Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.3
CVE-2025-71134: Linux kernel permits privilege escalation on Debian 13
CVE-2025-71134 · published 2 days ago
Summary
The Linux kernel version shipped with Debian 13 contained a weakness that could let a malicious user gain higher system privileges. This could allow an attacker to control the entire server. Install the latest kernel updates from Debian or the appropriate vendor to close the gap.
What to do
- Update debian rootio-linux to version 6.12.63-1.root.io.65.
- Update debian linux to version 6.12.69-1.
- Update debian linux to version 6.18.5-1.
- Update canonical linux-aws-6.17 to version 6.17.0-1017.17~24.04.1.
- Update canonical linux-azure-6.17 to version 6.17.0-1015.15~24.04.1.
- Update canonical linux-gcp-6.17 to version 6.17.0-1018.19~24.04.1.
- Update canonical linux-nvidia-6.17 to version 6.17.0-1026.26.
- Update canonical linux-azure to version 6.17.0-1015.15.
- Update canonical linux-gcp to version 6.17.0-1018.19.
- Update canonical linux-hwe-6.17 to version 6.17.0-29.29~24.04.1.
- Update canonical linux-oem-6.17 to version 6.17.0-1023.23.
- Update canonical linux-oracle-6.17 to version 6.17.0-1014.14~24.04.1.
- Update canonical linux-riscv-6.17 to version 6.17.0-29.29.1~24.04.1.
- Update canonical linux-realtime-6.17 to version 6.17.0-1013.15~24.04.1.
- Update canonical linux to version 6.17.0-29.29.
- Update canonical linux-aws to version 6.17.0-1015.15.
- Update canonical linux-oracle to version 6.17.0-1014.14.
- Update canonical linux-raspi to version 6.17.0-1017.17.
- Update canonical linux-realtime to version 6.17.0-1013.15.
- Update canonical linux-riscv to version 6.17.0-29.29.1.
- Update linux to version 6.12.113-1.aikido.163.
- Update rootio-linux to version 6.12.113-1.aikido.163.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Root:Debian:13 | debian | rootio-linux |
< 6.12.63-1.root.io.65 Fix: upgrade to 6.12.63-1.root.io.65
|
| – | linux | linux_kernel |
>= 6.10.1, < 6.12.65 >= 6.13, < 6.18.4 6.10 6.19 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Debian:13 | debian | linux |
< 6.12.69-1 Fix: upgrade to 6.12.69-1
|
| Debian:14 | debian | linux |
< 6.18.5-1 Fix: upgrade to 6.18.5-1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.17 |
< 6.17.0-1017.17~24.04.1 Fix: upgrade to 6.17.0-1017.17~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.17 |
< 6.17.0-1015.15~24.04.1 Fix: upgrade to 6.17.0-1015.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.17 |
< 6.17.0-1018.19~24.04.1 Fix: upgrade to 6.17.0-1018.19~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.17 |
< 6.17.0-1026.26 Fix: upgrade to 6.17.0-1026.26
|
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:25.10 | canonical | linux-azure |
< 6.17.0-1015.15 Fix: upgrade to 6.17.0-1015.15
|
| Ubuntu:25.10 | canonical | linux-gcp |
< 6.17.0-1018.19 Fix: upgrade to 6.17.0-1018.19
|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
Showing 50 of 124. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-fde-6.17 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.17 |
< 6.17.0-29.29~24.04.1 Fix: upgrade to 6.17.0-29.29~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.17 |
< 6.17.0-1023.23 Fix: upgrade to 6.17.0-1023.23
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.17 |
< 6.17.0-1014.14~24.04.1 Fix: upgrade to 6.17.0-1014.14~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.17 |
< 6.17.0-29.29.1~24.04.1 Fix: upgrade to 6.17.0-29.29.1~24.04.1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.14 | All versions |
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime-6.17 |
< 6.17.0-1013.15~24.04.1 Fix: upgrade to 6.17.0-1013.15~24.04.1
|
| Ubuntu:25.10 | canonical | linux |
< 6.17.0-29.29 Fix: upgrade to 6.17.0-29.29
|
| Ubuntu:25.10 | canonical | linux-aws |
< 6.17.0-1015.15 Fix: upgrade to 6.17.0-1015.15
|
| Ubuntu:25.10 | canonical | linux-azure-fde | All versions |
| Ubuntu:25.10 | canonical | linux-oracle |
< 6.17.0-1014.14 Fix: upgrade to 6.17.0-1014.14
|
| Ubuntu:25.10 | canonical | linux-raspi |
< 6.17.0-1017.17 Fix: upgrade to 6.17.0-1017.17
|
| Ubuntu:25.10 | canonical | linux-realtime |
< 6.17.0-1013.15 Fix: upgrade to 6.17.0-1013.15
|
| Ubuntu:25.10 | canonical | linux-riscv |
< 6.17.0-29.29.1 Fix: upgrade to 6.17.0-29.29.1
|
| Root:Debian:13 | – | linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
| Root:Debian:13 | – | rootio-linux |
< 6.12.113-1.aikido.163 Fix: upgrade to 6.12.113-1.aikido.163
|
Original advisory text
CVE-2025-71134 in linux - Patched by Root
Root has patched CVE-2025-71134 in the linux package for Root:Debian:13. Multiple fixed versions available.
References
- https://git.kernel.org/stable/c/7838a4eb8a1d23160bd3f588ea7f2b8f7c00c55b Patch
- https://git.kernel.org/stable/c/914769048818021556c940b9163e8056be9507dd Patch
- https://git.kernel.org/stable/c/a794d65b132107a085d165caba33aae1101316a5 Patch
- https://security-tracker.debian.org/tracker/CVE-2025-71134 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8310-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8374-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8508-1 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-71134 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8277-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8277-2 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-71134 Third Party Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Severity
3.3
Low
Timeline
Published17 Oct 2026
Updated17 Oct 2026
First seen7 Mar 2026
Track software like this
Free during beta