Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.8
CVE-2025-40231: Linux kernel vsock may deadlock and freeze system
CVE-2025-40231 · published 11 months ago
Summary
The vsock networking component in several Canonical Linux kernel builds (including Nvidia, Xilinx, Bluefield, and Raspberry Pi versions) could get stuck waiting for itself, potentially causing the system to freeze. This happens when a certain cleanup routine runs while another part of the kernel holds a lock, creating a circular wait. Install the latest kernel updates from your distribution to apply the fix that reorders the lock handling.
What to do
- Update canonical linux-nvidia-6.17 to version 6.17.0-1008.8.
- Update canonical linux-xilinx to version 6.8.0-1028.29.
- Update canonical linux-raspi to version 6.8.0-1050.54.
- Update canonical linux-aws-fips to version 6.8.0-1050.53+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1052.58+fips1.
- Update canonical linux-fips to version 6.8.0-106.106+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1052.55+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2040.41.
- Update canonical linux-realtime to version 6.8.1-1045.46.
- Update canonical linux-realtime-6.17 to version 6.17.0-1006.7~24.04.1.
- Update canonical linux to version 6.17.0-14.14.
- Update canonical linux-aws to version 6.17.0-1007.7.
- Update canonical linux-azure to version 6.17.0-1008.8.
- Update canonical linux-gcp to version 6.17.0-1007.7.
- Update canonical linux-oracle to version 6.17.0-1007.7.
- Update canonical linux-raspi to version 6.17.0-1008.8.
- Update canonical linux-realtime to version 6.17.0-1006.7.
- Update canonical linux-riscv to version 6.17.0-14.14.1.
- Update canonical linux-aws-5.15 to version 5.15.0-1100.107~20.04.2.
- Update canonical linux-azure-5.15 to version 5.15.0-1110.119~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1100.109~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-170.180~20.04.3.
- Update canonical linux-ibm-5.15 to version 5.15.0-1094.97~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1095.101~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-170.180~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1052.52~20.04.2.
- Update canonical linux-oracle-5.15 to version 5.15.0-1097.103~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1095.99~20.04.1.
- Update canonical linux to version 5.15.0-170.180.
- Update canonical linux-aws to version 5.15.0-1100.107.
- Update canonical linux-aws-6.8 to version 6.8.0-1050.53~22.04.1.
- Update canonical linux-azure to version 5.15.0-1109.118.
- Update canonical linux-gcp to version 5.15.0-1100.109.
- Update canonical linux-gcp-6.8 to version 6.8.0-1052.55~22.04.1.
- Update canonical linux-gke to version 5.15.0-1096.102.
- Update canonical linux-gkeop to version 5.15.0-1083.91.
- Update canonical linux-hwe-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1094.97.
- Update canonical linux-ibm-6.8 to version 6.8.0-1049.49~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1095.101.
- Update canonical linux-kvm to version 5.15.0-1092.97.
- Update canonical linux-lowlatency to version 5.15.0-170.180.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-106.106.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1095.96.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1049.52~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1052.52.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1041.41.
- Update canonical linux-oracle to version 5.15.0-1097.103.
- Update canonical linux-oracle-6.8 to version 6.8.0-1047.48~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1097.100.
- Update canonical linux-riscv-6.8 to version 6.8.0-106.106~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1064.68.
- Update canonical linux-bluefield to version 5.15.0-1084.86.
- Update canonical linux-aws-fips to version 5.15.0-1100.107+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1109.118+fips1.
- Update canonical linux-fips to version 5.15.0-170.180+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1100.109+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1092.94.
- Update canonical linux-realtime to version 5.15.0-1099.108.
- Update canonical linux-realtime-6.8 to version 6.8.1-1045.46~22.04.1.
- Update canonical linux to version 6.8.0-106.106.
- Update canonical linux-aws to version 6.8.0-1050.53.
- Update canonical linux-aws-6.17 to version 6.17.0-1007.7~24.04.1.
- Update canonical linux-azure to version 6.8.0-1051.57.
- Update canonical linux-gcp to version 6.8.0-1052.55.
- Update canonical linux-gcp-6.17 to version 6.17.0-1008.8~24.04.1.
- Update canonical linux-gke to version 6.8.0-1048.53.
- Update canonical linux-gkeop to version 6.8.0-1035.38.
- Update canonical linux-ibm to version 6.8.0-1049.49.
- Update canonical linux-lowlatency to version 6.8.0-106.106.1.
- Update canonical linux-nvidia to version 6.8.0-1049.52.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1049.52.1.
- Update canonical linux-oem-6.17 to version 6.17.0-1011.11.
- Update canonical linux-oracle to version 6.8.0-1047.48.
- Update canonical linux-oracle-6.17 to version 6.17.0-1007.7~24.04.1.
- Update debian rootio-linux to version 5.10.247-1.root.io.42.
- Update canonical linux to version 6.8.0-138.138.aikido.86.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.86.
- Update canonical linux-azure-fde to version 5.15.0-1109.118.1.
- Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
- Update canonical linux-azure-fde to version 6.8.0-1058.65.
- Update canonical linux-bluefield to version 6.8.0-1017.21.
- Update linux kernel to version 6.17.6.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update debian linux to version 6.1.158-1.
- Update debian linux to version 6.12.57-1.
- Update debian linux to version 6.17.6-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1028.29 Fix: upgrade to 6.8.0-1028.29
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield |
< 6.8.0-1017.21 Fix: upgrade to 6.8.0-1017.21
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1050.54 Fix: upgrade to 6.8.0-1050.54
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1050.53+fips1 Fix: upgrade to 6.8.0-1050.53+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1052.58+fips1 Fix: upgrade to 6.8.0-1052.58+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-106.106+fips1 Fix: upgrade to 6.8.0-106.106+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1052.55+fips1 Fix: upgrade to 6.8.0-1052.55+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2040.41 Fix: upgrade to 6.8.0-2040.41
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1045.46 Fix: upgrade to 6.8.1-1045.46
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1006.7~24.04.1 Fix: upgrade to 6.17.0-1006.7~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-14.14 Fix: upgrade to 6.17.0-14.14
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1007.7 Fix: upgrade to 6.17.0-1007.7
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1008.8 Fix: upgrade to 6.17.0-1008.8
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1006.7 Fix: upgrade to 6.17.0-1006.7
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-14.14.1 Fix: upgrade to 6.17.0-14.14.1
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1100.107~20.04.2 Fix: upgrade to 5.15.0-1100.107~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1110.119~20.04.1 Fix: upgrade to 5.15.0-1110.119~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
Showing 50 of 188. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1100.109~20.04.1 Fix: upgrade to 5.15.0-1100.109~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-170.180~20.04.3 Fix: upgrade to 5.15.0-170.180~20.04.3
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1094.97~20.04.1 Fix: upgrade to 5.15.0-1094.97~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1095.101~20.04.1 Fix: upgrade to 5.15.0-1095.101~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-170.180~20.04.1 Fix: upgrade to 5.15.0-170.180~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1052.52~20.04.2 Fix: upgrade to 5.15.0-1052.52~20.04.2
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1097.103~20.04.1 Fix: upgrade to 5.15.0-1097.103~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1095.99~20.04.1 Fix: upgrade to 5.15.0-1095.99~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1100.107 Fix: upgrade to 5.15.0-1100.107
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1050.53~22.04.1 Fix: upgrade to 6.8.0-1050.53~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1109.118 Fix: upgrade to 5.15.0-1109.118
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1109.118.1 Fix: upgrade to 5.15.0-1109.118.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1100.109 Fix: upgrade to 5.15.0-1100.109
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1052.55~22.04.1 Fix: upgrade to 6.8.0-1052.55~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1096.102 Fix: upgrade to 5.15.0-1096.102
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1083.91 Fix: upgrade to 5.15.0-1083.91
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1094.97 Fix: upgrade to 5.15.0-1094.97
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1049.49~22.04.1 Fix: upgrade to 6.8.0-1049.49~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1095.101 Fix: upgrade to 5.15.0-1095.101
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1092.97 Fix: upgrade to 5.15.0-1092.97
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-170.180 Fix: upgrade to 5.15.0-170.180
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-106.106.1~22.04.1 Fix: upgrade to 6.8.0-106.106.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1095.96 Fix: upgrade to 5.15.0-1095.96
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1049.52~22.04.1 Fix: upgrade to 6.8.0-1049.52~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1052.52 Fix: upgrade to 5.15.0-1052.52
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1041.41 Fix: upgrade to 5.15.0-1041.41
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1097.103 Fix: upgrade to 5.15.0-1097.103
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1047.48~22.04.1 Fix: upgrade to 6.8.0-1047.48~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1097.100 Fix: upgrade to 5.15.0-1097.100
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-106.106~22.04.1 Fix: upgrade to 6.8.0-106.106~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1064.68 Fix: upgrade to 5.15.0-1064.68
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1084.86 Fix: upgrade to 5.15.0-1084.86
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1100.107+fips1 Fix: upgrade to 5.15.0-1100.107+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1109.118+fips1 Fix: upgrade to 5.15.0-1109.118+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-170.180+fips1 Fix: upgrade to 5.15.0-170.180+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1100.109+fips1 Fix: upgrade to 5.15.0-1100.109+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1092.94 Fix: upgrade to 5.15.0-1092.94
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1099.108 Fix: upgrade to 5.15.0-1099.108
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1045.46~22.04.1 Fix: upgrade to 6.8.1-1045.46~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-106.106 Fix: upgrade to 6.8.0-106.106
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1050.53 Fix: upgrade to 6.8.0-1050.53
|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1051.57 Fix: upgrade to 6.8.0-1051.57
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1052.55 Fix: upgrade to 6.8.0-1052.55
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1008.8~24.04.1 Fix: upgrade to 6.17.0-1008.8~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1048.53 Fix: upgrade to 6.8.0-1048.53
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1035.38 Fix: upgrade to 6.8.0-1035.38
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1049.49 Fix: upgrade to 6.8.0-1049.49
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-106.106.1 Fix: upgrade to 6.8.0-106.106.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1049.52 Fix: upgrade to 6.8.0-1049.52
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1049.52.1 Fix: upgrade to 6.8.0-1049.52.1
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1011.11 Fix: upgrade to 6.17.0-1011.11
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1047.48 Fix: upgrade to 6.8.0-1047.48
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1007.7~24.04.1 Fix: upgrade to 6.17.0-1007.7~24.04.1
|
| Root:Debian:11 | debian | rootio-linux |
< 5.10.247-1.root.io.42 Fix: upgrade to 5.10.247-1.root.io.42
|
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.86 Fix: upgrade to 6.8.0-138.138.aikido.86
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.8 |
< 6.8.0-1058.65~22.04.1 Fix: upgrade to 6.8.0-1058.65~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde |
< 6.8.0-1058.65 Fix: upgrade to 6.8.0-1058.65
|
| Linux | linux | kernel |
>= 6.13.0, < 6.17.6 Fix: upgrade to 6.17.6
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Debian:12 | debian | linux |
< 6.1.158-1 Fix: upgrade to 6.1.158-1
|
| Debian:13 | debian | linux |
< 6.12.57-1 Fix: upgrade to 6.12.57-1
|
| Debian:14 | debian | linux |
< 6.17.6-1 Fix: upgrade to 6.17.6-1
|
Original advisory text
vsock: fix lock inversion in vsock_assign_transport()
In the Linux kernel, the following vulnerability has been resolved: vsock: fix lock inversion in vsock_assign_transport() Syzbot reported a potential lock inversion deadlock between vsock_register_mutex and sk_lock-AF_VSOCK when vsock_linger() is called. The issue was introduced by commit 687aa0c5581b ("vsock: Fix transport_* TOCTOU") which added vsock_register_mutex locking in vsock_assign_transport() around the transport->release() call, that can call vsock_linger(). vsock_assign_transport() can be called with sk_lock held. vsock_linger() calls sk_wait_event() that temporarily releases and re-acquires sk_lock. During this window, if another thread hold vsock_register_mutex while trying to acquire sk_lock, a circular dependency is created. Fix this by releasing vsock_register_mutex before calling transport->release() and vsock_deassign_transport(). This is safe because we don't need to hold vsock_register_mutex while releasing the old transport, and we ensure the new transport won't disappear by obtaining a module reference first via try_module_get().
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/40xxx/CVE-2025-40231... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-40231 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8030-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-2 Vendor Advisory
- https://git.kernel.org/stable/c/a2a4346eea8b4cb75037dbcb20b98cb454324f80 Third Party Advisory
- https://git.kernel.org/stable/c/b44182c116778feaa05da52a426aeb9da1878dcf Third Party Advisory
- https://ubuntu.com/security/notices/USN-8033-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8100-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8125-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8126-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8141-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8165-1 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/CVE-2025-40231 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-40231 Third Party Advisory
- https://git.kernel.org/linus/f7c877e7535260cc7a21484c994e8ce7e8cb6780 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8029-1 Vendor Advisory
- https://git.kernel.org/stable/c/f7c877e7535260cc7a21484c994e8ce7e8cb6780 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2025-40231 Vendor Advisory
- https://git.kernel.org/stable/c/09bba278ccde25a14b6e5088a9e65a8717d0cccf Third Party Advisory
- https://git.kernel.org/stable/c/251caee792a21eb0b781aab91362b422c945e162 Third Party Advisory
- https://git.kernel.org/stable/c/42ed0784d11adebf748711e503af0eb9f1e6d81d Third Party Advisory
- https://git.kernel.org/stable/c/ce4f856c64f0bc30e29302a0ce41f4295ca391c5 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8034-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8034-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8048-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-7 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8033-8 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8029-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8095-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8163-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8243-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8261-1 Vendor Advisory
Severity
6.8
Medium
Timeline
Published4 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-40231 · NVD
UBUNTU-CVE-2025-40231 · OSV
CVE-2025-40231 · OSV
DEBIAN-CVE-2025-40231 · OSV
Track software like this
Free during beta