Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2025-39975: Linux packages on Debian and Ubuntu may allow privilege escalation
CVE-2025-39975 · published 1 day ago
Summary
The Linux kernel packages supplied by Debian and Ubuntu (including cloud and hardware‑enablement versions) contain a security weakness that could let an attacker gain higher privileges on the system. Updating to the latest package releases removes the risk. Apply the newest updates from your distribution’s package manager as soon as possible.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update debian rootio-linux to version 6.12.96-1.root.io.153.
- Update canonical linux to version 6.17.0-6.6.
- Update canonical linux-aws to version 6.17.0-1003.3.
- Update canonical linux-azure to version 6.17.0-1006.6.
- Update canonical linux-gcp to version 6.17.0-1003.3.
- Update canonical linux-oracle to version 6.17.0-1003.3.
- Update canonical linux-raspi to version 6.17.0-1004.4.
- Update canonical linux-realtime to version 6.17.0-1002.3.
- Update canonical linux-riscv to version 6.17.0-6.6.1.
- Update debian rootio-linux to version 6.12.74-2.root.io.98.
- Update linux kernel to version 6.16.10.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux linux to version ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 < 6.12.96-1.root.io.153 < 6.12.74-2.root.io.98 Fix: upgrade to 6.12.63-1.root.io.64
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| – | linux | linux |
< ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5 6.14 |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
Showing 50 of 116. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-6.6 Fix: upgrade to 6.17.0-6.6
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1003.3 Fix: upgrade to 6.17.0-1003.3
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1006.6 Fix: upgrade to 6.17.0-1006.6
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1003.3 Fix: upgrade to 6.17.0-1003.3
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1003.3 Fix: upgrade to 6.17.0-1003.3
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1004.4 Fix: upgrade to 6.17.0-1004.4
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1002.3 Fix: upgrade to 6.17.0-1002.3
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-6.6.1 Fix: upgrade to 6.17.0-6.6.1
|
| Ubuntu:26.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:26.04:LTS | canonical | linux-nvidia-bos | All versions |
| Linux | linux | kernel |
>= 6.13.0, < 6.16.10 Fix: upgrade to 6.16.10
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
Original advisory text
CVE-2025-39975 in linux - Patched by Root
Root has patched CVE-2025-39975 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39975... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-39975 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/093615fc76063ea08d454ba86677ce64c736e806 URL
- https://git.kernel.org/stable/c/ba7bcfd52c66dd1c2dfa5142aca7e4a70b62dfa5 URL
- https://git.kernel.org/stable/c/bfb1e2aad1fecef8320fd71332acde0d53a8d699 URL
- https://git.kernel.org/stable/c/fbe2dc6a9c7318f7263f5e4d50f6272b931c5756 URL
- https://git.kernel.org/linus/fbe2dc6a9c7318f7263f5e4d50f6272b931c5756 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-39975 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-39975 Third Party Advisory
Severity
9.8
Critical
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen7 Mar 2026
Sources
UBUNTU-CVE-2025-39975 · OSV
CVE-2025-39975 · NVD
CVE-2025-39975 · MITRE
CVE-2025-39975 · OSV
Track software like this
Free during beta