Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.4
CVE-2025-39849: Linux kernel could let attackers run code as root
CVE-2025-39849 · published 1 day ago
Summary
The core part of Linux used in Ubuntu 24.04, Debian and certain Canonical releases has a security weakness that could allow an attacker to execute commands with full system privileges. Updating the Linux kernel package to the latest version fixes the issue. Apply the newest kernel updates from your Linux distribution as soon as possible.
What to do
- Update canonical linux-aws-6.8 to version 6.8.0-1050.53~22.04.1.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-gcp-6.8 to version 6.8.0-1052.55~22.04.1.
- Update canonical linux-hwe-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-ibm-6.8 to version 6.8.0-1049.49~22.04.1.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-106.106.1~22.04.1.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1049.52~22.04.1.
- Update canonical linux-oracle-6.8 to version 6.8.0-1047.48~22.04.1.
- Update canonical linux-riscv-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-realtime-6.8 to version 6.8.1-1045.46~22.04.1.
- Update canonical linux to version 6.8.0-106.106.
- Update canonical linux-aws to version 6.8.0-1050.53.
- Update canonical linux-azure to version 6.8.0-1051.57.
- Update canonical linux-gcp to version 6.8.0-1052.55.
- Update canonical linux-gke to version 6.8.0-1048.53.
- Update canonical linux-gkeop to version 6.8.0-1035.38.
- Update canonical linux-ibm to version 6.8.0-1049.49.
- Update canonical linux-lowlatency to version 6.8.0-106.106.1.
- Update canonical linux-nvidia to version 6.8.0-1049.52.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1049.52.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical linux-oracle to version 6.8.0-1047.48.
- Update canonical linux-raspi to version 6.8.0-1050.54.
- Update canonical linux-xilinx to version 6.8.0-1028.29.
- Update canonical linux-aws-fips to version 6.8.0-1050.53+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1052.58+fips1.
- Update canonical linux-fips to version 6.8.0-106.106+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1052.55+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2040.41.
- Update canonical linux-realtime to version 6.8.1-1045.46.
- Update canonical linux to version 6.8.0-138.138.aikido.87.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.87.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1058.65.
- Update canonical linux-bluefield to version 6.8.0-1017.21.
- Update linux kernel to version 6.16.6.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux linux to version 8e751d46336205abc259ed3990e850a9843fb649 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 6.1.16, < 6.1.151 >= 6.2.3, < 6.6.105 >= 6.7, < 6.12.46 >= 6.13, < 6.16.6 6.17 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| – | debian | debian_linux |
11.0 cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* |
| – | linux | linux |
< 8e751d46336205abc259ed3990e850a9843fb649 6.3 |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
Showing 50 of 143. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1050.53~22.04.1 Fix: upgrade to 6.8.0-1050.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1058.65~22.04.1 Fix: upgrade to 6.8.0-1058.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1052.55~22.04.1 Fix: upgrade to 6.8.0-1052.55~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1049.49~22.04.1 Fix: upgrade to 6.8.0-1049.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-106.106.1~22.04.1 Fix: upgrade to 6.8.0-106.106.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1049.52~22.04.1 Fix: upgrade to 6.8.0-1049.52~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1047.48~22.04.1 Fix: upgrade to 6.8.0-1047.48~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1045.46~22.04.1 Fix: upgrade to 6.8.1-1045.46~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-106.106 Fix: upgrade to 6.8.0-106.106
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1050.53 Fix: upgrade to 6.8.0-1050.53
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1051.57 Fix: upgrade to 6.8.0-1051.57
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1058.65 Fix: upgrade to 6.8.0-1058.65
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1052.55 Fix: upgrade to 6.8.0-1052.55
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1048.53 Fix: upgrade to 6.8.0-1048.53
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1049.49 Fix: upgrade to 6.8.0-1049.49
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-106.106.1 Fix: upgrade to 6.8.0-106.106.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1049.52 Fix: upgrade to 6.8.0-1049.52
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1049.52.1 Fix: upgrade to 6.8.0-1049.52.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1047.48 Fix: upgrade to 6.8.0-1047.48
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1028.29 Fix: upgrade to 6.8.0-1028.29
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1017.21 Fix: upgrade to 6.8.0-1017.21
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1050.53+fips1 Fix: upgrade to 6.8.0-1050.53+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1052.58+fips1 Fix: upgrade to 6.8.0-1052.58+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-106.106+fips1 Fix: upgrade to 6.8.0-106.106+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1052.55+fips1 Fix: upgrade to 6.8.0-1052.55+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2040.41 Fix: upgrade to 6.8.0-2040.41
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1045.46 Fix: upgrade to 6.8.1-1045.46
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Linux | linux | kernel |
>= 6.7.0, < 6.16.6 Fix: upgrade to 6.16.6
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 Fix: upgrade to 6.8.0-146.146.aikido.89
|
Original advisory text
CVE-2025-39849 in linux - Patched by Root
Root has patched CVE-2025-39849 in the linux package for Root:Ubuntu:24.04. Multiple fixed versions available.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39849... Vendor Advisory
- https://git.kernel.org/stable/c/31229145e6ba5ace3e9391113376fa05b7831ede URL
- https://git.kernel.org/stable/c/5cb7cab7adf9b1e6a99e2081b0e30e9e59d07523 URL
- https://git.kernel.org/stable/c/62b635dcd69c4fde7ce1de4992d71420a37e51e3 URL
- https://git.kernel.org/linus/62b635dcd69c4fde7ce1de4992d71420a37e51e3 Third Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-39849 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-8095-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-39849 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-39849 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8165-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8100-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8261-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://git.kernel.org/stable/c/8e751d46336205abc259ed3990e850a9843fb649 URL
- https://git.kernel.org/stable/c/e472f59d02c82b511bc43a3f96d62ed08bf4537f URL
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html URL
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html URL
- https://ubuntu.com/security/notices/USN-8095-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8125-1 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-787Out-of-bounds Write
Timeline
Published9 Oct 2026
Updated10 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-39849 · NVD
CVE-2025-39849 · MITRE
UBUNTU-CVE-2025-39849 · OSV
CVE-2025-39849 · OSV
Track software like this
Free during beta