Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.9
CVE-2025-38236: Linux kernel allows local privilege escalation via socket bug
CVE-2025-38236 · published 11 months ago
Summary
The Linux kernel component that handles internal communication sockets has a flaw that could let a local user run code with higher system privileges. This does not require any special permissions or user interaction, so an attacker who already has a normal account could gain administrative rights. Apply the latest kernel updates from your distribution to fix the issue.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update canonical linux-azure-5.15 to version 5.15.0-1110.119~20.04.1.
- Update canonical linux-azure to version 5.15.0-1109.118.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1097.100.
- Update canonical linux-azure-fips to version 5.15.0-1109.118+fips1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
- Update linux kernel to version 6.15.5.
- Update canonical linux-aws-5.15 to version 5.15.0-1100.107~20.04.2.
- Update canonical linux-gcp-5.15 to version 5.15.0-1100.109~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-170.180~20.04.3.
- Update canonical linux-ibm-5.15 to version 5.15.0-1094.97~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1095.101~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-170.180~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1052.52~20.04.2.
- Update canonical linux-oracle-5.15 to version 5.15.0-1097.103~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1095.99~20.04.1.
- Update canonical linux to version 5.15.0-170.180.
- Update canonical linux-aws to version 5.15.0-1100.107.
- Update canonical linux-aws-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1100.109.
- Update canonical linux-gcp-6.8 to version 6.8.0-1047.50~22.04.2.
- Update canonical linux-gke to version 5.15.0-1096.102.
- Update canonical linux-gkeop to version 5.15.0-1083.91.
- Update canonical linux-hwe-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1094.97.
- Update canonical linux-ibm-6.8 to version 6.8.0-1044.44~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1095.101.
- Update canonical linux-kvm to version 5.15.0-1092.97.
- Update canonical linux-lowlatency to version 5.15.0-170.180.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-100.100.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1095.96.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1052.52.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1041.41.
- Update canonical linux-oracle to version 5.15.0-1097.103.
- Update canonical linux-oracle-6.8 to version 6.8.0-1043.44~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1064.68.
- Update canonical linux-bluefield to version 5.15.0-1084.86.
- Update canonical linux-aws-fips to version 5.15.0-1100.107+fips1.
- Update canonical linux-fips to version 5.15.0-170.180+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1100.109+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1092.94.
- Update canonical linux-realtime to version 5.15.0-1099.108.
- Update canonical linux-realtime-6.8 to version 6.8.1-1041.42~22.04.1.
- Update canonical linux to version 6.8.0-100.100.
- Update canonical linux-aws to version 6.8.0-1046.49.
- Update canonical linux-aws-6.14 to version 6.14.0-1015.15~24.04.1.
- Update canonical linux-azure to version 6.8.0-1046.52.
- Update canonical linux-azure-6.14 to version 6.14.0-1014.14~24.04.1.
- Update canonical linux-azure-nvidia-6.14 to version 6.14.0-1007.7.
- Update canonical linux-gcp to version 6.8.0-1047.50.
- Update canonical linux-gcp-6.14 to version 6.14.0-1018.19~24.04.1.
- Update canonical linux-gke to version 6.8.0-1043.48.
- Update canonical linux-gkeop to version 6.8.0-1030.33.
- Update canonical linux-ibm to version 6.8.0-1044.44.
- Update canonical linux-lowlatency to version 6.8.0-100.100.1.
- Update canonical linux-nvidia to version 6.8.0-1046.49.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1046.49.1.
- Update canonical linux-oem-6.14 to version 6.14.0-1014.14.
- Update canonical linux-oracle to version 6.8.0-1043.44.
- Update canonical linux-oracle-6.14 to version 6.14.0-1015.15~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1047.51.
- Update canonical linux-riscv-6.14 to version 6.14.0-34.34.1~24.04.1.
- Update canonical linux-xilinx to version 6.8.0-1023.24.
- Update canonical linux-aws-fips to version 6.8.0-1046.49+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1046.52+fips1.
- Update canonical linux-fips to version 6.8.0-100.100+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1047.50+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2037.38.
- Update canonical linux-realtime to version 6.8.1-1041.42.
- Update canonical linux-realtime-6.14 to version 6.14.0-1014.14~24.04.1.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update google :linux_kernel: to version :2025-12-05.
- Update canonical linux-bluefield to version 6.8.0-1016.20.
- Update canonical linux-azure-fde to version 5.15.0-1109.118.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1046.53~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1046.53.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 5.15.0-198.208.aikido.116.
- Update rootio-linux to version 5.15.0-198.208.aikido.116.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux to version 5.15.0-202.212.aikido.118.
- Update rootio-linux to version 5.15.0-202.212.aikido.118.
- Update linux linux to version 523edfed4f68b7794d85b9ac828c5f8f4442e4c5 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.15, < 5.15.194 >= 5.16, < 6.1.143 >= 6.2, < 6.6.96 >= 6.7, < 6.12.36 >= 6.13, < 6.15.5 6.16 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 Fix: upgrade to 6.1.159-1.root.io.75
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1110.119~20.04.1 Fix: upgrade to 5.15.0-1110.119~20.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1109.118 Fix: upgrade to 5.15.0-1109.118
|
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1097.100 Fix: upgrade to 5.15.0-1097.100
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1109.118+fips1 Fix: upgrade to 5.15.0-1109.118+fips1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1016.20 Fix: upgrade to 6.8.0-1016.20
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-134.134.root.io.80 < 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-134.134.root.io.80
|
| – | linux | linux |
< 523edfed4f68b7794d85b9ac828c5f8f4442e4c5 5.15 |
| Linux | linux | kernel |
>= 6.13.0, < 6.15.5 Fix: upgrade to 6.15.5
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1100.107~20.04.2 Fix: upgrade to 5.15.0-1100.107~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1100.109~20.04.1 Fix: upgrade to 5.15.0-1100.109~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-170.180~20.04.3 Fix: upgrade to 5.15.0-170.180~20.04.3
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1094.97~20.04.1 Fix: upgrade to 5.15.0-1094.97~20.04.1
|
Showing 50 of 184. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1095.101~20.04.1 Fix: upgrade to 5.15.0-1095.101~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-170.180~20.04.1 Fix: upgrade to 5.15.0-170.180~20.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1052.52~20.04.2 Fix: upgrade to 5.15.0-1052.52~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1097.103~20.04.1 Fix: upgrade to 5.15.0-1097.103~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1095.99~20.04.1 Fix: upgrade to 5.15.0-1095.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1100.107 Fix: upgrade to 5.15.0-1100.107
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1109.118.1 Fix: upgrade to 5.15.0-1109.118.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1046.53~22.04.1 Fix: upgrade to 6.8.0-1046.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1100.109 Fix: upgrade to 5.15.0-1100.109
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1047.50~22.04.2 Fix: upgrade to 6.8.0-1047.50~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1096.102 Fix: upgrade to 5.15.0-1096.102
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1083.91 Fix: upgrade to 5.15.0-1083.91
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1094.97 Fix: upgrade to 5.15.0-1094.97
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1044.44~22.04.1 Fix: upgrade to 6.8.0-1044.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1095.101 Fix: upgrade to 5.15.0-1095.101
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1092.97 Fix: upgrade to 5.15.0-1092.97
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-100.100.1~22.04.1 Fix: upgrade to 6.8.0-100.100.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1095.96 Fix: upgrade to 5.15.0-1095.96
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1052.52 Fix: upgrade to 5.15.0-1052.52
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1041.41 Fix: upgrade to 5.15.0-1041.41
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1097.103 Fix: upgrade to 5.15.0-1097.103
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1043.44~22.04.1 Fix: upgrade to 6.8.0-1043.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1064.68 Fix: upgrade to 5.15.0-1064.68
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1084.86 Fix: upgrade to 5.15.0-1084.86
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1100.107+fips1 Fix: upgrade to 5.15.0-1100.107+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-170.180+fips1 Fix: upgrade to 5.15.0-170.180+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1100.109+fips1 Fix: upgrade to 5.15.0-1100.109+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1092.94 Fix: upgrade to 5.15.0-1092.94
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1099.108 Fix: upgrade to 5.15.0-1099.108
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1041.42~22.04.1 Fix: upgrade to 6.8.1-1041.42~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-100.100 Fix: upgrade to 6.8.0-100.100
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1015.15~24.04.1 Fix: upgrade to 6.14.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1046.52 Fix: upgrade to 6.8.0-1046.52
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 |
< 6.14.0-1014.14~24.04.1 Fix: upgrade to 6.14.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1046.53 Fix: upgrade to 6.8.0-1046.53
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 |
< 6.14.0-1007.7 Fix: upgrade to 6.14.0-1007.7
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1047.50 Fix: upgrade to 6.8.0-1047.50
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1018.19~24.04.1 Fix: upgrade to 6.14.0-1018.19~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1043.48 Fix: upgrade to 6.8.0-1043.48
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1030.33 Fix: upgrade to 6.8.0-1030.33
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1044.44 Fix: upgrade to 6.8.0-1044.44
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-100.100.1 Fix: upgrade to 6.8.0-100.100.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1046.49.1 Fix: upgrade to 6.8.0-1046.49.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1014.14 Fix: upgrade to 6.14.0-1014.14
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1043.44 Fix: upgrade to 6.8.0-1043.44
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1015.15~24.04.1 Fix: upgrade to 6.14.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1047.51 Fix: upgrade to 6.8.0-1047.51
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-34.34.1~24.04.1 Fix: upgrade to 6.14.0-34.34.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1023.24 Fix: upgrade to 6.8.0-1023.24
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1046.49+fips1 Fix: upgrade to 6.8.0-1046.49+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1046.52+fips1 Fix: upgrade to 6.8.0-1046.52+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-100.100+fips1 Fix: upgrade to 6.8.0-100.100+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1047.50+fips1 Fix: upgrade to 6.8.0-1047.50+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2037.38 Fix: upgrade to 6.8.0-2037.38
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1041.42 Fix: upgrade to 6.8.1-1041.42
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1014.14~24.04.1 Fix: upgrade to 6.14.0-1014.14~24.04.1
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Android | :linux_kernel: |
>= :0, < :2025-12-05 Fix: upgrade to :2025-12-05
|
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:22.04 | – | linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Ubuntu:22.04 | – | rootio-linux |
< 5.15.0-198.208.aikido.116 < 5.15.0-202.212.aikido.118 Fix: upgrade to 5.15.0-198.208.aikido.116
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2025-38236 in linux - Patched by Root
In unix_stream_recv_urg of af_unix.c, there is a possible way to achieve code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
References
- https://git.kernel.org/stable/c/523edfed4f68b7794d85b9ac828c5f8f4442e4c5 URL
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html URL
- https://project-zero.issues.chromium.org/issues/423023990 URL
- https://ubuntu.com/security/notices/USN-8031-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8141-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-1 Vendor Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-082556.html URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38236... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-38236 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2025-38236 Third Party Advisory
- https://source.android.com/security/bulletin/2025-12-01 Vendor Advisory
- https://git.kernel.org/stable/c/32ca245464e1479bfea8592b9db227fdc1641705 URL
- https://git.kernel.org/stable/c/61a9ad7b69ce688697e5f63332f03e17725353bc URL
- https://www.cve.org/CVERecord?id=CVE-2025-38236 Third Party Advisory
- https://git.kernel.org/linus/32ca245464e1479bfea8592b9db227fdc1641705 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7833-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7834-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7833-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7856-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-2 Vendor Advisory
- https://git.kernel.org/stable/c/8db4d2d026e6e3649832bfe23b96c4acff0756db URL
- https://git.kernel.org/stable/c/a12237865b48a73183df252029ff5065d73d305e URL
- https://git.kernel.org/stable/c/fad0a2c16062ac7c606b93166a7ce9d265bab976 URL
- https://ubuntu.com/security/notices/USN-8033-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8243-1 Vendor Advisory
- https://android.googlesource.com/kernel/common/+/a12237865b48a73183df252029ff506... Patch
- https://android.googlesource.com/kernel/common/+/fad0a2c16062ac7c606b93166a7ce9d... Patch
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Severity
7.9
High
Type
CWE-416Use After Free
Timeline
Published1 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
UBUNTU-CVE-2025-38236 · OSV
CVE-2025-38236 · OSV
CVE-2025-38236 · NVD
CVE-2025-38236 · MITRE
ASB-A-432753641 · OSV
Track software like this
Free during beta