Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2025-38545: Linux packages could let attackers modify system files
CVE-2025-38545 · published today
Summary
Certain Linux distributions, including Debian and Canonical variants, contain a weakness that could allow an attacker to gain elevated control over the system. This could lead to unauthorized changes or data exposure. Apply the latest security updates for the affected Linux packages as soon as possible to close the gap.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update canonical linux-aws-6.14 to version 6.14.0-1017.17~24.04.1.
- Update canonical linux-azure-6.14 to version 6.14.0-1017.17~24.04.1.
- Update canonical linux-gcp-6.14 to version 6.14.0-1020.21~24.04.1.
- Update canonical linux-oem-6.14 to version 6.14.0-1016.16.
- Update canonical linux-oracle-6.14 to version 6.14.0-1017.17~24.04.1.
- Update canonical linux-riscv-6.14 to version 6.14.0-36.36.1~24.04.1.
- Update canonical linux-realtime-6.14 to version 6.14.0-1016.16~24.04.1.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux kernel to version 6.15.7.
- Update linux to version 6.12.116-1.aikido.165.
- Update rootio-linux to version 6.12.116-1.aikido.165.
- Update linux linux to version fc2fffa2facac15ce711e95f98f954426e025bc5 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 Fix: upgrade to 6.12.63-1.root.io.64
|
| – | linux | linux |
< fc2fffa2facac15ce711e95f98f954426e025bc5 6.10 |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
Showing 50 of 101. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1017.17~24.04.1 Fix: upgrade to 6.14.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 |
< 6.14.0-1017.17~24.04.1 Fix: upgrade to 6.14.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1020.21~24.04.1 Fix: upgrade to 6.14.0-1020.21~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1016.16 Fix: upgrade to 6.14.0-1016.16
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1017.17~24.04.1 Fix: upgrade to 6.14.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-36.36.1~24.04.1 Fix: upgrade to 6.14.0-36.36.1~24.04.1
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1016.16~24.04.1 Fix: upgrade to 6.14.0-1016.16~24.04.1
|
| – | linux | linux_kernel |
>= 6.10, < 6.12.39 >= 6.13, < 6.15.7 6.16 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 < 6.12.116-1.aikido.165 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 < 6.12.116-1.aikido.165 Fix: upgrade to 6.12.113-1.aikido.163
|
| Linux | linux | kernel |
>= 6.13.0, < 6.15.7 Fix: upgrade to 6.15.7
|
Original advisory text
CVE-2025-38545 in linux - Patched by Root
Root has patched CVE-2025-38545 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
- https://git.kernel.org/stable/c/02c4d6c26f1f662da8885b299c224ca6628ad232 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38545... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-38545 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/7d6ca0c8c0caf9a13cae2de763bb1f2a9ea7eabb Third Party Advisory
- https://git.kernel.org/stable/c/fc2fffa2facac15ce711e95f98f954426e025bc5 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38545 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-38545 Third Party Advisory
- https://git.kernel.org/linus/02c4d6c26f1f662da8885b299c224ca6628ad232 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7879-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7880-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7879-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7879-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7934-1 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
9.4
Critical
Type
CWE-401Memory Leak
Timeline
Published9 Nov 2026
Updated9 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-38545 · NVD
CVE-2025-38545 · MITRE
UBUNTU-CVE-2025-38545 · OSV
CVE-2025-38545 · OSV
Track software like this
Free during beta