: upgrade to 6.8.0-78.78
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1035.37 Fix: upgrade to 6.8.0-1035.37
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1034.39 Fix: upgrade to 6.8.0-1034.39
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1015.15~24.04.1 Fix: upgrade to 6.11.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1022.23 Fix: upgrade to 6.8.0-1022.23
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1036.38 Fix: upgrade to 6.8.0-1036.38
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1015.15~24.04.1 Fix: upgrade to 6.11.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1032.36 Fix: upgrade to 6.8.0-1032.36
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1019.21 Fix: upgrade to 6.8.0-1019.21
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 |
< 6.11.0-26.26~24.04.1 Fix: upgrade to 6.11.0-26.26~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1033.33 Fix: upgrade to 6.8.0-1033.33
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-78.78.1 Fix: upgrade to 6.8.0-78.78.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 |
< 6.11.0-1014.15~24.04.1 Fix: upgrade to 6.11.0-1014.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1010.10 Fix: upgrade to 6.11.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1035.38.1 Fix: upgrade to 6.8.0-1035.38.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1009.9 Fix: upgrade to 6.8.0-1009.9
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1022.22 Fix: upgrade to 6.11.0-1022.22
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1032.33 Fix: upgrade to 6.8.0-1032.33
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1035.39 Fix: upgrade to 6.8.0-1035.39
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2028.29 Fix: upgrade to 6.8.0-2028.29
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1030.31 Fix: upgrade to 6.8.1-1030.31
|
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1089.98.1 Fix: upgrade to 5.15.0-1089.98.1
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| – | linux | linux |
< a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2 2.6.12 |
| Debian:12 | debian | linux |
< 6.1.129-1 Fix: upgrade to 6.1.129-1
|
| Debian:13 | debian | linux |
< 6.12.16-1 Fix: upgrade to 6.12.16-1
|
| Linux | linux | kernel |
>= 6.13.0, < 6.13.4 Fix: upgrade to 6.13.4
|
Original advisory text
usb: cdc-acm: Check control transfer buffer size before access
In the Linux kernel, the following vulnerability has been resolved: usb: cdc-acm: Check control transfer buffer size before access If the first fragment is shorter than struct usb_cdc_notification, we can't calculate an expected_size. Log an error and discard the notification instead of reading lengths from memory outside the received data, which can lead to memory corruption when the expected_size decreases between fragments, causing `expected_size - acm->nb_index` to wrap. This issue has been present since the beginning of git history; however, it only leads to memory corruption since commit ea2583529cd1 ("cdc-acm: reassemble fragmented notifications"). A mitigating factor is that acm_ctrl_irq() can only execute after userspace has opened /dev/ttyACM*; but if ModemManager is running, ModemManager will do that automatically depending on the USB device's vendor/product IDs and its other interfaces.
References
- https://git.kernel.org/stable/c/383d516a0ebc8641372b521c8cb717f0f1834831 URL
- https://git.kernel.org/stable/c/6abb510251e75f875797d8983a830e6731fa281c URL
- https://git.kernel.org/stable/c/7828e9363ac4d23b02419bf2a45b9f1d9fb35646 URL
- https://git.kernel.org/stable/c/871619c2b78fdfe05afb4e8ba548678687beb812 URL
- https://git.kernel.org/stable/c/90dd2f1b7342b9a671a5ea4160f408037b92b118 URL
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html URL
- https://git.kernel.org/stable/c/e563b01208f4d1f609bcab13333b6c0e24ce6a01 URL
- https://git.kernel.org/stable/c/f64079bef6a8a7823358c3f352ea29a617844636 URL
- https://project-zero.issues.chromium.org/issues/395107243 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21704... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-21704 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html URL
- https://git.kernel.org/stable/c/a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2 URL
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html URL
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html URL
- https://security-tracker.debian.org/tracker/CVE-2025-21704 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-21704 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-21704 Third Party Advisory
- https://git.kernel.org/linus/e563b01208f4d1f609bcab13333b6c0e24ce6a01 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7510-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7511-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7511-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7512-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7517-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7518-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7511-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7517-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7517-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7539-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7540-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7510-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7516-9 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7593-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7602-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7640-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7719-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7703-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7737-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8070-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8070-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8070-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8112-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8112-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8112-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8112-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8112-5 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-787Out-of-bounds Write
Timeline
Published22 Feb 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-21704 · NVD
UBUNTU-CVE-2025-21704 · OSV
CVE-2025-21704 · MITRE
DEBIAN-CVE-2025-21704 · OSV
CVE-2025-21704 · OSV
Track software like this
Free during beta