Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
3.7

Linux package on Ubuntu 22.04 can run attacker code

CVE-2025-59692 · published 9 days ago
Summary

The Linux package used in Ubuntu 22.04 could let an attacker execute malicious code on the system. This could lead to loss of data or control of the server. Update the package to the latest version provided by the vendor to close the risk.

What to do
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
Affected software
Ecosystem VendorProductAffected versions
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
Fix: upgrade to 5.15.0-198.208.aikido.116
Original advisory text
CVE-2025-59692 in linux - Patched by Root
Root has patched CVE-2025-59692 in the linux package for Root:Ubuntu:22.04. Multiple fixed versions available.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
3.7 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-669Incorrect Resource Transfer Between Spheres
Timeline
Published9 Oct 2026
Updated14 Oct 2026
First seen7 Mar 2026
Sources
CVE-2025-59692 · NVD
ROOT-OS-UBUNTU-2204-CVE-2025-59692 · OSV
Track software like this
Free during beta