Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2025-38653: Linux kernels may let attackers crash system after module removal
CVE-2025-38653 · published 1 year ago
Summary
Several Linux kernel packages, including those from Debian and Canonical, contain a coding error that can be triggered when a system module is unloaded. This error could allow a malicious program to cause a crash or potentially take control of the system. Apply the latest kernel updates from your distribution and restart the server to protect against this risk.
What to do
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update debian rootio-linux to version 6.1.174-1.root.io.146.
- Update debian rootio-linux to version 6.12.94-1.root.io.146.
- Update canonical linux-gcp-6.14 to version 6.14.0-1020.21~24.04.1.
- Update canonical linux-gke to version 6.8.0-1043.48.
- Update canonical linux-gkeop to version 6.8.0-1030.33.
- Update canonical linux-ibm to version 6.8.0-1044.44.
- Update canonical linux-lowlatency to version 6.8.0-100.100.1.
- Update canonical linux-nvidia to version 6.8.0-1046.49.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1046.49.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
- Update linux kernel to version 6.16.1.
- Update canonical linux-aws-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1047.50~22.04.2.
- Update canonical linux-hwe-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1044.44~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-100.100.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1046.49~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1043.44~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-100.100~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1041.42~22.04.1.
- Update canonical linux to version 6.8.0-100.100.
- Update canonical linux-aws to version 6.8.0-1046.49.
- Update canonical linux-aws-6.14 to version 6.14.0-1017.17~24.04.1.
- Update canonical linux-azure to version 6.8.0-1046.52.
- Update canonical linux-azure-6.14 to version 6.14.0-1017.17~24.04.1.
- Update canonical linux-gcp to version 6.8.0-1047.50.
- Update canonical linux-oem-6.14 to version 6.14.0-1016.16.
- Update canonical linux-oracle to version 6.8.0-1043.44.
- Update canonical linux-oracle-6.14 to version 6.14.0-1017.17~24.04.1.
- Update canonical linux-raspi to version 6.8.0-1047.51.
- Update canonical linux-riscv-6.14 to version 6.14.0-36.36.1~24.04.1.
- Update canonical linux-xilinx to version 6.8.0-1023.24.
- Update canonical linux-aws-fips to version 6.8.0-1046.49+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1046.52+fips1.
- Update canonical linux-fips to version 6.8.0-100.100+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1047.50+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2037.38.
- Update canonical linux-realtime to version 6.8.1-1041.42.
- Update canonical linux-realtime-6.14 to version 6.14.0-1016.16~24.04.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1046.53~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1046.53.
- Update canonical linux-bluefield to version 6.8.0-1016.20.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update debian linux to version 6.1.148-1.
- Update debian linux to version 6.12.43-1.
- Update debian linux to version 6.16.3-1.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update linux linux to version c35b0feb80b48720dfbbf4e33759c7be3faaebb6 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 < 6.1.174-1.root.io.146 Fix: upgrade to 6.1.159-1.root.io.75
|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 < 6.12.94-1.root.io.146 Fix: upgrade to 6.12.63-1.root.io.64
|
| – | linux | linux_kernel |
>= 6.0, < 6.1.148 >= 6.2, < 6.6.102 >= 6.7, < 6.12.42 >= 6.13, < 6.15.10 >= 6.16, < 6.16.1 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1020.21~24.04.1 Fix: upgrade to 6.14.0-1020.21~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1043.48 Fix: upgrade to 6.8.0-1043.48
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1030.33 Fix: upgrade to 6.8.0-1030.33
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1044.44 Fix: upgrade to 6.8.0-1044.44
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-100.100.1 Fix: upgrade to 6.8.0-100.100.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1046.49.1 Fix: upgrade to 6.8.0-1046.49.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-136.136.root.io.83 Fix: upgrade to 6.8.0-136.136.root.io.83
|
| – | linux | linux |
< c35b0feb80b48720dfbbf4e33759c7be3faaebb6 6.0 |
| Linux | linux | kernel |
>= 6.16.0, < 6.16.1 Fix: upgrade to 6.16.1
|
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
Showing 50 of 152. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1046.53~22.04.1 Fix: upgrade to 6.8.0-1046.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1047.50~22.04.2 Fix: upgrade to 6.8.0-1047.50~22.04.2
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1044.44~22.04.1 Fix: upgrade to 6.8.0-1044.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-100.100.1~22.04.1 Fix: upgrade to 6.8.0-100.100.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1046.49~22.04.1 Fix: upgrade to 6.8.0-1046.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1043.44~22.04.1 Fix: upgrade to 6.8.0-1043.44~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-100.100~22.04.1 Fix: upgrade to 6.8.0-100.100~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1041.42~22.04.1 Fix: upgrade to 6.8.1-1041.42~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-100.100 Fix: upgrade to 6.8.0-100.100
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1046.49 Fix: upgrade to 6.8.0-1046.49
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1017.17~24.04.1 Fix: upgrade to 6.14.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1046.52 Fix: upgrade to 6.8.0-1046.52
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 |
< 6.14.0-1017.17~24.04.1 Fix: upgrade to 6.14.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1046.53 Fix: upgrade to 6.8.0-1046.53
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1047.50 Fix: upgrade to 6.8.0-1047.50
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 |
< 6.14.0-1016.16 Fix: upgrade to 6.14.0-1016.16
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1043.44 Fix: upgrade to 6.8.0-1043.44
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1017.17~24.04.1 Fix: upgrade to 6.14.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1047.51 Fix: upgrade to 6.8.0-1047.51
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 |
< 6.14.0-36.36.1~24.04.1 Fix: upgrade to 6.14.0-36.36.1~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1023.24 Fix: upgrade to 6.8.0-1023.24
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1016.20 Fix: upgrade to 6.8.0-1016.20
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1046.49+fips1 Fix: upgrade to 6.8.0-1046.49+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1046.52+fips1 Fix: upgrade to 6.8.0-1046.52+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-100.100+fips1 Fix: upgrade to 6.8.0-100.100+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1047.50+fips1 Fix: upgrade to 6.8.0-1047.50+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2037.38 Fix: upgrade to 6.8.0-2037.38
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1041.42 Fix: upgrade to 6.8.1-1041.42
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 |
< 6.14.0-1016.16~24.04.1 Fix: upgrade to 6.14.0-1016.16~24.04.1
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Debian:12 | debian | linux |
< 6.1.148-1 Fix: upgrade to 6.1.148-1
|
| Debian:13 | debian | linux |
< 6.12.43-1 Fix: upgrade to 6.12.43-1
|
| Debian:14 | debian | linux |
< 6.16.3-1 Fix: upgrade to 6.16.3-1
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
Original advisory text
CVE-2025-38653 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al Check pde->proc_ops->proc_lseek directly may cause UAF in rmmod scenario. It's a gap in proc_reg_open() after commit 654b33ada4ab("proc: fix UAF in proc_get_inode()"). Followed by AI Viro's suggestion, fix it in same manner.
References
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38653... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-38653 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-38653 Third Party Advisory
- https://git.kernel.org/linus/ff7ec8dc1b646296f8d94c39339e8d3833d16c05 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7879-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8074-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-38653 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7879-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7879-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-1 Vendor Advisory
- https://git.kernel.org/stable/c/fc1072d934f687e1221d685cf1a49a5068318f34 URL
- https://git.kernel.org/stable/c/ff7ec8dc1b646296f8d94c39339e8d3833d16c05 URL
- https://security-tracker.debian.org/tracker/CVE-2025-38653 Vendor Advisory
- https://git.kernel.org/stable/c/1fccbfbae1dd36198dc47feac696563244ad81d3 URL
- https://git.kernel.org/stable/c/33c778ea0bd0fa62ff590497e72562ff90f82b13 URL
- https://git.kernel.org/stable/c/c35b0feb80b48720dfbbf4e33759c7be3faaebb6 URL
- https://git.kernel.org/stable/c/d136502e04d8853a9aecb335d07bbefd7a1519a8 URL
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html URL
- https://ubuntu.com/security/notices/USN-7880-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7879-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7934-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8031-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8028-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8052-2 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Type
CWE-416Use After Free
Timeline
Published22 Aug 2025
Updated26 Oct 2026
First seen6 Mar 2026
Sources
CVE-2025-38653 · OSV
CVE-2025-38653 · NVD
CVE-2025-38653 · MITRE
UBUNTU-CVE-2025-38653 · OSV
DEBIAN-CVE-2025-38653 · OSV
Track software like this
Free during beta