Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.4
CVE-2025-21738: Linux kernel could write beyond buffer, risking memory corruption
CVE-2025-21738 · published 1 year ago
Summary
The Linux kernel's disk handling code could write past the space it has reserved when processing certain special disk commands. This may allow an attacker with local access to corrupt memory, potentially leading to system instability or escalation of privileges. Install the latest kernel updates from your distribution to apply the fix.
What to do
- Update linux kernel to version 6.13.3.
- Update canonical linux-aws-6.8 to version 6.8.0-1032.34~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1034.39~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1033.35~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-64.67~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1029.29~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-64.67.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1031.34~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1029.30~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-64.67~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1025.26~22.04.1.
- Update canonical linux to version 6.8.0-64.67.
- Update canonical linux-aws to version 6.8.0-1032.34.
- Update canonical linux-azure to version 6.8.0-1034.39.
- Update canonical linux-azure-6.11 to version 6.11.0-1015.15~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1022.23.
- Update canonical linux-gcp to version 6.8.0-1033.35.
- Update canonical linux-gcp-6.11 to version 6.11.0-1015.15~24.04.1.
- Update canonical linux-gke to version 6.8.0-1028.32.
- Update canonical linux-gkeop to version 6.8.0-1015.17.
- Update canonical linux-hwe-6.11 to version 6.11.0-26.26~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1029.29.
- Update canonical linux-lowlatency to version 6.8.0-64.67.1.
- Update canonical linux-lowlatency-hwe-6.11 to version 6.11.0-1014.15~24.04.1.
- Update canonical linux-nvidia to version 6.8.0-1031.34.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1010.10.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1031.34.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1008.8.
- Update canonical linux-oem-6.11 to version 6.11.0-1022.22.
- Update canonical linux-oem-6.8 to version 6.8.0-1031.31.
- Update canonical linux-oracle to version 6.8.0-1029.30.
- Update canonical linux-raspi to version 6.8.0-1031.35.
- Update canonical linux-xilinx to version 6.8.0-1017.18.
- Update canonical linux-fips to version 6.8.0-78.78+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2026.27.
- Update canonical linux-realtime to version 6.8.1-1025.26.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
- Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update debian linux to version 6.1.129-1.
- Update debian linux to version 6.12.15-1.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux linux to version a8f8cf87059ed1905c2a5c72f8b39a4f57b11b4c or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Linux | linux | kernel |
>= 6.13.0, < 6.13.3 Fix: upgrade to 6.13.3
|
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
Showing 50 of 221. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-fde-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1032.34~22.04.1 Fix: upgrade to 6.8.0-1032.34~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1034.39~22.04.1 Fix: upgrade to 6.8.0-1034.39~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1033.35~22.04.1 Fix: upgrade to 6.8.0-1033.35~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-64.67~22.04.1 Fix: upgrade to 6.8.0-64.67~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1029.29~22.04.1 Fix: upgrade to 6.8.0-1029.29~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg | All versions |
| Ubuntu:22.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-64.67.1~22.04.1 Fix: upgrade to 6.8.0-64.67.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1031.34~22.04.1 Fix: upgrade to 6.8.0-1031.34~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1029.30~22.04.1 Fix: upgrade to 6.8.0-1029.30~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-64.67~22.04.1 Fix: upgrade to 6.8.0-64.67~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1025.26~22.04.1 Fix: upgrade to 6.8.1-1025.26~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-64.67 Fix: upgrade to 6.8.0-64.67
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1032.34 Fix: upgrade to 6.8.0-1032.34
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1034.39 Fix: upgrade to 6.8.0-1034.39
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1015.15~24.04.1 Fix: upgrade to 6.11.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1022.23 Fix: upgrade to 6.8.0-1022.23
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1033.35 Fix: upgrade to 6.8.0-1033.35
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1015.15~24.04.1 Fix: upgrade to 6.11.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1028.32 Fix: upgrade to 6.8.0-1028.32
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1015.17 Fix: upgrade to 6.8.0-1015.17
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 |
< 6.11.0-26.26~24.04.1 Fix: upgrade to 6.11.0-26.26~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1029.29 Fix: upgrade to 6.8.0-1029.29
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-64.67.1 Fix: upgrade to 6.8.0-64.67.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 |
< 6.11.0-1014.15~24.04.1 Fix: upgrade to 6.11.0-1014.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1031.34 Fix: upgrade to 6.8.0-1031.34
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1010.10 Fix: upgrade to 6.11.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1031.34.1 Fix: upgrade to 6.8.0-1031.34.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1008.8 Fix: upgrade to 6.8.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1022.22 Fix: upgrade to 6.11.0-1022.22
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 |
< 6.8.0-1031.31 Fix: upgrade to 6.8.0-1031.31
|
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1029.30 Fix: upgrade to 6.8.0-1029.30
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1031.35 Fix: upgrade to 6.8.0-1031.35
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1017.18 Fix: upgrade to 6.8.0-1017.18
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-78.78+fips1 Fix: upgrade to 6.8.0-78.78+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2026.27 Fix: upgrade to 6.8.0-2026.27
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1025.26 Fix: upgrade to 6.8.1-1025.26
|
| – | linux | linux_kernel |
< 6.1.129 >= 6.2, < 6.6.78 >= 6.7, < 6.12.14 >= 6.13, < 6.13.3 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | linux | linux |
< a8f8cf87059ed1905c2a5c72f8b39a4f57b11b4c 2.6.22 |
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-186.196.root.io.103 < 5.15.0-186.196.aikido.104 < 5.15.0-185.195.root.io.101 Fix: upgrade to 5.15.0-186.196.root.io.103
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-136.136.root.io.83
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Debian:12 | debian | linux |
< 6.1.129-1 Fix: upgrade to 6.1.129-1
|
| Debian:13 | debian | linux |
< 6.12.15-1 Fix: upgrade to 6.12.15-1
|
Original advisory text
CVE-2025-21738 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA command set to ATA_NOP, and protocol set to ATA_PROT_PIO, can cause ata_pio_sector() to write outside the allocated buffer, overwriting random memory. While a ATA device is supposed to abort a ATA_NOP command, there does seem to be a bug either in libata-sff or QEMU, where either this status is not set, or the status is cleared before read by ata_sff_hsm_move(). Anyway, that is most likely a separate bug. Looking at __atapi_pio_bytes(), it already has a safety check to ensure that __atapi_pio_bytes() cannot write outside the allocated buffer. Add a similar check to ata_pio_sector(), such that also ata_pio_sector() cannot write outside the allocated buffer.
References
- https://ubuntu.com/security/notices/USN-7521-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7651-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7651-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7651-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7651-1 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21738... Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/linus/6e74e53b34b6dec5a50e1404e2680852ec6768d2 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-21738 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-21738 Third Party Advisory
- https://git.kernel.org/stable/c/0a17a9944b8d89ef03946121241870ac53ddaf45 Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-21738 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7652-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7651-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7521-2 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-784472.html URL
- https://security-tracker.debian.org/tracker/CVE-2025-21738 Vendor Advisory
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html URL
- https://git.kernel.org/stable/c/0dd5aade301a10f4b329fa7454fdcc2518741902 Third Party Advisory
- https://git.kernel.org/stable/c/6e74e53b34b6dec5a50e1404e2680852ec6768d2 Third Party Advisory
- https://git.kernel.org/stable/c/a8f8cf87059ed1905c2a5c72f8b39a4f57b11b4c Third Party Advisory
- https://git.kernel.org/stable/c/d5e6e3000309359eae2a17117aa6e3c44897bf6c Third Party Advisory
- https://ubuntu.com/security/notices/USN-7653-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7651-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7737-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
8.4
High
Timeline
Published27 Feb 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-21738 · NVD
CVE-2025-21738 · MITRE
UBUNTU-CVE-2025-21738 · OSV
CVE-2025-21738 · OSV
DEBIAN-CVE-2025-21738 · OSV
Track software like this
Free during beta