Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.4

CVE-2025-37952: Linux kernel can let attackers gain full control

CVE-2025-37952 · published 1 day ago
Summary

The core Linux operating system code used in Ubuntu 24.04 and related packages has a weakness that could let a malicious user obtain complete administrative rights on the server. This could lead to data theft, system tampering, or service disruption. Install the latest kernel updates from your distribution’s standard update channel as soon as possible to close the gap.

What to do
  • Update debian rootio-linux to version 6.1.164-1.root.io.108.
  • Update canonical rootio-linux to version 6.8.0-110.110.root.io.63.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.73.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
  • Update canonical linux-oem-6.14 to version 6.14.0-1010.10.
  • Update canonical linux-oracle to version 6.8.0-1043.44.
  • Update canonical linux-oracle-6.14 to version 6.14.0-1011.11~24.04.1.
  • Update canonical linux-raspi to version 6.8.0-1047.51.
  • Update canonical linux-riscv-6.14 to version 6.14.0-28.28.1~24.04.1.
  • Update canonical linux-xilinx to version 6.8.0-1023.24.
  • Update canonical linux-aws-fips to version 6.8.0-1046.49+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1046.52+fips1.
  • Update canonical linux-fips to version 6.8.0-100.100+fips1.
  • Update canonical linux-gcp-fips to version 6.8.0-1047.50+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2037.38.
  • Update canonical linux-realtime to version 6.8.1-1041.42.
  • Update canonical linux-realtime-6.14 to version 6.14.0-1010.10~24.04.1.
  • Update canonical linux-aws-6.8 to version 6.8.0-1046.49~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1047.50~22.04.2.
  • Update canonical linux-hwe-6.8 to version 6.8.0-100.100~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1044.44~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-100.100.1~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1046.49~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1043.44~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-100.100~22.04.1.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1041.42~22.04.1.
  • Update canonical linux to version 6.8.0-100.100.
  • Update canonical linux-aws to version 6.8.0-1046.49.
  • Update canonical linux-aws-6.14 to version 6.14.0-1011.11~24.04.1.
  • Update canonical linux-azure to version 6.8.0-1046.52.
  • Update canonical linux-gcp to version 6.8.0-1047.50.
  • Update canonical linux-gcp-6.14 to version 6.14.0-1014.15~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1043.48.
  • Update canonical linux-gkeop to version 6.8.0-1030.33.
  • Update canonical linux-ibm to version 6.8.0-1044.44.
  • Update canonical linux-lowlatency to version 6.8.0-100.100.1.
  • Update canonical linux-nvidia to version 6.8.0-1046.49.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1046.49.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
  • Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
  • Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
  • Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
  • Update canonical rootio-linux to version 6.8.0-107.107.root.io.60.
  • Update canonical rootio-linux to version 6.8.0-110.110.root.io.62.
  • Update canonical rootio-linux to version 6.8.0-111.111.root.io.66.
  • Update canonical rootio-linux to version 6.8.0-117.117.root.io.67.
  • Update canonical rootio-linux to version 6.8.0-117.117.root.io.68.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.70.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.71.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.79.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
  • Update canonical linux-bluefield to version 6.8.0-1016.20.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update linux linux to version fec1f9e9a650e8e7011330a085c77e7bf2a08ea9 or later.
Affected software
Ecosystem VendorProductAffected versions
– linux linux_kernel >= 5.15, < 6.6.91
>= 6.7, < 6.12.29
>= 6.13, < 6.14.7
6.15
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Root:Debian:12 debian rootio-linux < 6.1.164-1.root.io.108
Fix: upgrade to 6.1.164-1.root.io.108
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-110.110.root.io.63
< 6.8.0-124.124.root.io.73
< 6.8.0-134.134.root.io.80
< 6.8.0-107.107.root.io.60
< 6.8.0-110.110.root.io.62
< 6.8.0-111.111.root.io.66
< 6.8.0-117.117.root.io.67
< 6.8.0-117.117.root.io.68
< 6.8.0-124.124.root.io.70
< 6.8.0-124.124.root.io.71
< 6.8.0-134.134.root.io.79
< 6.8.0-136.136.root.io.82
1 more version range
Fix: upgrade to 6.8.0-110.110.root.io.63
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 < 6.14.0-1010.10
Fix: upgrade to 6.14.0-1010.10
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1043.44
Fix: upgrade to 6.8.0-1043.44
Ubuntu:24.04:LTS canonical linux-oracle-6.14 < 6.14.0-1011.11~24.04.1
Fix: upgrade to 6.14.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1047.51
Fix: upgrade to 6.8.0-1047.51
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 < 6.14.0-28.28.1~24.04.1
Fix: upgrade to 6.14.0-28.28.1~24.04.1
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1023.24
Fix: upgrade to 6.8.0-1023.24
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1016.20
Fix: upgrade to 6.8.0-1016.20
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1046.49+fips1
Fix: upgrade to 6.8.0-1046.49+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1046.52+fips1
Fix: upgrade to 6.8.0-1046.52+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-100.100+fips1
Fix: upgrade to 6.8.0-100.100+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1047.50+fips1
Fix: upgrade to 6.8.0-1047.50+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2037.38
Fix: upgrade to 6.8.0-2037.38
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1041.42
Fix: upgrade to 6.8.1-1041.42
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 < 6.14.0-1010.10~24.04.1
Fix: upgrade to 6.14.0-1010.10~24.04.1
Ubuntu:25.10 canonical linux-azure-fde All versions
– linux linux < fec1f9e9a650e8e7011330a085c77e7bf2a08ea9
5.15
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 All versions
Showing 50 of 179. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 All versions
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:22.04:LTS canonical linux All versions
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws All versions
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1046.49~22.04.1
Fix: upgrade to 6.8.0-1046.49~22.04.1
Ubuntu:22.04:LTS canonical linux-azure All versions
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1051.57~22.04.1
Fix: upgrade to 6.8.0-1051.57~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 All versions
Ubuntu:22.04:LTS canonical linux-gcp All versions
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1047.50~22.04.2
Fix: upgrade to 6.8.0-1047.50~22.04.2
Ubuntu:22.04:LTS canonical linux-gke All versions
Ubuntu:22.04:LTS canonical linux-gkeop All versions
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-100.100~22.04.1
Fix: upgrade to 6.8.0-100.100~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm All versions
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1044.44~22.04.1
Fix: upgrade to 6.8.0-1044.44~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg All versions
Ubuntu:22.04:LTS canonical linux-kvm All versions
Ubuntu:22.04:LTS canonical linux-lowlatency All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-100.100.1~22.04.1
Fix: upgrade to 6.8.0-100.100.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1046.49~22.04.1
Fix: upgrade to 6.8.0-1046.49~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra All versions
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx All versions
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1043.44~22.04.1
Fix: upgrade to 6.8.0-1043.44~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi All versions
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-100.100~22.04.1
Fix: upgrade to 6.8.0-100.100~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime All versions
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1041.42~22.04.1
Fix: upgrade to 6.8.1-1041.42~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-100.100
Fix: upgrade to 6.8.0-100.100
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1046.49
Fix: upgrade to 6.8.0-1046.49
Ubuntu:24.04:LTS canonical linux-aws-6.14 < 6.14.0-1011.11~24.04.1
Fix: upgrade to 6.14.0-1011.11~24.04.1
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1046.52
Fix: upgrade to 6.8.0-1046.52
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1047.50
Fix: upgrade to 6.8.0-1047.50
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 < 6.14.0-1014.15~24.04.1
Fix: upgrade to 6.14.0-1014.15~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1043.48
Fix: upgrade to 6.8.0-1043.48
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1030.33
Fix: upgrade to 6.8.0-1030.33
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1044.44
Fix: upgrade to 6.8.0-1044.44
Ubuntu:24.04:LTS canonical linux-intel All versions
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-100.100.1
Fix: upgrade to 6.8.0-100.100.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1046.49
Fix: upgrade to 6.8.0-1046.49
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1046.49.1
Fix: upgrade to 6.8.0-1046.49.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1020.20
Fix: upgrade to 6.8.0-1020.20
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-185.195.root.io.101
< 5.15.0-186.196.root.io.103
< 5.15.0-186.196.aikido.104
Fix: upgrade to 5.15.0-185.195.root.io.101
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
Fix: upgrade to 6.8.0-146.146.aikido.89
Original advisory text
CVE-2025-37952 in linux - Patched by Root
Root has patched CVE-2025-37952 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker full control (estimated)
Severity
9.4 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-416Use After Free
Timeline
Published9 Oct 2026
Updated9 Oct 2026
First seen7 Mar 2026
Track software like this
Free during beta