Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.3

Linux kernel FTP NAT may corrupt traffic

CVE-2025-68206 · published 10 months ago
Summary

The Linux kernel’s netfilter component had a flaw that could mishandle FTP connections that use passive mode, causing incorrect packet sequencing. This could disrupt file transfers or other FTP services that rely on NAT. Updating the kernel to the latest version resolves the issue.

What to do
  • Update debian rootio-linux to version 6.1.162-1.root.io.98.
  • Update debian rootio-linux to version 6.12.74-2.root.io.98.
  • Update debian linux to version 6.17.9-1.
  • Update canonical linux-gcp-5.15 to version 5.15.0-1112.122~20.04.1.
  • Update canonical linux-bluefield to version 6.8.0-1017.21.
  • Update debian linux to version 5.10.257-1.
  • Update debian linux-6.1 to version 6.1.170-1~deb11u1.
  • Update canonical linux-aws-5.15 to version 5.15.0-1112.119~20.04.1.
  • Update canonical linux-azure-5.15 to version 5.15.0-1117.126~20.04.1.
  • Update canonical linux-azure-fde-5.15 to version 5.15.0-1117.126~20.04.2.
  • Update canonical linux-hwe-5.15 to version 5.15.0-186.196~20.04.1.
  • Update canonical linux-ibm-5.15 to version 5.15.0-1106.110~20.04.1.
  • Update canonical linux-intel-iotg-5.15 to version 5.15.0-1107.113~20.04.1.
  • Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-184.194~20.04.1.
  • Update debian linux to version 6.1.170-1.
  • Update debian linux to version 6.12.69-1.
  • Update canonical linux-aws-6.8 to version 6.8.0-1052.55~22.04.1.
  • Update canonical linux-azure-6.8 to version 6.8.0-1059.65~22.04.1.
  • Update canonical linux-gcp-6.8 to version 6.8.0-1054.57~22.04.1.
  • Update canonical linux-hwe-6.8 to version 6.8.0-110.110~22.04.1.
  • Update canonical linux-ibm-6.8 to version 6.8.0-1051.51~22.04.1.
  • Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-110.110.1~22.04.1.
  • Update canonical linux-nvidia-6.8 to version 6.8.0-1051.54~22.04.1.
  • Update canonical linux-oracle-6.8 to version 6.8.0-1049.50~22.04.1.
  • Update canonical linux-riscv-6.8 to version 6.8.0-110.110~22.04.1.
  • Update canonical linux-realtime-6.8 to version 6.8.1-1047.48~22.04.1.
  • Update canonical linux to version 6.8.0-110.110.
  • Update canonical linux-aws to version 6.8.0-1052.55.
  • Update canonical linux-aws-6.17 to version 6.17.0-1007.7~24.04.1.
  • Update canonical linux-azure to version 6.8.0-1054.60.
  • Update canonical linux-gcp to version 6.8.0-1054.57.
  • Update canonical linux-gcp-6.17 to version 6.17.0-1008.8~24.04.1.
  • Update canonical linux-gke to version 6.8.0-1050.56.
  • Update canonical linux-gkeop to version 6.8.0-1037.40.
  • Update canonical linux-ibm to version 6.8.0-1051.51.
  • Update canonical linux-lowlatency to version 6.8.0-110.110.1.
  • Update canonical linux-nvidia to version 6.8.0-1051.54.
  • Update canonical linux-nvidia-6.17 to version 6.17.0-1008.8.
  • Update canonical linux-nvidia-lowlatency to version 6.8.0-1051.54.1.
  • Update canonical linux-nvidia-tegra to version 6.8.0-1022.22.
  • Update canonical linux-oem-6.17 to version 6.17.0-1011.11.
  • Update canonical linux-oracle to version 6.8.0-1049.50.
  • Update canonical linux-oracle-6.17 to version 6.17.0-1007.7~24.04.1.
  • Update canonical linux-raspi to version 6.8.0-1052.56.
  • Update canonical linux-xilinx to version 6.8.0-1028.29.
  • Update canonical linux-aws-fips to version 6.8.0-1052.55+fips1.
  • Update canonical linux-azure-fips to version 6.8.0-1053.59+fips1.
  • Update canonical linux-fips to version 6.8.0-110.110+fips2.
  • Update canonical linux-gcp-fips to version 6.8.0-1054.57+fips1.
  • Update canonical linux-raspi-realtime to version 6.8.0-2042.43.
  • Update canonical linux-realtime to version 6.8.1-1047.48.
  • Update canonical linux-realtime-6.17 to version 6.17.0-1006.7~24.04.1.
  • Update canonical linux to version 6.17.0-14.14.
  • Update canonical linux-aws to version 6.17.0-1007.7.
  • Update canonical linux-azure to version 6.17.0-1008.8.
  • Update canonical linux-gcp to version 6.17.0-1007.7.
  • Update canonical linux-oracle to version 6.17.0-1007.7.
  • Update canonical linux-raspi to version 6.17.0-1008.8.
  • Update canonical linux-realtime to version 6.17.0-1006.7.
  • Update canonical linux-riscv to version 6.17.0-14.14.1.
  • Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1064.66~20.04.1.
  • Update canonical linux-oracle-5.15 to version 5.15.0-1109.115~20.04.1.
  • Update canonical linux-riscv-5.15 to version 5.15.0-1106.110~20.04.1.
  • Update canonical linux to version 5.15.0-186.196.
  • Update canonical linux-aws to version 5.15.0-1112.119.
  • Update canonical linux-azure to version 5.15.0-1117.126.
  • Update canonical linux-azure-fde to version 5.15.0-1117.126.
  • Update canonical linux-gcp to version 5.15.0-1112.122.
  • Update canonical linux-gke to version 5.15.0-1108.114.
  • Update canonical linux-gkeop to version 5.15.0-1095.103.
  • Update canonical linux-ibm to version 5.15.0-1106.110.
  • Update canonical linux-intel-iotg to version 5.15.0-1107.113.
  • Update canonical linux-kvm to version 5.15.0-1104.109.
  • Update canonical linux-lowlatency to version 5.15.0-184.194.
  • Update canonical linux-nvidia to version 5.15.0-1107.108.
  • Update canonical linux-nvidia-tegra to version 5.15.0-1064.66.
  • Update canonical linux-nvidia-tegra-igx to version 5.15.0-1053.53.
  • Update canonical linux-oracle to version 5.15.0-1109.115.
  • Update canonical linux-xilinx-zynqmp to version 5.15.0-1075.79.
  • Update canonical linux-bluefield to version 5.15.0-1096.98.
  • Update canonical linux-aws-fips to version 5.15.0-1112.119+fips1.
  • Update canonical linux-azure-fips to version 5.15.0-1117.126+fips1.
  • Update canonical linux-fips to version 5.15.0-186.196+fips1.
  • Update canonical linux-gcp-fips to version 5.15.0-1112.122+fips1.
  • Update canonical linux-intel-iot-realtime to version 5.15.0-1104.106.
  • Update canonical linux-realtime to version 5.15.0-1111.120.
  • Update debian rootio-linux to version 5.10.249-1.root.io.52.
  • Update canonical rootio-linux to version 5.15.0-186.196.root.io.103.
  • Update canonical rootio-linux to version 6.8.0-117.117.root.io.68.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.70.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.71.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.72.
  • Update canonical rootio-linux to version 6.8.0-124.124.root.io.73.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.79.
  • Update canonical rootio-linux to version 6.8.0-134.134.root.io.80.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.82.
  • Update canonical rootio-linux to version 6.8.0-136.136.root.io.83.
  • Update canonical linux-raspi to version 5.15.0-1106.109.
  • Update linux to version 6.8.0-146.146.aikido.89.
  • Update rootio-linux to version 6.8.0-146.146.aikido.89.
  • Update linux to version 5.15.0-198.208.aikido.116.
  • Update rootio-linux to version 5.15.0-198.208.aikido.116.
  • Update canonical linux-azure-fde-6.8 to version 6.8.0-1058.65~22.04.1.
  • Update canonical linux-azure-fde to version 6.8.0-1058.65.
  • Update linux to version 6.8.0-147.147.aikido.90.
  • Update rootio-linux to version 6.8.0-147.147.aikido.90.
  • Update linux kernel to version 6.17.9.
  • Update linux to version 6.12.113-1.aikido.163.
  • Update rootio-linux to version 6.12.113-1.aikido.163.
  • Update linux to version 6.1.190-1.aikido.167.
  • Update rootio-linux to version 6.1.190-1.aikido.167.
  • Update linux to version 5.15.0-202.212.aikido.118.
  • Update rootio-linux to version 5.15.0-202.212.aikido.118.
  • Update linux linux to version 83273af0b60c093ba0085c205864d8542e1b1653 or later.
Affected software
Ecosystem VendorProductAffected versions
Root:Debian:12 debian rootio-linux < 6.1.162-1.root.io.98
Fix: upgrade to 6.1.162-1.root.io.98
Root:Debian:13 debian rootio-linux < 6.12.74-2.root.io.98
Fix: upgrade to 6.12.74-2.root.io.98
Debian:14 debian linux < 6.17.9-1
Fix: upgrade to 6.17.9-1
Ubuntu:Pro:20.04:LTS canonical linux-gcp-5.15 < 5.15.0-1112.122~20.04.1
Fix: upgrade to 5.15.0-1112.122~20.04.1
Ubuntu:Nvidia-BlueField:24.04:LTS canonical linux-bluefield < 6.8.0-1017.21
Fix: upgrade to 6.8.0-1017.21
Debian:11 debian linux < 5.10.257-1
Fix: upgrade to 5.10.257-1
Debian:11 debian linux-6.1 < 6.1.170-1~deb11u1
Fix: upgrade to 6.1.170-1~deb11u1
Ubuntu:Pro:20.04:LTS canonical linux-aws-5.15 < 5.15.0-1112.119~20.04.1
Fix: upgrade to 5.15.0-1112.119~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-azure-5.15 < 5.15.0-1117.126~20.04.1
Fix: upgrade to 5.15.0-1117.126~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-azure-fde-5.15 < 5.15.0-1117.126~20.04.2
Fix: upgrade to 5.15.0-1117.126~20.04.2
Ubuntu:Pro:20.04:LTS canonical linux-hwe-5.15 < 5.15.0-186.196~20.04.1
Fix: upgrade to 5.15.0-186.196~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-ibm-5.15 < 5.15.0-1106.110~20.04.1
Fix: upgrade to 5.15.0-1106.110~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-intel-iotg-5.15 < 5.15.0-1107.113~20.04.1
Fix: upgrade to 5.15.0-1107.113~20.04.1
Ubuntu:Pro:20.04:LTS canonical linux-lowlatency-hwe-5.15 < 5.15.0-184.194~20.04.1
Fix: upgrade to 5.15.0-184.194~20.04.1
– linux linux < 83273af0b60c093ba0085c205864d8542e1b1653
4.12
Debian:12 debian linux < 6.1.170-1
Fix: upgrade to 6.1.170-1
Debian:13 debian linux < 6.12.69-1
Fix: upgrade to 6.12.69-1
Ubuntu:Pro:14.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-aws-hwe All versions
Ubuntu:Pro:16.04:LTS canonical linux-azure All versions
Ubuntu:Pro:16.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:16.04:LTS canonical linux-hwe All versions
Ubuntu:16.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:16.04:LTS canonical linux-oracle All versions
Ubuntu:Pro:18.04:LTS canonical linux All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws All versions
Ubuntu:18.04:LTS canonical linux-aws-5.0 All versions
Ubuntu:18.04:LTS canonical linux-aws-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-aws-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-4.15 All versions
Ubuntu:18.04:LTS canonical linux-azure-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-azure-5.4 All versions
Ubuntu:18.04:LTS canonical linux-azure-edge All versions
Ubuntu:18.04:LTS canonical linux-gcp All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gcp-5.3 All versions
Ubuntu:Pro:18.04:LTS canonical linux-gcp-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gke-4.15 All versions
Ubuntu:18.04:LTS canonical linux-gke-5.4 All versions
Ubuntu:18.04:LTS canonical linux-gkeop-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe All versions
Ubuntu:Pro:18.04:LTS canonical linux-hwe-5.4 All versions
Ubuntu:18.04:LTS canonical linux-hwe-edge All versions
Ubuntu:Pro:18.04:LTS canonical linux-ibm-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-kvm All versions
Ubuntu:18.04:LTS canonical linux-oem All versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.0 All versions
Ubuntu:18.04:LTS canonical linux-oracle-5.3 All versions
Showing 50 of 253. Show the rest
Ecosystem VendorProductAffected versions
Ubuntu:Pro:18.04:LTS canonical linux-oracle-5.4 All versions
Ubuntu:Pro:18.04:LTS canonical linux-raspi-5.4 All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:18.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:20.04:LTS canonical linux All versions
Ubuntu:Pro:20.04:LTS canonical linux-aws All versions
Ubuntu:20.04:LTS canonical linux-aws-5.11 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.13 All versions
Ubuntu:20.04:LTS canonical linux-aws-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-azure All versions
Ubuntu:20.04:LTS canonical linux-azure-5.11 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.13 All versions
Ubuntu:20.04:LTS canonical linux-azure-5.8 All versions
Ubuntu:20.04:LTS canonical linux-azure-fde All versions
Ubuntu:Pro:20.04:LTS canonical linux-bluefield All versions
Ubuntu:Pro:20.04:LTS canonical linux-gcp All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.11 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.13 All versions
Ubuntu:20.04:LTS canonical linux-gcp-5.8 All versions
Ubuntu:20.04:LTS canonical linux-gke All versions
Ubuntu:20.04:LTS canonical linux-gke-5.15 All versions
Ubuntu:20.04:LTS canonical linux-gkeop All versions
Ubuntu:20.04:LTS canonical linux-gkeop-5.15 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.11 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.13 All versions
Ubuntu:20.04:LTS canonical linux-hwe-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-ibm All versions
Ubuntu:20.04:LTS canonical linux-intel-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-iot All versions
Ubuntu:Pro:20.04:LTS canonical linux-kvm All versions
Ubuntu:Pro:20.04:LTS canonical linux-nvidia-tegra-5.15 < 5.15.0-1064.66~20.04.1
Fix: upgrade to 5.15.0-1064.66~20.04.1
Ubuntu:20.04:LTS canonical linux-oem-5.10 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.13 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.14 All versions
Ubuntu:20.04:LTS canonical linux-oem-5.6 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.11 All versions
Ubuntu:20.04:LTS canonical linux-oracle-5.13 All versions
Ubuntu:Pro:20.04:LTS canonical linux-oracle-5.15 < 5.15.0-1109.115~20.04.1
Fix: upgrade to 5.15.0-1109.115~20.04.1
Ubuntu:20.04:LTS canonical linux-oracle-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-raspi All versions
Ubuntu:20.04:LTS canonical linux-raspi2 All versions
Ubuntu:20.04:LTS canonical linux-riscv All versions
Ubuntu:20.04:LTS canonical linux-riscv-5.11 All versions
Ubuntu:Pro:20.04:LTS canonical linux-riscv-5.15 < 5.15.0-1106.110~20.04.1
Fix: upgrade to 5.15.0-1106.110~20.04.1
Ubuntu:20.04:LTS canonical linux-riscv-5.8 All versions
Ubuntu:Pro:20.04:LTS canonical linux-xilinx-zynqmp All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-updates:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS:20.04:LTS canonical linux-gcp-fips All versions
Ubuntu:22.04:LTS canonical linux < 5.15.0-186.196
Fix: upgrade to 5.15.0-186.196
Ubuntu:22.04:LTS canonical linux-allwinner-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws < 5.15.0-1112.119
Fix: upgrade to 5.15.0-1112.119
Ubuntu:22.04:LTS canonical linux-aws-5.19 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.2 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.5 All versions
Ubuntu:22.04:LTS canonical linux-aws-6.8 < 6.8.0-1052.55~22.04.1
Fix: upgrade to 6.8.0-1052.55~22.04.1
Ubuntu:22.04:LTS canonical linux-azure < 5.15.0-1117.126
Fix: upgrade to 5.15.0-1117.126
Ubuntu:22.04:LTS canonical linux-azure-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.5 All versions
Ubuntu:22.04:LTS canonical linux-azure-6.8 < 6.8.0-1059.65~22.04.1
Fix: upgrade to 6.8.0-1059.65~22.04.1
Ubuntu:22.04:LTS canonical linux-azure-fde < 5.15.0-1117.126
Fix: upgrade to 5.15.0-1117.126
Ubuntu:22.04:LTS canonical linux-azure-fde-5.19 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.2 All versions
Ubuntu:22.04:LTS canonical linux-azure-fde-6.8 < 6.8.0-1058.65~22.04.1
Fix: upgrade to 6.8.0-1058.65~22.04.1
Ubuntu:22.04:LTS canonical linux-gcp < 5.15.0-1112.122
Fix: upgrade to 5.15.0-1112.122
Ubuntu:22.04:LTS canonical linux-gcp-5.19 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.2 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.5 All versions
Ubuntu:22.04:LTS canonical linux-gcp-6.8 < 6.8.0-1054.57~22.04.1
Fix: upgrade to 6.8.0-1054.57~22.04.1
Ubuntu:22.04:LTS canonical linux-gke < 5.15.0-1108.114
Fix: upgrade to 5.15.0-1108.114
Ubuntu:22.04:LTS canonical linux-gkeop < 5.15.0-1095.103
Fix: upgrade to 5.15.0-1095.103
Ubuntu:22.04:LTS canonical linux-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-hwe-6.8 < 6.8.0-110.110~22.04.1
Fix: upgrade to 6.8.0-110.110~22.04.1
Ubuntu:22.04:LTS canonical linux-ibm < 5.15.0-1106.110
Fix: upgrade to 5.15.0-1106.110
Ubuntu:22.04:LTS canonical linux-ibm-6.8 < 6.8.0-1051.51~22.04.1
Fix: upgrade to 6.8.0-1051.51~22.04.1
Ubuntu:22.04:LTS canonical linux-intel-iot-realtime All versions
Ubuntu:22.04:LTS canonical linux-intel-iotg < 5.15.0-1107.113
Fix: upgrade to 5.15.0-1107.113
Ubuntu:22.04:LTS canonical linux-kvm < 5.15.0-1104.109
Fix: upgrade to 5.15.0-1104.109
Ubuntu:22.04:LTS canonical linux-lowlatency < 5.15.0-184.194
Fix: upgrade to 5.15.0-184.194
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-5.19 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.2 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.5 All versions
Ubuntu:22.04:LTS canonical linux-lowlatency-hwe-6.8 < 6.8.0-110.110.1~22.04.1
Fix: upgrade to 6.8.0-110.110.1~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia < 5.15.0-1107.108
Fix: upgrade to 5.15.0-1107.108
Ubuntu:22.04:LTS canonical linux-nvidia-6.2 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.5 All versions
Ubuntu:22.04:LTS canonical linux-nvidia-6.8 < 6.8.0-1051.54~22.04.1
Fix: upgrade to 6.8.0-1051.54~22.04.1
Ubuntu:22.04:LTS canonical linux-nvidia-tegra < 5.15.0-1064.66
Fix: upgrade to 5.15.0-1064.66
Ubuntu:22.04:LTS canonical linux-nvidia-tegra-igx < 5.15.0-1053.53
Fix: upgrade to 5.15.0-1053.53
Ubuntu:22.04:LTS canonical linux-oem-5.17 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.0 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.1 All versions
Ubuntu:22.04:LTS canonical linux-oem-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle < 5.15.0-1109.115
Fix: upgrade to 5.15.0-1109.115
Ubuntu:22.04:LTS canonical linux-oracle-6.5 All versions
Ubuntu:22.04:LTS canonical linux-oracle-6.8 < 6.8.0-1049.50~22.04.1
Fix: upgrade to 6.8.0-1049.50~22.04.1
Ubuntu:22.04:LTS canonical linux-raspi < 5.15.0-1106.109
Fix: upgrade to 5.15.0-1106.109
Ubuntu:22.04:LTS canonical linux-realtime All versions
Ubuntu:22.04:LTS canonical linux-riscv All versions
Ubuntu:22.04:LTS canonical linux-riscv-5.19 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.5 All versions
Ubuntu:22.04:LTS canonical linux-riscv-6.8 < 6.8.0-110.110~22.04.1
Fix: upgrade to 6.8.0-110.110~22.04.1
Ubuntu:22.04:LTS canonical linux-starfive-5.19 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.2 All versions
Ubuntu:22.04:LTS canonical linux-starfive-6.5 All versions
Ubuntu:22.04:LTS canonical linux-xilinx-zynqmp < 5.15.0-1075.79
Fix: upgrade to 5.15.0-1075.79
Ubuntu:Nvidia-BlueField:22.04:LTS canonical linux-bluefield < 5.15.0-1096.98
Fix: upgrade to 5.15.0-1096.98
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-aws-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-azure-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-fips All versions
Ubuntu:Pro:FIPS-preview:22.04:LTS canonical linux-gcp-fips All versions
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-aws-fips < 5.15.0-1112.119+fips1
Fix: upgrade to 5.15.0-1112.119+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-azure-fips < 5.15.0-1117.126+fips1
Fix: upgrade to 5.15.0-1117.126+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-fips < 5.15.0-186.196+fips1
Fix: upgrade to 5.15.0-186.196+fips1
Ubuntu:Pro:FIPS-updates:22.04:LTS canonical linux-gcp-fips < 5.15.0-1112.122+fips1
Fix: upgrade to 5.15.0-1112.122+fips1
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-intel-iot-realtime < 5.15.0-1104.106
Fix: upgrade to 5.15.0-1104.106
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime < 5.15.0-1111.120
Fix: upgrade to 5.15.0-1111.120
Ubuntu:Pro:Realtime:22.04:LTS canonical linux-realtime-6.8 < 6.8.1-1047.48~22.04.1
Fix: upgrade to 6.8.1-1047.48~22.04.1
Ubuntu:24.04:LTS canonical linux < 6.8.0-110.110
Fix: upgrade to 6.8.0-110.110
Ubuntu:24.04:LTS canonical linux-aws < 6.8.0-1052.55
Fix: upgrade to 6.8.0-1052.55
Ubuntu:24.04:LTS canonical linux-aws-6.14 All versions
Ubuntu:24.04:LTS canonical linux-aws-6.17 < 6.17.0-1007.7~24.04.1
Fix: upgrade to 6.17.0-1007.7~24.04.1
Ubuntu:24.04:LTS canonical linux-azure < 6.8.0-1054.60
Fix: upgrade to 6.8.0-1054.60
Ubuntu:24.04:LTS canonical linux-azure-6.11 All versions
Ubuntu:24.04:LTS canonical linux-azure-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde < 6.8.0-1058.65
Fix: upgrade to 6.8.0-1058.65
Ubuntu:24.04:LTS canonical linux-azure-fde-6.14 All versions
Ubuntu:24.04:LTS canonical linux-azure-fde-6.17 All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia All versions
Ubuntu:24.04:LTS canonical linux-azure-nvidia-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp < 6.8.0-1054.57
Fix: upgrade to 6.8.0-1054.57
Ubuntu:24.04:LTS canonical linux-gcp-6.11 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.14 All versions
Ubuntu:24.04:LTS canonical linux-gcp-6.17 < 6.17.0-1008.8~24.04.1
Fix: upgrade to 6.17.0-1008.8~24.04.1
Ubuntu:24.04:LTS canonical linux-gke < 6.8.0-1050.56
Fix: upgrade to 6.8.0-1050.56
Ubuntu:24.04:LTS canonical linux-gkeop < 6.8.0-1037.40
Fix: upgrade to 6.8.0-1037.40
Ubuntu:24.04:LTS canonical linux-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-hwe-6.14 All versions
Ubuntu:24.04:LTS canonical linux-ibm < 6.8.0-1051.51
Fix: upgrade to 6.8.0-1051.51
Ubuntu:24.04:LTS canonical linux-lowlatency < 6.8.0-110.110.1
Fix: upgrade to 6.8.0-110.110.1
Ubuntu:24.04:LTS canonical linux-lowlatency-hwe-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia < 6.8.0-1051.54
Fix: upgrade to 6.8.0-1051.54
Ubuntu:24.04:LTS canonical linux-nvidia-6.11 All versions
Ubuntu:24.04:LTS canonical linux-nvidia-6.17 < 6.17.0-1008.8
Fix: upgrade to 6.17.0-1008.8
Ubuntu:24.04:LTS canonical linux-nvidia-lowlatency < 6.8.0-1051.54.1
Fix: upgrade to 6.8.0-1051.54.1
Ubuntu:24.04:LTS canonical linux-nvidia-tegra < 6.8.0-1022.22
Fix: upgrade to 6.8.0-1022.22
Ubuntu:24.04:LTS canonical linux-oem-6.11 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oem-6.17 < 6.17.0-1011.11
Fix: upgrade to 6.17.0-1011.11
Ubuntu:24.04:LTS canonical linux-oem-6.8 All versions
Ubuntu:24.04:LTS canonical linux-oracle < 6.8.0-1049.50
Fix: upgrade to 6.8.0-1049.50
Ubuntu:24.04:LTS canonical linux-oracle-6.14 All versions
Ubuntu:24.04:LTS canonical linux-oracle-6.17 < 6.17.0-1007.7~24.04.1
Fix: upgrade to 6.17.0-1007.7~24.04.1
Ubuntu:24.04:LTS canonical linux-raspi < 6.8.0-1052.56
Fix: upgrade to 6.8.0-1052.56
Ubuntu:24.04:LTS canonical linux-raspi-realtime All versions
Ubuntu:24.04:LTS canonical linux-realtime All versions
Ubuntu:24.04:LTS canonical linux-riscv All versions
Ubuntu:24.04:LTS canonical linux-riscv-6.14 All versions
Ubuntu:24.04:LTS canonical linux-xilinx < 6.8.0-1028.29
Fix: upgrade to 6.8.0-1028.29
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-aws-fips < 6.8.0-1052.55+fips1
Fix: upgrade to 6.8.0-1052.55+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-azure-fips < 6.8.0-1053.59+fips1
Fix: upgrade to 6.8.0-1053.59+fips1
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-fips < 6.8.0-110.110+fips2
Fix: upgrade to 6.8.0-110.110+fips2
Ubuntu:Pro:FIPS-updates:24.04:LTS canonical linux-gcp-fips < 6.8.0-1054.57+fips1
Fix: upgrade to 6.8.0-1054.57+fips1
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-raspi-realtime < 6.8.0-2042.43
Fix: upgrade to 6.8.0-2042.43
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime < 6.8.1-1047.48
Fix: upgrade to 6.8.1-1047.48
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.14 All versions
Ubuntu:Pro:Realtime:24.04:LTS canonical linux-realtime-6.17 < 6.17.0-1006.7~24.04.1
Fix: upgrade to 6.17.0-1006.7~24.04.1
Ubuntu:25.10 canonical linux < 6.17.0-14.14
Fix: upgrade to 6.17.0-14.14
Ubuntu:25.10 canonical linux-aws < 6.17.0-1007.7
Fix: upgrade to 6.17.0-1007.7
Ubuntu:25.10 canonical linux-azure < 6.17.0-1008.8
Fix: upgrade to 6.17.0-1008.8
Ubuntu:25.10 canonical linux-azure-fde All versions
Ubuntu:25.10 canonical linux-gcp < 6.17.0-1007.7
Fix: upgrade to 6.17.0-1007.7
Ubuntu:25.10 canonical linux-oracle < 6.17.0-1007.7
Fix: upgrade to 6.17.0-1007.7
Ubuntu:25.10 canonical linux-raspi < 6.17.0-1008.8
Fix: upgrade to 6.17.0-1008.8
Ubuntu:25.10 canonical linux-realtime < 6.17.0-1006.7
Fix: upgrade to 6.17.0-1006.7
Ubuntu:25.10 canonical linux-riscv < 6.17.0-14.14.1
Fix: upgrade to 6.17.0-14.14.1
Root:Debian:11 debian rootio-linux < 5.10.249-1.root.io.52
Fix: upgrade to 5.10.249-1.root.io.52
Root:Ubuntu:22.04 canonical rootio-linux < 5.15.0-186.196.root.io.103
Fix: upgrade to 5.15.0-186.196.root.io.103
Root:Ubuntu:24.04 canonical rootio-linux < 6.8.0-117.117.root.io.68
< 6.8.0-124.124.root.io.70
< 6.8.0-124.124.root.io.71
< 6.8.0-124.124.root.io.72
< 6.8.0-124.124.root.io.73
< 6.8.0-134.134.root.io.79
< 6.8.0-134.134.root.io.80
< 6.8.0-136.136.root.io.82
< 6.8.0-136.136.root.io.83
Fix: upgrade to 6.8.0-117.117.root.io.68
Root:Ubuntu:24.04 – linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:24.04 – rootio-linux < 6.8.0-146.146.aikido.89
< 6.8.0-147.147.aikido.90
Fix: upgrade to 6.8.0-146.146.aikido.89
Root:Ubuntu:22.04 – linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Root:Ubuntu:22.04 – rootio-linux < 5.15.0-198.208.aikido.116
< 5.15.0-202.212.aikido.118
Fix: upgrade to 5.15.0-198.208.aikido.116
Linux linux kernel >= 6.13.0, < 6.17.9
Fix: upgrade to 6.17.9
Root:Debian:13 – linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:13 – rootio-linux < 6.12.113-1.aikido.163
Fix: upgrade to 6.12.113-1.aikido.163
Root:Debian:12 – linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Root:Debian:12 – rootio-linux < 6.1.190-1.aikido.167
Fix: upgrade to 6.1.190-1.aikido.167
Original advisory text
CVE-2025-68206 in linux - Patched by Root
In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_ct: add seqadj extension for natted connections Sequence adjustment may be required for FTP traffic with PASV/EPSV modes. due to need to re-write packet payload (IP, port) on the ftp control connection. This can require changes to the TCP length and expected seq / ack_seq. The easiest way to reproduce this issue is with PASV mode. Example ruleset: table inet ftp_nat { ct helper ftp_helper { type "ftp" protocol tcp l3proto inet } chain prerouting { type filter hook prerouting priority 0; policy accept; tcp dport 21 ct state new ct helper set "ftp_helper" } } table ip nat { chain prerouting { type nat hook prerouting priority -100; policy accept; tcp dport 21 dnat ip prefix to ip daddr map { 192.168.100.1 : 192.168.13.2/32 } } chain postrouting { type nat hook postrouting priority 100 ; policy accept; tcp sport 21 snat ip prefix to ip saddr map { 192.168.13.2 : 192.168.100.1/32 } } } Note that the ftp helper gets assigned *after* the dnat setup. The inverse (nat after helper assign) is handled by an existing check in nf_nat_setup_info() and will not show the problem. Topoloy: +-------------------+ +----------------------------------+ | FTP: 192.168.13.2 | <-> | NAT: 192.168.13.3, 192.168.100.1 | +-------------------+ +----------------------------------+ | +-----------------------+ | Client: 192.168.100.2 | +-----------------------+ ftp nat changes do not work as expected in this case: Connected to 192.168.100.1. [..] ftp> epsv EPSV/EPRT on IPv4 off. ftp> ls 227 Entering passive mode (192,168,100,1,209,129). 421 Service not available, remote server has closed connection. Kernel logs: Missing nfct_seqadj_ext_add() setup call WARNING: CPU: 1 PID: 0 at net/netfilter/nf_conntrack_seqadj.c:41 [..] __nf_nat_mangle_tcp_packet+0x100/0x160 [nf_nat] nf_nat_ftp+0x142/0x280 [nf_nat_ftp] help+0x4d1/0x880 [nf_conntrack_ftp] nf_confirm+0x122/0x2e0 [nf_conntrack] nf_hook_slow+0x3c/0xb0 .. Fix this by adding the required extension when a conntrack helper is assigned to a connection that has a nat binding.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
6.3 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published16 Dec 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
ROOT-OS-DEBIAN-11-CVE-2025-68206 · OSV
ROOT-OS-DEBIAN-12-CVE-2025-68206 · OSV
ROOT-OS-DEBIAN-13-CVE-2025-68206 · OSV
ROOT-OS-UBUNTU-2404-CVE-2025-68206 · OSV
DEBIAN-CVE-2025-68206 · OSV
ROOT-OS-UBUNTU-2204-CVE-2025-68206 · OSV
UBUNTU-CVE-2025-68206 · OSV
CVE-2025-68206 · MITRE
CVE-2025-68206 · NVD
CVE-2025-68206 · OSV
Track software like this
Free during beta