Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel updates for AWS, GCP, Oracle may allow takeover
published 1 year ago
Summary
The Linux kernel versions used on AWS, Google Cloud, and Oracle Cloud contain several coding errors that could let an attacker gain control of the system. Updating to the latest kernel patches fixes these errors across many components such as networking, storage, and device drivers. Apply the provided updates as soon as possible to keep your servers secure.
What to do
- Update canonical linux-aws-6.14 to version 6.14.0-1011.11~24.04.1.
- Update canonical linux-gcp-6.14 to version 6.14.0-1014.15~24.04.1.
- Update canonical linux-oracle-6.14 to version 6.14.0-1011.11~24.04.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:24.04:LTS | canonical | linux-aws-6.14 |
< 6.14.0-1011.11~24.04.1 Fix: upgrade to 6.14.0-1011.11~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.14 |
< 6.14.0-1014.15~24.04.1 Fix: upgrade to 6.14.0-1014.15~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-oracle-6.14 |
< 6.14.0-1011.11~24.04.1 Fix: upgrade to 6.14.0-1011.11~24.04.1
|
Original advisory text
linux, linux-aws, linux-aws-6.14, linux-gcp, linux-gcp-6.14, linux-oracle, linux-oracle-6.14, linux-raspi, linux-realtime vulnerabilities
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- RISC-V architecture;
- x86 architecture;
- Buffer Sharing and Synchronization framework;
- DMA engine subsystem;
- GPU drivers;
- HID subsystem;
- IIO ADC drivers;
- IIO subsystem;
- InfiniBand drivers;
- Input Device core drivers;
- Network drivers;
- Mellanox network drivers;
- PHY drivers;
- Voltage and Current Regulator drivers;
- VideoCore services drivers;
- USB Type-C Connector System Software Interface driver;
- Xen hypervisor drivers;
- EROFS file system;
- Network file system (NFS) client;
- File systems infrastructure;
- SMB network file system;
- Network traffic control;
- io_uring subsystem;
- Kernel command line parsing driver;
- Scheduler infrastructure;
- Memory management;
- Networking core;
- MAC80211 subsystem;
- Management Component Transport Protocol (MCTP);
- Netfilter;
- Open vSwitch;
- TLS protocol;
- Wireless networking;
- SOF drivers;
(CVE-2025-38011, CVE-2025-38095, CVE-2025-37967, CVE-2025-38012,
CVE-2025-38019, CVE-2025-37960, CVE-2025-37973, CVE-2025-37958,
CVE-2025-38094, CVE-2025-37963, CVE-2025-37955, CVE-2025-38014,
CVE-2025-38025, CVE-2025-37970, CVE-2025-37947, CVE-2025-37966,
CVE-2025-37948, CVE-2025-38013, CVE-2025-37957, CVE-2025-38028,
CVE-2025-37962, CVE-2025-38002, CVE-2025-37996, CVE-2025-37992,
CVE-2025-37969, CVE-2025-38009, CVE-2025-38027, CVE-2025-38020,
CVE-2025-38023, CVE-2025-38008, CVE-2025-38015, CVE-2025-37954,
CVE-2025-38007, CVE-2025-38005, CVE-2025-37956, CVE-2025-37965,
CVE-2025-37972, CVE-2025-38006, CVE-2025-37971, CVE-2025-38056,
CVE-2025-37968, CVE-2025-38024, CVE-2025-37951, CVE-2025-38016,
CVE-2025-38022, CVE-2025-37964, CVE-2025-37994, CVE-2025-37952,
CVE-2025-37998, CVE-2025-37993, CVE-2025-38018, CVE-2025-38010,
CVE-2025-37995, CVE-2025-38021, CVE-2025-37999, CVE-2025-37961,
CVE-2025-37959, CVE-2025-37950, CVE-2025-37949)
References
- https://ubuntu.com/security/CVE-2025-38021 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38022 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38023 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38024 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38025 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38027 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38028 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38056 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38094 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38095 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7699-1 Vendor Advisory
- https://ubuntu.com/security/CVE-2025-37947 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37948 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37949 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37950 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37951 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37952 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37954 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37955 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37956 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37957 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37958 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37959 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37960 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37961 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37962 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37963 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37964 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37965 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37966 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37967 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37968 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37969 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37970 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37971 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37972 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37973 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37992 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37993 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37994 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37995 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37996 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37998 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-37999 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38002 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38005 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38006 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38007 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38008 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38009 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38010 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38011 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38012 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38013 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38014 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38015 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38016 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38018 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38019 Third Party Advisory
- https://ubuntu.com/security/CVE-2025-38020 Third Party Advisory
Timeline
Published18 Aug 2025
Updated12 Oct 2026
First seen12 Oct 2026
Sources
USN-7699-1 · OSV
Track software like this
Free during beta