Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.4
CVE-2025-39967: Linux kernel font handling can cause memory overflow
CVE-2025-39967 · published 1 year ago
Summary
The Linux kernel component that draws text on the screen can miscalculate how much memory to allocate for custom fonts, potentially allowing data to spill over its buffer. This could let an attacker cause crashes or run malicious code. Updating the kernel to the latest version that includes the overflow checks fixes the problem.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update canonical linux to version 6.8.0-106.106.
- Update canonical linux-gcp-fips to version 6.8.0-1052.55+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2040.41.
- Update canonical linux-realtime to version 6.8.1-1045.46.
- Update canonical linux to version 6.17.0-6.6.
- Update canonical linux-aws to version 6.17.0-1003.3.
- Update canonical linux-azure to version 6.17.0-1006.6.
- Update canonical linux-gcp to version 6.17.0-1003.3.
- Update canonical linux-oracle to version 6.17.0-1003.3.
- Update canonical linux-raspi to version 6.17.0-1004.4.
- Update canonical linux-realtime to version 6.17.0-1002.3.
- Update canonical linux-riscv to version 6.17.0-6.6.1.
- Update canonical linux-aws-5.15 to version 5.15.0-1100.107~20.04.2.
- Update canonical linux-azure-5.15 to version 5.15.0-1110.119~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1100.109~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-170.180~20.04.3.
- Update canonical linux-ibm-5.15 to version 5.15.0-1094.97~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1095.101~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-170.180~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1052.52~20.04.2.
- Update canonical linux-oracle-5.15 to version 5.15.0-1097.103~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1095.99~20.04.1.
- Update canonical linux to version 5.15.0-170.180.
- Update canonical linux-aws to version 5.15.0-1100.107.
- Update canonical linux-aws-6.8 to version 6.8.0-1050.53~22.04.1.
- Update canonical linux-azure to version 5.15.0-1109.118.
- Update canonical linux-azure-6.8 to version 6.8.0-1051.57~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1100.109.
- Update canonical linux-gcp-6.8 to version 6.8.0-1052.55~22.04.1.
- Update canonical linux-gke to version 5.15.0-1096.102.
- Update canonical linux-gkeop to version 5.15.0-1083.91.
- Update canonical linux-hwe-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1094.97.
- Update canonical linux-ibm-6.8 to version 6.8.0-1049.49~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1095.101.
- Update canonical linux-kvm to version 5.15.0-1092.97.
- Update canonical linux-lowlatency to version 5.15.0-170.180.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-106.106.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1095.96.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1049.52~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1052.52.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1041.41.
- Update canonical linux-oracle to version 5.15.0-1097.103.
- Update canonical linux-oracle-6.8 to version 6.8.0-1047.48~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1097.100.
- Update canonical linux-riscv-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1064.68.
- Update canonical linux-bluefield to version 5.15.0-1084.86.
- Update canonical linux-aws-fips to version 5.15.0-1100.107+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1109.118+fips1.
- Update canonical linux-fips to version 5.15.0-170.180+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1100.109+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1092.94.
- Update canonical linux-realtime to version 5.15.0-1099.108.
- Update canonical linux-realtime-6.8 to version 6.8.1-1045.46~22.04.1.
- Update canonical linux-aws to version 6.8.0-1050.53.
- Update canonical linux-azure to version 6.8.0-1051.57.
- Update canonical linux-gcp to version 6.8.0-1052.55.
- Update canonical linux-gke to version 6.8.0-1048.53.
- Update canonical linux-gkeop to version 6.8.0-1035.38.
- Update canonical linux-ibm to version 6.8.0-1049.49.
- Update canonical linux-lowlatency to version 6.8.0-106.106.1.
- Update canonical linux-nvidia to version 6.8.0-1049.52.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1049.52.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1020.20.
- Update canonical linux-oracle to version 6.8.0-1047.48.
- Update canonical linux-raspi to version 6.8.0-1050.54.
- Update canonical linux-xilinx to version 6.8.0-1028.29.
- Update canonical linux-aws-fips to version 6.8.0-1050.53+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1052.58+fips1.
- Update canonical linux-fips to version 6.8.0-106.106+fips1.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update debian rootio-linux to version 6.1.159-1.root.io.75.
- Update debian rootio-linux to version 6.1.164-1.root.io.121.
- Update canonical linux to version 6.8.0-138.138.aikido.87.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.87.
- Update canonical linux-bluefield to version 6.8.0-1017.21.
- Update linux kernel to version 6.16.10.
- Update canonical linux-azure-fde to version 5.15.0-1109.118.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1058.65.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux to version 6.1.190-1.aikido.167.
- Update rootio-linux to version 6.1.190-1.aikido.167.
- Update debian linux to version 6.1.158-1.
- Update debian linux to version 6.12.57-1.
- Update debian linux to version 6.16.10-1.
- Update linux linux to version 994bdc2d23c79087fbf7dcd9544454e8ebcef877 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 4.4.235, < 4.5 >= 4.9.235, < 4.10 >= 4.14.196, < 4.15 >= 4.19.143, < 4.20 >= 5.4.62, < 5.4.300 >= 5.8.6, < 5.9 >= 5.9.1, < 5.10.245 >= 5.11, < 5.15.194 >= 5.16, < 6.1.155 >= 6.2, < 6.6.109 >= 6.7, < 6.12.50 >= 6.13, < 6.16.10 2 more version ranges
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 Fix: upgrade to 6.12.63-1.root.io.64
|
| Ubuntu:Pro:14.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:14.04:LTS | canonical | linux-lts-xenial | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-aws-hwe | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-106.106 Fix: upgrade to 6.8.0-106.106
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1052.55+fips1 Fix: upgrade to 6.8.0-1052.55+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2040.41 Fix: upgrade to 6.8.0-2040.41
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1045.46 Fix: upgrade to 6.8.1-1045.46
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-6.6 Fix: upgrade to 6.17.0-6.6
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1003.3 Fix: upgrade to 6.17.0-1003.3
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1006.6 Fix: upgrade to 6.17.0-1006.6
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1003.3 Fix: upgrade to 6.17.0-1003.3
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1003.3 Fix: upgrade to 6.17.0-1003.3
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1004.4 Fix: upgrade to 6.17.0-1004.4
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1002.3 Fix: upgrade to 6.17.0-1002.3
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-6.6.1 Fix: upgrade to 6.17.0-6.6.1
|
| – | linux | linux |
< 994bdc2d23c79087fbf7dcd9544454e8ebcef877 5.9 |
| Ubuntu:Pro:16.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:16.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:Pro:FIPS:16.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-aws-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-azure-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-gcp-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-hwe-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
Showing 50 of 242. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:Pro:18.04:LTS | canonical | linux-ibm-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-oracle-5.4 | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | linux-raspi-5.4 | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:18.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1100.107~20.04.2 Fix: upgrade to 5.15.0-1100.107~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1110.119~20.04.1 Fix: upgrade to 5.15.0-1110.119~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1100.109~20.04.1 Fix: upgrade to 5.15.0-1100.109~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-170.180~20.04.3 Fix: upgrade to 5.15.0-170.180~20.04.3
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1094.97~20.04.1 Fix: upgrade to 5.15.0-1094.97~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1095.101~20.04.1 Fix: upgrade to 5.15.0-1095.101~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-iot | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-kvm | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-170.180~20.04.1 Fix: upgrade to 5.15.0-170.180~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1052.52~20.04.2 Fix: upgrade to 5.15.0-1052.52~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1097.103~20.04.1 Fix: upgrade to 5.15.0-1097.103~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-raspi | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1095.99~20.04.1 Fix: upgrade to 5.15.0-1095.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-xilinx-zynqmp | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-updates:20.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS:20.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1100.107 Fix: upgrade to 5.15.0-1100.107
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1050.53~22.04.1 Fix: upgrade to 6.8.0-1050.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1109.118 Fix: upgrade to 5.15.0-1109.118
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1051.57~22.04.1 Fix: upgrade to 6.8.0-1051.57~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1109.118.1 Fix: upgrade to 5.15.0-1109.118.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1058.65~22.04.1 Fix: upgrade to 6.8.0-1058.65~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1100.109 Fix: upgrade to 5.15.0-1100.109
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1052.55~22.04.1 Fix: upgrade to 6.8.0-1052.55~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1096.102 Fix: upgrade to 5.15.0-1096.102
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1083.91 Fix: upgrade to 5.15.0-1083.91
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1094.97 Fix: upgrade to 5.15.0-1094.97
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1049.49~22.04.1 Fix: upgrade to 6.8.0-1049.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1095.101 Fix: upgrade to 5.15.0-1095.101
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1092.97 Fix: upgrade to 5.15.0-1092.97
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-106.106.1~22.04.1 Fix: upgrade to 6.8.0-106.106.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1095.96 Fix: upgrade to 5.15.0-1095.96
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1049.52~22.04.1 Fix: upgrade to 6.8.0-1049.52~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1052.52 Fix: upgrade to 5.15.0-1052.52
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1041.41 Fix: upgrade to 5.15.0-1041.41
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1097.103 Fix: upgrade to 5.15.0-1097.103
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1047.48~22.04.1 Fix: upgrade to 6.8.0-1047.48~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1097.100 Fix: upgrade to 5.15.0-1097.100
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1064.68 Fix: upgrade to 5.15.0-1064.68
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1084.86 Fix: upgrade to 5.15.0-1084.86
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1100.107+fips1 Fix: upgrade to 5.15.0-1100.107+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1109.118+fips1 Fix: upgrade to 5.15.0-1109.118+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-170.180+fips1 Fix: upgrade to 5.15.0-170.180+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1100.109+fips1 Fix: upgrade to 5.15.0-1100.109+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1092.94 Fix: upgrade to 5.15.0-1092.94
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1099.108 Fix: upgrade to 5.15.0-1099.108
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1045.46~22.04.1 Fix: upgrade to 6.8.1-1045.46~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1050.53 Fix: upgrade to 6.8.0-1050.53
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1051.57 Fix: upgrade to 6.8.0-1051.57
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1058.65 Fix: upgrade to 6.8.0-1058.65
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1052.55 Fix: upgrade to 6.8.0-1052.55
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1048.53 Fix: upgrade to 6.8.0-1048.53
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1049.49 Fix: upgrade to 6.8.0-1049.49
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-106.106.1 Fix: upgrade to 6.8.0-106.106.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1049.52 Fix: upgrade to 6.8.0-1049.52
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1049.52.1 Fix: upgrade to 6.8.0-1049.52.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1020.20 Fix: upgrade to 6.8.0-1020.20
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1047.48 Fix: upgrade to 6.8.0-1047.48
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1028.29 Fix: upgrade to 6.8.0-1028.29
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1017.21 Fix: upgrade to 6.8.0-1017.21
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1050.53+fips1 Fix: upgrade to 6.8.0-1050.53+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1052.58+fips1 Fix: upgrade to 6.8.0-1052.58+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-106.106+fips1 Fix: upgrade to 6.8.0-106.106+fips1
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Root:Debian:12 | debian | rootio-linux |
< 6.1.159-1.root.io.75 < 6.1.164-1.root.io.121 Fix: upgrade to 6.1.159-1.root.io.75
|
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Linux | linux | kernel |
>= 6.7.0, < 6.16.10 Fix: upgrade to 6.16.10
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:12 | – | linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Root:Debian:12 | – | rootio-linux |
< 6.1.190-1.aikido.167 Fix: upgrade to 6.1.190-1.aikido.167
|
| Debian:12 | debian | linux |
< 6.1.158-1 Fix: upgrade to 6.1.158-1
|
| Debian:13 | debian | linux |
< 6.12.57-1 Fix: upgrade to 6.12.57-1
|
| Debian:14 | debian | linux |
< 6.16.10-1 Fix: upgrade to 6.16.10-1
|
Original advisory text
fbcon: fix integer overflow in fbcon_do_set_font
In the Linux kernel, the following vulnerability has been resolved: fbcon: fix integer overflow in fbcon_do_set_font Fix integer overflow vulnerabilities in fbcon_do_set_font() where font size calculations could overflow when handling user-controlled font parameters. The vulnerabilities occur when: 1. CALC_FONTSZ(h, pitch, charcount) performs h * pith * charcount multiplication with user-controlled values that can overflow. 2. FONT_EXTRA_WORDS * sizeof(int) + size addition can also overflow 3. This results in smaller allocations than expected, leading to buffer overflows during font data copying. Add explicit overflow checking using check_mul_overflow() and check_add_overflow() kernel helpers to safety validate all size calculations before allocation.
References
- https://git.kernel.org/stable/c/4a4bac869560f943edbe3c2b032062f6673b13d3 Third Party Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39967... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-39967 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/1a194e6c8e1ee745e914b0b7f50fa86c89ed13fe Third Party Advisory
- https://git.kernel.org/stable/c/b8a6e85328aeb9881531dbe89bcd2637a06c3c95 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8163-2 Vendor Advisory
- https://git.kernel.org/stable/c/c0c01f9aa08c8e10e10e8c9ebb5be01a4eff6eb7 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-39967 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2025-39967 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-39967 Third Party Advisory
- https://git.kernel.org/linus/1a194e6c8e1ee745e914b0b7f50fa86c89ed13fe Third Party Advisory
- https://git.kernel.org/stable/c/994bdc2d23c79087fbf7dcd9544454e8ebcef877 Third Party Advisory
- https://git.kernel.org/stable/c/9c8ec14075c5317edd6b242f1be8167aa1e4e333 Third Party Advisory
- https://git.kernel.org/stable/c/a6eb9f423b3db000aaedf83367b8539f6b72dcfc Third Party Advisory
- https://git.kernel.org/stable/c/adac90bb1aaf45ca66f9db8ac100be16750ace78 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8033-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8100-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8125-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8141-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8165-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8243-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8261-1 Vendor Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-190Integer Overflow
Timeline
Published15 Oct 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2025-39967 · NVD
CVE-2025-39967 · MITRE
UBUNTU-CVE-2025-39967 · OSV
CVE-2025-39967 · OSV
DEBIAN-CVE-2025-39967 · OSV
Track software like this
Free during beta