Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2025-68748: Linux packages may allow unauthorized changes
CVE-2025-68748 · published 2 days ago
Summary
Several Linux packages, including the standard Linux kernel and related distributions, have been updated to stop a flaw that could let an attacker gain system control. The fix is already included in newer package versions, so updating your Linux installations to the latest releases will protect against this risk.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.64.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1018.18.
- Update canonical linux-oem-6.17 to version 6.17.0-1017.17.
- Update canonical linux-aws-6.17 to version 6.17.0-1009.9~24.04.2.
- Update canonical linux-azure-6.17 to version 6.17.0-1010.10~24.04.1.
- Update canonical linux-gcp-6.17 to version 6.17.0-1009.9~24.04.3.
- Update canonical linux-hwe-6.17 to version 6.17.0-19.19~24.04.2.
- Update canonical linux-oracle-6.17 to version 6.17.0-1009.9~24.04.1.
- Update canonical linux-riscv-6.17 to version 6.17.0-19.19.1~24.04.1.
- Update canonical linux-realtime-6.17 to version 6.17.0-1008.9~24.04.1.
- Update canonical linux to version 6.17.0-19.19.
- Update canonical linux-aws to version 6.17.0-1009.9.
- Update canonical linux-azure to version 6.17.0-1010.10.
- Update canonical linux-gcp to version 6.17.0-1009.9.
- Update canonical linux-oracle to version 6.17.0-1009.9.
- Update canonical linux-raspi to version 6.17.0-1010.10.
- Update canonical linux-realtime to version 6.17.0-1008.9.
- Update canonical linux-riscv to version 6.17.0-19.19.1.
- Update debian linux to version 6.12.63-1.
- Update debian linux to version 6.17.13-1.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
- Update linux kernel to version 6.18.2.
- Update linux to version 6.12.115-2.aikido.164.
- Update rootio-linux to version 6.12.115-2.aikido.164.
- Update linux linux to version 31db188355a49337e3e8ec98b99377e482eab22c or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.64 Fix: upgrade to 6.12.63-1.root.io.64
|
| – | linux | linux |
< 31db188355a49337e3e8ec98b99377e482eab22c 6.10 |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1018.18 Fix: upgrade to 6.17.0-1018.18
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1017.17 Fix: upgrade to 6.17.0-1017.17
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
Showing 50 of 125. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1009.9~24.04.2 Fix: upgrade to 6.17.0-1009.9~24.04.2
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 |
< 6.17.0-1010.10~24.04.1 Fix: upgrade to 6.17.0-1010.10~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1009.9~24.04.3 Fix: upgrade to 6.17.0-1009.9~24.04.3
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 |
< 6.17.0-19.19~24.04.2 Fix: upgrade to 6.17.0-19.19~24.04.2
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1009.9~24.04.1 Fix: upgrade to 6.17.0-1009.9~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 |
< 6.17.0-19.19.1~24.04.1 Fix: upgrade to 6.17.0-19.19.1~24.04.1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1008.9~24.04.1 Fix: upgrade to 6.17.0-1008.9~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-19.19 Fix: upgrade to 6.17.0-19.19
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1009.9 Fix: upgrade to 6.17.0-1009.9
|
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1010.10 Fix: upgrade to 6.17.0-1010.10
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1009.9 Fix: upgrade to 6.17.0-1009.9
|
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1009.9 Fix: upgrade to 6.17.0-1009.9
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1010.10 Fix: upgrade to 6.17.0-1010.10
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1008.9 Fix: upgrade to 6.17.0-1008.9
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-19.19.1 Fix: upgrade to 6.17.0-19.19.1
|
| Debian:13 | debian | linux |
< 6.12.63-1 Fix: upgrade to 6.12.63-1
|
| Debian:14 | debian | linux |
< 6.17.13-1 Fix: upgrade to 6.17.13-1
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 < 6.12.115-2.aikido.164 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 < 6.12.115-2.aikido.164 Fix: upgrade to 6.12.113-1.aikido.163
|
| Linux | linux | kernel |
>= 6.18.0, < 6.18.2 Fix: upgrade to 6.18.2
|
Original advisory text
CVE-2025-68748 in linux - Patched by Root
Root has patched CVE-2025-68748 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
- https://ubuntu.com/security/CVE-2025-68748 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-68748 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8094-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8094-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8094-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8094-4 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8094-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8152-1 Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2025-68748 Vendor Advisory
- https://git.kernel.org/stable/c/31db188355a49337e3e8ec98b99377e482eab22c URL
- https://git.kernel.org/stable/c/5e3ff56d4cb591daea70786d07dc21d06dc34108 URL
- https://git.kernel.org/stable/c/6c1da9ae2c123a9ffda5375e64cc81f9ed3cc04a URL
- https://git.kernel.org/stable/c/7051f6ba968fa69918d72cc26de4d6cf7ea05b90 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/68xxx/CVE-2025-68748... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-68748 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
Severity
7.8
High
Timeline
Published3 Nov 2026
Updated3 Nov 2026
First seen6 Mar 2026
Sources
UBUNTU-CVE-2025-68748 · OSV
CVE-2025-68748 · MITRE
CVE-2025-68748 · NVD
DEBIAN-CVE-2025-68748 · OSV
CVE-2025-68748 · OSV
Track software like this
Free during beta