Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.7
CVE-2025-38073: Linux may allow remote code execution
CVE-2025-38073 · published 5 days ago
Summary
The Linux operating system used in Ubuntu 22.04 and related cloud images has a security weakness that could let an attacker run code on the system. Updated packages from the vendor have been released to fix the issue. Install the latest Linux updates as soon as possible to protect your servers.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update canonical rootio-linux to version 5.15.0-174.184.root.io.81.
- Update canonical linux-aws-6.14 to version 6.14.0-1013.13~24.04.1.
- Update canonical linux-azure-nvidia-6.14 to version 6.14.0-1007.7.
- Update canonical linux-gcp-6.14 to version 6.14.0-1016.17~24.04.1.
- Update canonical linux-hwe-6.14 to version 6.14.0-32.32~24.04.1.
- Update canonical linux-oem-6.14 to version 6.14.0-1012.12.
- Update canonical linux-oracle-6.14 to version 6.14.0-1013.13~24.04.1.
- Update canonical linux-riscv-6.14 to version 6.14.0-32.32.1~24.04.1.
- Update canonical linux-realtime-6.14 to version 6.14.0-1012.12~24.04.1.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian rootio-linux to version 6.1.164-1.root.io.108.
- Update canonical rootio-linux to version 5.15.0-164.174.root.io.60.
- Update canonical rootio-linux to version 5.15.0-173.183.root.io.80.
- Update canonical rootio-linux to version 5.15.0-176.186.root.io.83.
- Update canonical rootio-linux to version 5.15.0-176.186.root.io.84.
- Update canonical rootio-linux to version 5.15.0-177.187.root.io.86.
- Update canonical rootio-linux to version 5.15.0-177.187.root.io.87.
- Update canonical rootio-linux to version 5.15.0-179.189.root.io.88.
- Update canonical rootio-linux to version 5.15.0-179.189.root.io.90.
- Update canonical rootio-linux to version 5.15.0-181.191.root.io.92.
- Update canonical rootio-linux to version 5.15.0-181.191.root.io.95.
- Update canonical rootio-linux to version 5.15.0-185.195.root.io.98.
- Update canonical rootio-linux to version 5.15.0-185.195.root.io.99.
- Update canonical rootio-linux to version 5.15.0-185.195.root.io.101.
- Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
- Update canonical rootio-linux to version 5.15.0-186.196.aikido.104.
- Update canonical rootio-linux to version 5.15.0-176.186.root.io.85.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 < 6.1.164-1.root.io.108 Fix: upgrade to 6.1.159-1.root.io.75
|
| Root:Ubuntu:22.04 | canonical | rootio-linux |
< 5.15.0-174.184.root.io.81 < 5.15.0-164.174.root.io.60 < 5.15.0-173.183.root.io.80 < 5.15.0-176.186.root.io.83 < 5.15.0-176.186.root.io.84 < 5.15.0-177.187.root.io.86 < 5.15.0-177.187.root.io.87 < 5.15.0-179.189.root.io.88 < 5.15.0-179.189.root.io.90 < 5.15.0-181.191.root.io.92 < 5.15.0-181.191.root.io.95 < 5.15.0-185.195.root.io.98 5 more version ranges
Fix: upgrade to 5.15.0-174.184.root.io.81
|
| Ubuntu:Pro:14.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1013.13~24.04.1 Fix: upgrade to 6.14.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 |
< 6.14.0-1007.7 Fix: upgrade to 6.14.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1016.17~24.04.1 Fix: upgrade to 6.14.0-1016.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 |
< 6.14.0-32.32~24.04.1 Fix: upgrade to 6.14.0-32.32~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1012.12 Fix: upgrade to 6.14.0-1012.12
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1013.13~24.04.1 Fix: upgrade to 6.14.0-1013.13~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-32.32.1~24.04.1 Fix: upgrade to 6.14.0-32.32.1~24.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
Showing 50 of 111. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1012.12~24.04.1 Fix: upgrade to 6.14.0-1012.12~24.04.1
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-136.136.root.io.83
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2025-38073 in linux - Patched by Root
Root has patched CVE-2025-38073 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
References
- https://www.cve.org/CVERecord?id=CVE-2025-38073 Third Party Advisory
- https://git.kernel.org/linus/c0e473a0d226479e8e925d5ba93f751d8df628e9 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38073 Third Party Advisory
- https://git.kernel.org/stable/c/64f505b08e0cfd8163491c8c082d4f47a88e51d4 Third Party Advisory
- https://git.kernel.org/stable/c/8c5cf440a378801d313eb58be996fdc81a8878a4 Third Party Advisory
- https://git.kernel.org/stable/c/c0e473a0d226479e8e925d5ba93f751d8df628e9 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7769-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7770-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7771-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7769-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7769-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7789-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7789-2 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Oct 2026
Updated30 Oct 2026
First seen6 Mar 2026
Track software like this
Free during beta