Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.3
CVE-2025-38181: Linux kernel may crash when handling CALIPSO traffic
CVE-2025-38181 · published 1 year ago
Summary
The Linux kernel code that processes a network feature called CALIPSO can cause a system crash due to a missing pointer check. This problem affects Linux distributions that include the standard kernel, such as Debian and Ubuntu. Updating the kernel to the latest patched version resolves the issue, so apply the latest security updates as soon as possible.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update debian rootio-linux to version 6.1.170-3.root.io.129.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
- Update linux kernel to version 6.15.4.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical linux-aws-5.15 to version 5.15.0-1092.99~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1096.105~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1092.101~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-156.166~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1086.89~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1087.93~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-156.166~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1045.45~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1090.96~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1087.91~20.04.1.
- Update canonical linux to version 5.15.0-156.166.
- Update canonical linux-aws to version 5.15.0-1092.99.
- Update canonical linux-aws-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-azure to version 5.15.0-1096.105.
- Update canonical linux-gcp to version 5.15.0-1092.101.
- Update canonical linux-gcp-6.8 to version 6.8.0-1047.50~22.04.2.
- Update canonical linux-gke to version 5.15.0-1089.95.
- Update canonical linux-gkeop to version 5.15.0-1075.83.
- Update canonical linux-hwe-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1086.89.
- Update canonical linux-ibm-6.8 to version 6.8.0-1044.44~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1087.93.
- Update canonical linux-kvm to version 5.15.0-1088.93.
- Update canonical linux-lowlatency to version 5.15.0-156.166.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-100.100.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1087.88.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1045.45.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1034.34.
- Update canonical linux-oracle to version 5.15.0-1090.96.
- Update canonical linux-oracle-6.8 to version 6.8.0-1043.44~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1086.89.
- Update canonical linux-riscv-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1056.60.
- Update canonical linux-bluefield to version 5.15.0-1076.78.
- Update canonical linux-aws-fips to version 5.15.0-1092.99+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1096.105+fips1.
- Update canonical linux-fips to version 5.15.0-156.166+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1092.101+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1085.87.
- Update canonical linux-realtime to version 5.15.0-1092.101.
- Update canonical linux-realtime-6.8 to version 6.8.1-1041.42~22.04.1.
- Update canonical linux to version 6.8.0-100.100.
- Update canonical linux-aws to version 6.8.0-1046.49.
- Update canonical linux-aws-6.14 to version 6.14.0-1015.15~24.04.1.
- Update canonical linux-azure to version 6.8.0-1046.52.
- Update canonical linux-azure-6.14 to version 6.14.0-1014.14~24.04.1.
- Update canonical linux-azure-nvidia-6.14 to version 6.14.0-1007.7.
- Update canonical linux-gcp to version 6.8.0-1047.50.
- Update canonical linux-gcp-6.14 to version 6.14.0-1018.19~24.04.1.
- Update canonical linux-gke to version 6.8.0-1043.48.
- Update canonical linux-gkeop to version 6.8.0-1030.33.
- Update canonical linux-ibm to version 6.8.0-1044.44.
- Update canonical linux-lowlatency to version 6.8.0-100.100.1.
- Update canonical linux-nvidia to version 6.8.0-1046.49.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1046.49.1.
- Update canonical linux-oem-6.14 to version 6.14.0-1014.14.
- Update canonical linux-oracle to version 6.8.0-1043.44.
- Update canonical linux-oracle-6.14 to version 6.14.0-1015.15~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1047.51.
- Update canonical linux-riscv-6.14 to version 6.14.0-34.34.1~24.04.1.
- Update canonical linux-xilinx to version 6.8.0-1023.24.
- Update canonical linux-aws-fips to version 6.8.0-1046.49+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1046.52+fips1.
- Update canonical linux-fips to version 6.8.0-100.100+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1047.50+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2037.38.
- Update canonical linux-realtime to version 6.8.1-1041.42.
- Update canonical linux-realtime-6.14 to version 6.14.0-1014.14~24.04.1.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian rootio-linux to version 6.1.174-1.root.io.141.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update canonical linux-bluefield to version 6.8.0-1016.20.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update canonical linux-azure-fde to version 5.15.0-1096.105.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1046.53~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1046.53.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update debian linux to version 6.1.147-1.
- Update debian linux to version 6.12.35-1.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux linux to version 956f1499412ed0953f6a116df7fdb855e9f1fc66 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 < 6.1.170-3.root.io.129 < 6.1.174-1.root.io.141 Fix: upgrade to 6.1.159-1.root.io.75
|
| – | linux | linux_kernel |
>= 4.8, < 5.4.295 >= 5.5, < 5.10.239 >= 5.11, < 5.15.186 >= 5.16, < 6.1.142 >= 6.2, < 6.6.95 >= 6.7, < 6.12.35 >= 6.13, < 6.15.4 6.16 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-134.134.root.io.80 < 6.8.0-136.136.root.io.82 < 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-134.134.root.io.80
|
| Linux | linux | kernel |
>= 6.13.0, < 6.15.4 Fix: upgrade to 6.15.4
|
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-fips | All versions |
Showing 50 of 232. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:FIPS:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1092.99~20.04.1 Fix: upgrade to 5.15.0-1092.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1096.105~20.04.1 Fix: upgrade to 5.15.0-1096.105~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1092.101~20.04.1 Fix: upgrade to 5.15.0-1092.101~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-156.166~20.04.1 Fix: upgrade to 5.15.0-156.166~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1086.89~20.04.1 Fix: upgrade to 5.15.0-1086.89~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1087.93~20.04.1 Fix: upgrade to 5.15.0-1087.93~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-156.166~20.04.1 Fix: upgrade to 5.15.0-156.166~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1045.45~20.04.1 Fix: upgrade to 5.15.0-1045.45~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1090.96~20.04.1 Fix: upgrade to 5.15.0-1090.96~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1087.91~20.04.1 Fix: upgrade to 5.15.0-1087.91~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-156.166 Fix: upgrade to 5.15.0-156.166
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1092.99 Fix: upgrade to 5.15.0-1092.99
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1096.105 Fix: upgrade to 5.15.0-1096.105
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1096.105.1 Fix: upgrade to 5.15.0-1096.105.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1046.53~22.04.1 Fix: upgrade to 6.8.0-1046.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1092.101 Fix: upgrade to 5.15.0-1092.101
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1047.50~22.04.2 Fix: upgrade to 6.8.0-1047.50~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1089.95 Fix: upgrade to 5.15.0-1089.95
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1075.83 Fix: upgrade to 5.15.0-1075.83
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1086.89 Fix: upgrade to 5.15.0-1086.89
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1044.44~22.04.1 Fix: upgrade to 6.8.0-1044.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1087.93 Fix: upgrade to 5.15.0-1087.93
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1088.93 Fix: upgrade to 5.15.0-1088.93
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-156.166 Fix: upgrade to 5.15.0-156.166
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-100.100.1~22.04.1 Fix: upgrade to 6.8.0-100.100.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1087.88 Fix: upgrade to 5.15.0-1087.88
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1045.45 Fix: upgrade to 5.15.0-1045.45
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1034.34 Fix: upgrade to 5.15.0-1034.34
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1090.96 Fix: upgrade to 5.15.0-1090.96
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1043.44~22.04.1 Fix: upgrade to 6.8.0-1043.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1086.89 Fix: upgrade to 5.15.0-1086.89
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1056.60 Fix: upgrade to 5.15.0-1056.60
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1076.78 Fix: upgrade to 5.15.0-1076.78
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1092.99+fips1 Fix: upgrade to 5.15.0-1092.99+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1096.105+fips1 Fix: upgrade to 5.15.0-1096.105+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-156.166+fips1 Fix: upgrade to 5.15.0-156.166+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1092.101+fips1 Fix: upgrade to 5.15.0-1092.101+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1085.87 Fix: upgrade to 5.15.0-1085.87
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1092.101 Fix: upgrade to 5.15.0-1092.101
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1041.42~22.04.1 Fix: upgrade to 6.8.1-1041.42~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-100.100 Fix: upgrade to 6.8.0-100.100
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1015.15~24.04.1 Fix: upgrade to 6.14.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1046.52 Fix: upgrade to 6.8.0-1046.52
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 |
< 6.14.0-1014.14~24.04.1 Fix: upgrade to 6.14.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1046.53 Fix: upgrade to 6.8.0-1046.53
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 |
< 6.14.0-1007.7 Fix: upgrade to 6.14.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1047.50 Fix: upgrade to 6.8.0-1047.50
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1018.19~24.04.1 Fix: upgrade to 6.14.0-1018.19~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1043.48 Fix: upgrade to 6.8.0-1043.48
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1030.33 Fix: upgrade to 6.8.0-1030.33
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1044.44 Fix: upgrade to 6.8.0-1044.44
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-100.100.1 Fix: upgrade to 6.8.0-100.100.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1046.49.1 Fix: upgrade to 6.8.0-1046.49.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1014.14 Fix: upgrade to 6.14.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1043.44 Fix: upgrade to 6.8.0-1043.44
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1015.15~24.04.1 Fix: upgrade to 6.14.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1047.51 Fix: upgrade to 6.8.0-1047.51
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-34.34.1~24.04.1 Fix: upgrade to 6.14.0-34.34.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1023.24 Fix: upgrade to 6.8.0-1023.24
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1046.49+fips1 Fix: upgrade to 6.8.0-1046.49+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1046.52+fips1 Fix: upgrade to 6.8.0-1046.52+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-100.100+fips1 Fix: upgrade to 6.8.0-100.100+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1047.50+fips1 Fix: upgrade to 6.8.0-1047.50+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2037.38 Fix: upgrade to 6.8.0-2037.38
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1041.42 Fix: upgrade to 6.8.1-1041.42
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1014.14~24.04.1 Fix: upgrade to 6.14.0-1014.14~24.04.1
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| – | linux | linux |
< 956f1499412ed0953f6a116df7fdb855e9f1fc66 4.8 |
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1016.20 Fix: upgrade to 6.8.0-1016.20
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Debian:12 | debian | linux |
< 6.1.147-1 Fix: upgrade to 6.1.147-1
|
| Debian:13 | debian | linux |
< 6.12.35-1 Fix: upgrade to 6.12.35-1
|
Original advisory text
CVE-2025-38181 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: calipso: Fix null-ptr-deref in calipso_req_{set,del}attr(). syzkaller reported a null-ptr-deref in sock_omalloc() while allocating a CALIPSO option. [0] The NULL is of struct sock, which was fetched by sk_to_full_sk() in calipso_req_setattr(). Since commit a1a5344ddbe8 ("tcp: avoid two atomic ops for syncookies"), reqsk->rsk_listener could be NULL when SYN Cookie is returned to its client, as hinted by the leading SYN Cookie log. Here are 3 options to fix the bug: 1) Return 0 in calipso_req_setattr() 2) Return an error in calipso_req_setattr() 3) Alaways set rsk_listener 1) is no go as it bypasses LSM, but 2) effectively disables SYN Cookie for CALIPSO. 3) is also no go as there have been many efforts to reduce atomic ops and make TCP robust against DDoS. See also commit 3b24d854cb35 ("tcp/dccp: do not touch listener sk_refcnt under synflood"). As of the blamed commit, SYN Cookie already did not need refcounting, and no one has stumbled on the bug for 9 years, so no CALIPSO user will care about SYN Cookie. Let's return an error in calipso_req_setattr() and calipso_req_delattr() in the SYN Cookie case. This can be reproduced by [1] on Fedora and now connect() of nc times out. [0]: TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. Oops: general protection fault, probably for non-canonical address 0xdffffc0000000006: 0000 [#1] PREEMPT SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000030-0x0000000000000037] CPU: 3 UID: 0 PID: 12262 Comm: syz.1.2611 Not tainted 6.14.0 #2 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.3-0-ga6ed6b701f0a-prebuilt.qemu.org 04/01/2014 RIP: 0010:read_pnet include/net/net_namespace.h:406 [inline] RIP: 0010:sock_net include/net/sock.h:655 [inline] RIP: 0010:sock_kmalloc+0x35/0x170 net/core/sock.c:2806 Code: 89 d5 41 54 55 89 f5 53 48 89 fb e8 25 e3 c6 fd e8 f0 91 e3 00 48 8d 7b 30 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 26 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b RSP: 0018:ffff88811af89038 EFLAGS: 00010216 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff888105266400 RDX: 0000000000000006 RSI: ffff88800c890000 RDI: 0000000000000030 RBP: 0000000000000050 R08: 0000000000000000 R09: ffff88810526640e R10: ffffed1020a4cc81 R11: ffff88810526640f R12: 0000000000000000 R13: 0000000000000820 R14: ffff888105266400 R15: 0000000000000050 FS: 00007f0653a07640(0000) GS:ffff88811af80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f863ba096f4 CR3: 00000000163c0005 CR4: 0000000000770ef0 PKRU: 80000000 Call Trace: <IRQ> ipv6_renew_options+0x279/0x950 net/ipv6/exthdrs.c:1288 calipso_req_setattr+0x181/0x340 net/ipv6/calipso.c:1204 calipso_req_setattr+0x56/0x80 net/netlabel/netlabel_calipso.c:597 netlbl_req_setattr+0x18a/0x440 net/netlabel/netlabel_kapi.c:1249 selinux_netlbl_inet_conn_request+0x1fb/0x320 security/selinux/netlabel.c:342 selinux_inet_conn_request+0x1eb/0x2c0 security/selinux/hooks.c:5551 security_inet_conn_request+0x50/0xa0 security/security.c:4945 tcp_v6_route_req+0x22c/0x550 net/ipv6/tcp_ipv6.c:825 tcp_conn_request+0xec8/0x2b70 net/ipv4/tcp_input.c:7275 tcp_v6_conn_request+0x1e3/0x440 net/ipv6/tcp_ipv6.c:1328 tcp_rcv_state_process+0xafa/0x52b0 net/ipv4/tcp_input.c:6781 tcp_v6_do_rcv+0x8a6/0x1a40 net/ipv6/tcp_ipv6.c:1667 tcp_v6_rcv+0x505e/0x5b50 net/ipv6/tcp_ipv6.c:1904 ip6_protocol_deliver_rcu+0x17c/0x1da0 net/ipv6/ip6_input.c:436 ip6_input_finish+0x103/0x180 net/ipv6/ip6_input.c:480 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netfilter.h:308 [inline] ip6_input+0x13c/0x6b0 net/ipv6/ip6_input.c:491 dst_input include/net/dst.h:469 [inline] ip6_rcv_finish net/ipv6/ip6_input.c:79 [inline] ip6_rcv_finish+0xb6/0x490 net/ipv6/ip6_input.c:69 NF_HOOK include/linux/netfilter.h:314 [inline] NF_HOOK include/linux/netf ---truncated---
References
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38181... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-38181 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html URL
- https://git.kernel.org/stable/c/058dd4a370f23a5553a9449f2db53d5bfa88d45e Third Party Advisory
- https://git.kernel.org/stable/c/988edde4d52d5c02ea4dd95d7619372a5e2fb7b7 Third Party Advisory
- https://git.kernel.org/stable/c/dc724bd34d56f5589f7587a091a8cda2386826c4 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2025-38181 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7856-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-8 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-38181 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-38181 Third Party Advisory
- https://git.kernel.org/linus/10876da918fa1aec0227fb4c67647513447f53a9 Third Party Advisory
- https://git.kernel.org/stable/c/10876da918fa1aec0227fb4c67647513447f53a9 Third Party Advisory
- https://git.kernel.org/stable/c/956f1499412ed0953f6a116df7fdb855e9f1fc66 Third Party Advisory
- https://git.kernel.org/stable/c/bde8833eb075ba8e8674de88e32de6b669966451 Third Party Advisory
- https://git.kernel.org/stable/c/d092c7fd8e220b23d6c47e03d7d0cc79e731f379 Third Party Advisory
- https://git.kernel.org/stable/c/f4ae0f61dd9a63329ecb49b1e6356139d43240b8 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7774-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7774-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7774-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7775-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7776-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7775-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7775-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7774-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7774-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7834-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
8.3
High
Type
CWE-476NULL Pointer Dereference
Timeline
Published4 Jul 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-38181 · OSV
CVE-2025-38181 · NVD
CVE-2025-38181 · MITRE
UBUNTU-CVE-2025-38181 · OSV
DEBIAN-CVE-2025-38181 · OSV
Track software like this
Free during beta