Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.7

Linux package needs update to stop known security risk

CVE-2025-59691 · published 9 days ago
Summary

Older Linux packages on Ubuntu 22.04 could allow an attacker to take control of the system. The issue has been fixed in newer releases. Apply the latest Linux package update as soon as possible to protect your servers.

What to do
  • Update canonical rootio-linux to version 5.15.0-186.196.aikido.108.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
Affected software
Ecosystem VendorProductAffected versions
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-186.196.aikido.108
Fix: upgrade to 5.15.0-186.196.aikido.108
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Original advisory text
CVE-2025-59691 in linux - Patched by Root
Root has patched CVE-2025-59691 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.7 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-669Incorrect Resource Transfer Between Spheres
Timeline
Published9 Oct 2026
Updated14 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-59691 · NVD
ROOT-OS-UBUNTU-2204-CVE-2025-59691 · OSV
Track software like this
Free during beta