UBUNTU-CVE-2025-38020

Source
https://ubuntu.com/security/CVE-2025-38020
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-38020
Upstream
Downstream
USN (19)
Related
Published
2025-06-18T10:15:00Z
Modified
2026-10-12T14:21:35Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - low
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Disable MACsec offload for uplink representor profile MACsec offload is not supported in switchdev mode for uplink representors. When switching to the uplink representor profile, the MACsec offload feature must be cleared from the netdevice's features. If left enabled, attempts to add offloads result in a null pointer dereference, as the uplink representor does not support MACsec offload even though the feature bit remains set. Clear NETIF_F_HW_MACSEC in mlx5e_fix_uplink_rep_features(). Kernel log: Oops: general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] CPU: 29 UID: 0 PID: 4714 Comm: ip Not tainted 6.14.0-rc4_for_upstream_debug_2025_03_02_17_35 #1 Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 RIP: 0010:__mutex_lock+0x128/0x1dd0 Code: d0 7c 08 84 d2 0f 85 ad 15 00 00 8b 35 91 5c fe 03 85 f6 75 29 49 8d 7e 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 a6 15 00 00 4d 3b 76 60 0f 85 fd 0b 00 00 65 ff RSP: 0018:ffff888147a4f160 EFLAGS: 00010206 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000001 RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000078 RBP: ffff888147a4f2e0 R08: ffffffffa05d2c19 R09: 0000000000000000 R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 R13: dffffc0000000000 R14: 0000000000000018 R15: ffff888152de0000 FS: 00007f855e27d800(0000) GS:ffff88881ee80000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00000000004e5768 CR3: 000000013ae7c005 CR4: 0000000000372eb0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 Call Trace: ? die_addr+0x3d/0xa0 ? exc_general_protection+0x144/0x220 ? asm_exc_general_protection+0x22/0x30 ? mlx5e_macsec_add_secy+0xf9/0x700 [mlx5_core] ? __mutex_lock+0x128/0x1dd0 ? lockdep_set_lock_cmp_fn+0x190/0x190 ? mlx5e_macsec_add_secy+0xf9/0x700 [mlx5_core] ? mutex_lock_io_nested+0x1ae0/0x1ae0 ? lock_acquire+0x1c2/0x530 ? macsec_upd_offload+0x145/0x380 ? lockdep_hardirqs_on_prepare+0x400/0x400 ? kasan_save_stack+0x30/0x40 ? kasan_save_stack+0x20/0x40 ? kasan_save_track+0x10/0x30 ? __kasan_kmalloc+0x77/0x90 ? __kmalloc_noprof+0x249/0x6b0 ? genl_family_rcv_msg_attrs_parse.constprop.0+0xb5/0x240 ? mlx5e_macsec_add_secy+0xf9/0x700 [mlx5_core] mlx5e_macsec_add_secy+0xf9/0x700 [mlx5_core] ? mlx5e_macsec_add_rxsa+0x11a0/0x11a0 [mlx5_core] macsec_update_offload+0x26c/0x820 ? macsec_set_mac_address+0x4b0/0x4b0 ? lockdep_hardirqs_on_prepare+0x284/0x400 ? _raw_spin_unlock_irqrestore+0x47/0x50 macsec_upd_offload+0x2c8/0x380 ? macsec_update_offload+0x820/0x820 ? __nla_parse+0x22/0x30 ? genl_family_rcv_msg_attrs_parse.constprop.0+0x15e/0x240 genl_family_rcv_msg_doit+0x1cc/0x2a0 ? genl_family_rcv_msg_attrs_parse.constprop.0+0x240/0x240 ? cap_capable+0xd4/0x330 genl_rcv_msg+0x3ea/0x670 ? genl_family_rcv_msg_dumpit+0x2a0/0x2a0 ? lockdep_set_lock_cmp_fn+0x190/0x190 ? macsec_update_offload+0x820/0x820 netlink_rcv_skb+0x12b/0x390 ? genl_family_rcv_msg_dumpit+0x2a0/0x2a0 ? netlink_ack+0xd80/0xd80 ? rwsem_down_read_slowpath+0xf90/0xf90 ? netlink_deliver_tap+0xcd/0xac0 ? netlink_deliver_tap+0x155/0xac0 ? _copy_from_iter+0x1bb/0x12c0 genl_rcv+0x24/0x40 netlink_unicast+0x440/0x700 ? netlink_attachskb+0x760/0x760 ? lock_acquire+0x1c2/0x530 ? __might_fault+0xbb/0x170 netlink_sendmsg+0x749/0xc10 ? netlink_unicast+0x700/0x700 ? __might_fault+0xbb/0x170 ? netlink_unicast+0x700/0x700 __sock_sendmsg+0xc5/0x190 ____sys_sendmsg+0x53f/0x760 ? import_iovec+0x7/0x10 ? kernel_sendmsg+0x30/0x30 ? __copy_msghdr+0x3c0/0x3c0 ? filter_irq_stacks+0x90/0x90 ? stack_depot_save_flags+0x28/0xa30 ___sys_sen ---truncated---

References

Affected packages

Ubuntu:16.04:LTS
linux-hwe-edge

Package

Name
linux-hwe-edge
Purl
pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.8.0-28.30~16.04.1
4.8.0-30.32~16.04.1
4.8.0-32.34~16.04.1
4.8.0-34.36~16.04.1
4.10.0-14.16~16.04.1
4.10.0-19.21~16.04.1
4.10.0-20.22~16.04.1
4.10.0-21.23~16.04.1
4.10.0-22.24~16.04.1
4.10.0-24.28~16.04.1
4.10.0-26.30~16.04.1
4.11.0-13.19~16.04.1
4.11.0-14.20~16.04.1
4.13.0-16.19~16.04.3
4.13.0-17.20~16.04.1
4.13.0-19.22~16.04.1
4.13.0-21.24~16.04.1
4.13.0-25.29~16.04.2
4.15.0-13.14~16.04.1
4.15.0-15.16~16.04.1
4.15.0-20.21~16.04.1
4.15.0-22.24~16.04.1
4.15.0-23.25~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-source-4.15.0",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "message-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "serial-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:18.04:LTS
linux-aws-5.0

Package

Name
linux-aws-5.0
Purl
pkg:deb/ubuntu/linux-aws-5.0?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1021.24~18.04.1
5.0.0-1022.25~18.04.1
5.0.0-1023.26~18.04.1
5.0.0-1024.27~18.04.1
5.0.0-1025.28
5.0.0-1027.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-aws-headers-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-image-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-5.3

Package

Name
linux-aws-5.3
Purl
pkg:deb/ubuntu/linux-aws-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1016.17~18.04.1
5.3.0-1017.18~18.04.1
5.3.0-1019.21~18.04.1
5.3.0-1023.25~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.2
5.3.0-1033.35
5.3.0-1034.36
5.3.0-1035.37

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-image-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1002.2
4.15.0-1003.3
4.15.0-1004.4
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1012.12
4.15.0-1013.13
4.15.0-1014.14
4.15.0-1018.18
4.15.0-1019.19
4.15.0-1021.21
4.15.0-1022.23
4.15.0-1023.24
4.15.0-1025.26
4.15.0-1028.29
4.15.0-1030.31
4.15.0-1031.32
4.15.0-1032.33
4.15.0-1035.36
4.15.0-1036.38
4.15.0-1037.39
4.18.0-1011.11~18.04.1
4.18.0-1013.13~18.04.1
4.18.0-1014.14~18.04.1
4.18.0-1018.18~18.04.1
4.18.0-1019.19~18.04.1
4.18.0-1020.20~18.04.1
4.18.0-1023.24~18.04.1
4.18.0-1024.25~18.04.1
4.18.0-1025.27~18.04.1
5.*
5.0.0-1014.14~18.04.1
5.0.0-1016.17~18.04.1
5.0.0-1018.19~18.04.1
5.0.0-1020.21~18.04.1
5.0.0-1022.23~18.04.1
5.0.0-1023.24~18.04.1
5.0.0-1025.27~18.04.1
5.0.0-1027.29~18.04.1
5.0.0-1028.30~18.04.1
5.0.0-1029.31~18.04.1
5.0.0-1031.33
5.0.0-1032.34
5.0.0-1035.37
5.0.0-1036.38

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-5.3

Package

Name
linux-azure-5.3
Purl
pkg:deb/ubuntu/linux-azure-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1007.8~18.04.1
5.3.0-1008.9~18.04.1
5.3.0-1009.10~18.04.1
5.3.0-1010.11~18.04.1
5.3.0-1012.13~18.04.1
5.3.0-1013.14~18.04.1
5.3.0-1016.17~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1019.20~18.04.1
5.3.0-1020.21~18.04.1
5.3.0-1022.23~18.04.1
5.3.0-1028.29~18.04.1
5.3.0-1031.32~18.04.1
5.3.0-1032.33~18.04.1
5.3.0-1034.35~18.04.1
5.3.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-edge

Package

Name
linux-azure-edge
Purl
pkg:deb/ubuntu/linux-azure-edge?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.18.0-1006.6~18.04.1
4.18.0-1007.7~18.04.1
4.18.0-1008.8~18.04.1
5.*
5.0.0-1012.12~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-edge-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1001.1
4.15.0-1003.3
4.15.0-1005.5
4.15.0-1006.6
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1010.10
4.15.0-1014.14
4.15.0-1015.15
4.15.0-1017.18
4.15.0-1018.19
4.15.0-1019.20
4.15.0-1021.22
4.15.0-1023.24
4.15.0-1024.25
4.15.0-1025.26
4.15.0-1026.27
4.15.0-1027.28
4.15.0-1028.29
4.15.0-1029.31
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1042.45
4.15.0-1044.70
5.*
5.0.0-1020.20~18.04.1
5.0.0-1021.21~18.04.1
5.0.0-1025.26~18.04.1
5.0.0-1026.27~18.04.1
5.0.0-1028.29~18.04.1
5.0.0-1029.30~18.04.1
5.0.0-1031.32
5.0.0-1033.34
5.0.0-1034.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-headers-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-tools-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-5.3

Package

Name
linux-gcp-5.3
Purl
pkg:deb/ubuntu/linux-gcp-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1008.9~18.04.1
5.3.0-1009.10~18.04.1
5.3.0-1010.11~18.04.1
5.3.0-1012.13~18.04.1
5.3.0-1014.15~18.04.1
5.3.0-1016.17~18.04.1
5.3.0-1017.18~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1020.22~18.04.1
5.3.0-1026.28~18.04.1
5.3.0-1029.31~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gke-4.15

Package

Name
linux-gke-4.15
Purl
pkg:deb/ubuntu/linux-gke-4.15?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1041.43
4.15.0-1042.44
4.15.0-1044.46
4.15.0-1045.48
4.15.0-1046.49
4.15.0-1048.51
4.15.0-1049.52
4.15.0-1050.53
4.15.0-1052.55
4.15.0-1055.58
4.15.0-1057.60
4.15.0-1058.61
4.15.0-1059.62
4.15.0-1063.66
4.15.0-1064.67
4.15.0-1066.69
4.15.0-1067.70
4.15.0-1069.72
4.15.0-1070.73
4.15.0-1072.76
4.15.0-1073.78
4.15.0-1074.79
4.15.0-1076.81
4.15.0-1077.82
4.15.0-1078.83
4.15.0-1079.84

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gke-5.4

Package

Name
linux-gke-5.4
Purl
pkg:deb/ubuntu/linux-gke-5.4?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1025.25~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.31~18.04.1
5.4.0-1030.32~18.04.1
5.4.0-1032.34~18.04.1
5.4.0-1033.35~18.04.1
5.4.0-1035.37~18.04.1
5.4.0-1036.38~18.04.1
5.4.0-1037.39~18.04.1
5.4.0-1039.41~18.04.1
5.4.0-1040.42~18.04.1
5.4.0-1042.44~18.04.1
5.4.0-1043.45~18.04.1
5.4.0-1044.46~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1
5.4.0-1052.55~18.04.1
5.4.0-1053.56~18.04.1
5.4.0-1054.57~18.04.1
5.4.0-1055.58~18.04.1
5.4.0-1056.59~18.04.1
5.4.0-1057.60~18.04.1
5.4.0-1059.62~18.04.1
5.4.0-1061.64~18.04.1
5.4.0-1062.65~18.04.1
5.4.0-1063.66~18.04.1
5.4.0-1065.68~18.04.1
5.4.0-1066.69~18.04.1
5.4.0-1067.70~18.04.1
5.4.0-1068.71~18.04.1
5.4.0-1071.76~18.04.3
5.4.0-1072.77~18.04.1
5.4.0-1074.79~18.04.1
5.4.0-1076.82~18.04.1
5.4.0-1078.84~18.04.1
5.4.0-1080.86~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gkeop-5.4

Package

Name
linux-gkeop-5.4
Purl
pkg:deb/ubuntu/linux-gkeop-5.4?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1001.1
5.4.0-1003.3
5.4.0-1004.5
5.4.0-1005.6
5.4.0-1007.8~18.04.1
5.4.0-1008.9~18.04.1
5.4.0-1009.10~18.04.1
5.4.0-1010.11~18.04.1
5.4.0-1011.12~18.04.2
5.4.0-1012.13~18.04.1
5.4.0-1013.14~18.04.1
5.4.0-1014.15~18.04.1
5.4.0-1015.16~18.04.1
5.4.0-1016.17~18.04.1
5.4.0-1018.19~18.04.1
5.4.0-1021.22~18.04.1
5.4.0-1022.23~18.04.1
5.4.0-1023.24~18.04.1
5.4.0-1024.25~18.04.1
5.4.0-1025.26~18.04.1
5.4.0-1026.27~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.30~18.04.2
5.4.0-1031.32~18.04.1
5.4.0-1032.33~18.04.1
5.4.0-1033.34~18.04.1
5.4.0-1034.35~18.04.1
5.4.0-1036.37~18.04.1
5.4.0-1037.38~18.04.1
5.4.0-1038.39~18.04.1
5.4.0-1039.40~18.04.1
5.4.0-1040.41~18.04.1
5.4.0-1043.44~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1048.51~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-source-5.4.0",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe

Package

Name
linux-hwe
Purl
pkg:deb/ubuntu/linux-hwe?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.18.0-13.14~18.04.1
4.18.0-14.15~18.04.1
4.18.0-15.16~18.04.1
4.18.0-16.17~18.04.1
4.18.0-17.18~18.04.1
4.18.0-18.19~18.04.1
4.18.0-20.21~18.04.1
4.18.0-21.22~18.04.1
4.18.0-22.23~18.04.1
4.18.0-24.25~18.04.1
4.18.0-25.26~18.04.1
5.*
5.0.0-23.24~18.04.1
5.0.0-25.26~18.04.1
5.0.0-27.28~18.04.1
5.0.0-29.31~18.04.1
5.0.0-31.33~18.04.1
5.0.0-32.34~18.04.2
5.0.0-35.38~18.04.1
5.0.0-36.39~18.04.1
5.0.0-37.40~18.04.1
5.3.0-26.28~18.04.1
5.3.0-28.30~18.04.1
5.3.0-40.32~18.04.1
5.3.0-42.34~18.04.1
5.3.0-45.37~18.04.1
5.3.0-46.38~18.04.1
5.3.0-51.44~18.04.2
5.3.0-53.47~18.04.1
5.3.0-59.53~18.04.1
5.3.0-61.55~18.04.1
5.3.0-62.56~18.04.1
5.3.0-64.58~18.04.1
5.3.0-65.59
5.3.0-66.60
5.3.0-67.61
5.3.0-68.63
5.3.0-69.65
5.3.0-70.66
5.3.0-72.68
5.3.0-73.69
5.3.0-74.70
5.3.0-75.71
5.3.0-76.72

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fat-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "input-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "kernel-image-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-headers-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-udebs-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "md-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "message-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "parport-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "plip-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "sata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "serial-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-edge

Package

Name
linux-hwe-edge
Purl
pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-15.16~18.04.1
5.0.0-16.17~18.04.1
5.0.0-17.18~18.04.1
5.0.0-19.20~18.04.1
5.0.0-20.21~18.04.1
5.3.0-19.20~18.04.2
5.3.0-22.24~18.04.1
5.3.0-23.25~18.04.1
5.3.0-23.25~18.04.2
5.3.0-24.26~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "message-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "serial-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem

Package

Name
linux-oem
Purl
pkg:deb/ubuntu/linux-oem?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1002.3
4.15.0-1004.5
4.15.0-1006.9
4.15.0-1008.11
4.15.0-1009.12
4.15.0-1012.15
4.15.0-1013.16
4.15.0-1015.18
4.15.0-1017.20
4.15.0-1018.21
4.15.0-1021.24
4.15.0-1024.29
4.15.0-1026.31
4.15.0-1028.33
4.15.0-1030.35
4.15.0-1033.38
4.15.0-1034.39
4.15.0-1035.40
4.15.0-1036.41
4.15.0-1038.43
4.15.0-1039.44
4.15.0-1043.48
4.15.0-1045.50
4.15.0-1050.57
4.15.0-1056.65
4.15.0-1057.66
4.15.0-1059.68
4.15.0-1063.72
4.15.0-1064.73
4.15.0-1065.75
4.15.0-1066.76
4.15.0-1067.77
4.15.0-1069.79
4.15.0-1073.83
4.15.0-1076.86
4.15.0-1079.89
4.15.0-1080.90
4.15.0-1081.91
4.15.0-1087.97
4.15.0-1090.100
4.15.0-1091.101
4.15.0-1093.103
4.15.0-1094.104
4.15.0-1096.106
4.15.0-1097.107
4.15.0-1099.109
4.15.0-1100.110
4.15.0-1101.112
4.15.0-1102.113
4.15.0-1103.114

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fat-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "input-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "irda-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "kernel-image-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-headers-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-tools-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-udebs-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "md-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "message-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "parport-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "plip-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "sata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "serial-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-5.0

Package

Name
linux-oracle-5.0
Purl
pkg:deb/ubuntu/linux-oracle-5.0?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1007.12~18.04.1
5.0.0-1008.13~18.04.1
5.0.0-1009.14~18.04.1
5.0.0-1010.15~18.04.1
5.0.0-1011.16
5.0.0-1013.18
5.0.0-1014.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-5.3

Package

Name
linux-oracle-5.3
Purl
pkg:deb/ubuntu/linux-oracle-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1011.12~18.04.1
5.3.0-1013.14~18.04.1
5.3.0-1014.15~18.04.1
5.3.0-1016.18~18.04.1
5.3.0-1018.20~18.04.1
5.3.0-1024.26~18.04.1
5.3.0-1027.29~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:20.04:LTS
linux-aws-5.11

Package

Name
linux-aws-5.11
Purl
pkg:deb/ubuntu/linux-aws-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1009.9~20.04.2
5.11.0-1014.15~20.04.1
5.11.0-1016.17~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.2
5.11.0-1021.22~20.04.2
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-5.13

Package

Name
linux-aws-5.13
Purl
pkg:deb/ubuntu/linux-aws-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9~20.04.2
5.13.0-1011.12~20.04.1
5.13.0-1012.13~20.04.1
5.13.0-1014.15~20.04.1
5.13.0-1017.19~20.04.1
5.13.0-1019.21~20.04.1
5.13.0-1021.23~20.04.2
5.13.0-1022.24~20.04.1
5.13.0-1023.25~20.04.1
5.13.0-1025.27~20.04.1
5.13.0-1028.31~20.04.1
5.13.0-1029.32~20.04.1
5.13.0-1031.35~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-5.8

Package

Name
linux-aws-5.8
Purl
pkg:deb/ubuntu/linux-aws-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1035.37~20.04.1
5.8.0-1038.40~20.04.1
5.8.0-1041.43~20.04.1
5.8.0-1042.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-5.11

Package

Name
linux-azure-5.11
Purl
pkg:deb/ubuntu/linux-azure-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1007.7~20.04.2
5.11.0-1012.13~20.04.1
5.11.0-1013.14~20.04.1
5.11.0-1015.16~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-5.13

Package

Name
linux-azure-5.13
Purl
pkg:deb/ubuntu/linux-azure-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1009.10~20.04.2
5.13.0-1012.14~20.04.1
5.13.0-1013.15~20.04.1
5.13.0-1014.16~20.04.1
5.13.0-1017.19~20.04.1
5.13.0-1021.24~20.04.1
5.13.0-1022.26~20.04.1
5.13.0-1023.27~20.04.1
5.13.0-1025.29~20.04.1
5.13.0-1028.33~20.04.1
5.13.0-1029.34~20.04.1
5.13.0-1031.37~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-5.8

Package

Name
linux-azure-5.8
Purl
pkg:deb/ubuntu/linux-azure-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1033.35~20.04.1
5.8.0-1036.38~20.04.1
5.8.0-1039.42~20.04.1
5.8.0-1040.43~20.04.1
5.8.0-1041.44~20.04.1
5.8.0-1042.45~20.04.1
5.8.0-1043.46~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1063.66+cvm2.2
5.4.0-1063.66+cvm3.2
5.4.0-1064.67+cvm1.1
5.4.0-1065.68+cvm2.1
5.4.0-1067.70+cvm1.1
5.4.0-1068.71+cvm1.1
5.4.0-1069.72+cvm1.1
5.4.0-1070.73+cvm1.1
5.4.0-1072.75+cvm1.1
5.4.0-1073.76+cvm1.1
5.4.0-1074.77+cvm1.1
5.4.0-1076.79+cvm1.1
5.4.0-1078.81+cvm1.1
5.4.0-1080.83+cvm1.1
5.4.0-1083.87+cvm1.1
5.4.0-1085.90+cvm1.1
5.4.0-1085.90+cvm2.1
5.4.0-1086.91+cvm1.1
5.4.0-1089.94+cvm1.2
5.4.0-1090.95+cvm1.1
5.4.0-1091.96+cvm1.1
5.4.0-1092.97+cvm1.1
5.4.0-1095.101+cvm1.1
5.4.0-1098.104+cvm1.1
5.4.0-1100.106+cvm1.1
5.4.0-1103.109+cvm1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1103-azure-fde",
            "binary_version":  "5.4.0-1103.109+cvm1.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-5.11

Package

Name
linux-gcp-5.11
Purl
pkg:deb/ubuntu/linux-gcp-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1009.10~20.04.1
5.11.0-1014.16~20.04.1
5.11.0-1017.19~20.04.1
5.11.0-1018.20~20.04.2
5.11.0-1020.22~20.04.1
5.11.0-1021.23~20.04.1
5.11.0-1022.24~20.04.1
5.11.0-1023.25~20.04.1
5.11.0-1024.26~20.04.1
5.11.0-1026.29~20.04.1
5.11.0-1028.32~20.04.1
5.11.0-1029.33~20.04.3

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-5.13

Package

Name
linux-gcp-5.13
Purl
pkg:deb/ubuntu/linux-gcp-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9~20.04.3
5.13.0-1012.15~20.04.1
5.13.0-1013.16~20.04.1
5.13.0-1015.18~20.04.1
5.13.0-1019.23~20.04.1
5.13.0-1021.25~20.04.1
5.13.0-1023.28~20.04.1
5.13.0-1024.29~20.04.1
5.13.0-1025.30~20.04.1
5.13.0-1027.32~20.04.1
5.13.0-1030.36~20.04.1
5.13.0-1031.37~20.04.1
5.13.0-1033.40~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-5.8

Package

Name
linux-gcp-5.8
Purl
pkg:deb/ubuntu/linux-gcp-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1032.34~20.04.1
5.8.0-1035.37~20.04.1
5.8.0-1038.40~20.04.1
5.8.0-1039.41

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1033.35
5.4.0-1035.37
5.4.0-1036.38
5.4.0-1037.39
5.4.0-1039.41
5.4.0-1041.43
5.4.0-1042.44
5.4.0-1043.45
5.4.0-1044.46
5.4.0-1046.48
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1055.58
5.4.0-1056.59
5.4.0-1057.60
5.4.0-1059.62
5.4.0-1061.64
5.4.0-1062.65
5.4.0-1063.66
5.4.0-1065.68
5.4.0-1066.69
5.4.0-1067.70
5.4.0-1068.71
5.4.0-1071.76
5.4.0-1072.77
5.4.0-1074.79
5.4.0-1076.82
5.4.0-1078.84
5.4.0-1080.86
5.4.0-1081.87
5.4.0-1083.89
5.4.0-1084.90
5.4.0-1086.93
5.4.0-1087.94
5.4.0-1090.97
5.4.0-1091.98
5.4.0-1094.101
5.4.0-1095.102
5.4.0-1096.103
5.4.0-1097.104
5.4.0-1098.105
5.4.0-1099.106
5.4.0-1100.107
5.4.0-1101.108
5.4.0-1102.109
5.4.0-1103.110
5.4.0-1104.111
5.4.0-1105.112

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-gke-headers-5.4.0-1105",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-gke-tools-5.4.0-1105",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gke-5.15

Package

Name
linux-gke-5.15
Purl
pkg:deb/ubuntu/linux-gke-5.15?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1011.14~20.04.1
5.15.0-1014.17~20.04.1
5.15.0-1015.18~20.04.1
5.15.0-1016.19~20.04.1
5.15.0-1019.23~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1023.28~20.04.2
5.15.0-1027.32~20.04.1
5.15.0-1028.33~20.04.1
5.15.0-1029.34~20.04.1
5.15.0-1031.36~20.04.1
5.15.0-1032.37~20.04.1
5.15.0-1033.38~20.04.1
5.15.0-1034.39~20.04.1
5.15.0-1036.41~20.04.1
5.15.0-1037.42~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1039.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-gke-5.15-headers-5.15.0-1039",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-gke-5.15-tools-5.15.0-1039",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1008.9
5.4.0-1009.10
5.4.0-1010.11
5.4.0-1011.12
5.4.0-1012.13
5.4.0-1013.14
5.4.0-1014.15
5.4.0-1015.16
5.4.0-1016.17
5.4.0-1018.19
5.4.0-1021.22
5.4.0-1022.23
5.4.0-1023.24
5.4.0-1024.25
5.4.0-1025.26
5.4.0-1026.27
5.4.0-1027.28
5.4.0-1029.30
5.4.0-1031.32
5.4.0-1032.33
5.4.0-1033.34
5.4.0-1034.35
5.4.0-1036.37
5.4.0-1037.38
5.4.0-1038.39
5.4.0-1039.40
5.4.0-1040.41
5.4.0-1043.44
5.4.0-1046.48
5.4.0-1048.51
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1056.60
5.4.0-1057.61
5.4.0-1060.64
5.4.0-1061.65
5.4.0-1062.66
5.4.0-1064.68
5.4.0-1065.69
5.4.0-1066.70
5.4.0-1067.71
5.4.0-1068.72
5.4.0-1069.73
5.4.0-1070.74
5.4.0-1071.75
5.4.0-1072.76
5.4.0-1073.77
5.4.0-1074.78
5.4.0-1075.79
5.4.0-1076.80
5.4.0-1077.81
5.4.0-1078.82
5.4.0-1079.83
5.4.0-1080.84
5.4.0-1081.85
5.4.0-1083.87
5.4.0-1084.88
5.4.0-1085.89
5.4.0-1086.90
5.4.0-1087.91
5.4.0-1088.92
5.4.0-1089.93
5.4.0-1090.94
5.4.0-1091.95
5.4.0-1092.96
5.4.0-1093.97
5.4.0-1094.98
5.4.0-1095.99
5.4.0-1096.100
5.4.0-1097.101
5.4.0-1098.102
5.4.0-1099.103
5.4.0-1100.104
5.4.0-1101.105
5.4.0-1102.106

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-headers-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-source-5.4.0",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-tools-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gkeop-5.15

Package

Name
linux-gkeop-5.15
Purl
pkg:deb/ubuntu/linux-gkeop-5.15?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1003.5~20.04.2
5.15.0-1005.7~20.04.1
5.15.0-1007.10~20.04.1
5.15.0-1008.12~20.04.1
5.15.0-1011.15~20.04.2
5.15.0-1012.16~20.04.1
5.15.0-1013.17~20.04.1
5.15.0-1015.19~20.04.1
5.15.0-1016.21~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1022.27~20.04.1
5.15.0-1023.28~20.04.1
5.15.0-1024.29~20.04.1
5.15.0-1025.30~20.04.1
5.15.0-1026.31~20.04.1
5.15.0-1027.32~20.04.1
5.15.0-1028.33~20.04.1
5.15.0-1030.35~20.04.1
5.15.0-1031.37~20.04.1
5.15.0-1032.38~20.04.1
5.15.0-1033.39~20.04.1
5.15.0-1034.40~20.04.1
5.15.0-1035.41~20.04.1
5.15.0-1036.42~20.04.1
5.15.0-1037.43~20.04.1
5.15.0-1038.44~20.04.1
5.15.0-1039.45~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1043.50~20.04.1
5.15.0-1044.51~20.04.1
5.15.0-1045.52~20.04.1
5.15.0-1046.53~20.04.1
5.15.0-1047.54~20.04.1
5.15.0-1048.55~20.04.1
5.15.0-1049.56~20.04.1
5.15.0-1050.57~20.04.1
5.15.0-1051.58~20.04.1
5.15.0-1052.59~20.04.1
5.15.0-1053.60~20.04.1
5.15.0-1054.61~20.04.1
5.15.0-1055.62~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-headers-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-tools-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-5.11

Package

Name
linux-hwe-5.11
Purl
pkg:deb/ubuntu/linux-hwe-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-22.23~20.04.1
5.11.0-25.27~20.04.1
5.11.0-27.29~20.04.1
5.11.0-34.36~20.04.1
5.11.0-36.40~20.04.1
5.11.0-37.41~20.04.2
5.11.0-38.42~20.04.1
5.11.0-40.44~20.04.2
5.11.0-41.45~20.04.1
5.11.0-43.47~20.04.2
5.11.0-44.48~20.04.2
5.11.0-46.51~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-source-5.11.0",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-host",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-5.13

Package

Name
linux-hwe-5.13
Purl
pkg:deb/ubuntu/linux-hwe-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-21.21~20.04.1
5.13.0-22.22~20.04.1
5.13.0-23.23~20.04.2
5.13.0-25.26~20.04.1
5.13.0-27.29~20.04.1
5.13.0-28.31~20.04.1
5.13.0-30.33~20.04.1
5.13.0-35.40~20.04.1
5.13.0-37.42~20.04.1
5.13.0-39.44~20.04.1
5.13.0-40.45~20.04.1
5.13.0-41.46~20.04.1
5.13.0-44.49~20.04.1
5.13.0-48.54~20.04.1
5.13.0-51.58~20.04.1
5.13.0-52.59~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-source-5.13.0",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-host",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-5.8

Package

Name
linux-hwe-5.8
Purl
pkg:deb/ubuntu/linux-hwe-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-23.24~20.04.1
5.8.0-25.26~20.04.1
5.8.0-28.30~20.04.1
5.8.0-29.31~20.04.1
5.8.0-31.33~20.04.1
5.8.0-33.36~20.04.1
5.8.0-34.37~20.04.2
5.8.0-36.40~20.04.1
5.8.0-38.43~20.04.1
5.8.0-40.45~20.04.1
5.8.0-41.46~20.04.1
5.8.0-43.49~20.04.1
5.8.0-44.50~20.04.1
5.8.0-45.51~20.04.1
5.8.0-48.54~20.04.1
5.8.0-49.55~20.04.1
5.8.0-50.56~20.04.1
5.8.0-53.60~20.04.1
5.8.0-55.62~20.04.1
5.8.0-59.66~20.04.1
5.8.0-63.71~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-source-5.8.0",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-host",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-intel-5.13

Package

Name
linux-intel-5.13
Purl
pkg:deb/ubuntu/linux-intel-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1007.7
5.13.0-1008.8
5.13.0-1009.9
5.13.0-1010.10
5.13.0-1011.11
5.13.0-1014.15
5.13.0-1017.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-source-5.13.0",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-host",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-5.10

Package

Name
linux-oem-5.10
Purl
pkg:deb/ubuntu/linux-oem-5.10?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.10.0-1008.9
5.10.0-1011.12
5.10.0-1013.14
5.10.0-1014.15
5.10.0-1016.17
5.10.0-1017.18
5.10.0-1019.20
5.10.0-1021.22
5.10.0-1022.23
5.10.0-1023.24
5.10.0-1025.26
5.10.0-1026.27
5.10.0-1029.30
5.10.0-1032.33
5.10.0-1033.34
5.10.0-1034.35
5.10.0-1038.40
5.10.0-1044.46
5.10.0-1045.47
5.10.0-1049.51
5.10.0-1050.52
5.10.0-1051.53
5.10.0-1052.54
5.10.0-1053.55
5.10.0-1055.58
5.10.0-1057.61

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-headers-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-modules-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-host",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-tools-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-5.13

Package

Name
linux-oem-5.13
Purl
pkg:deb/ubuntu/linux-oem-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1009.10
5.13.0-1010.11
5.13.0-1012.16
5.13.0-1014.18
5.13.0-1017.21
5.13.0-1019.23
5.13.0-1020.24
5.13.0-1021.25
5.13.0-1022.26
5.13.0-1026.32
5.13.0-1028.35
5.13.0-1029.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-host",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-5.14

Package

Name
linux-oem-5.14
Purl
pkg:deb/ubuntu/linux-oem-5.14?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.14.0-1004.4
5.14.0-1005.5
5.14.0-1007.7
5.14.0-1008.8
5.14.0-1010.10
5.14.0-1011.11
5.14.0-1013.13
5.14.0-1018.19
5.14.0-1020.22
5.14.0-1022.24
5.14.0-1024.26
5.14.0-1027.30
5.14.0-1029.32
5.14.0-1031.34
5.14.0-1032.35
5.14.0-1033.36
5.14.0-1034.37
5.14.0-1036.40
5.14.0-1038.42
5.14.0-1042.47
5.14.0-1044.49
5.14.0-1045.51
5.14.0-1046.53
5.14.0-1047.54
5.14.0-1048.55
5.14.0-1049.56
5.14.0-1050.57
5.14.0-1051.58
5.14.0-1052.59
5.14.0-1054.61
5.14.0-1055.62
5.14.0-1056.63
5.14.0-1057.64
5.14.0-1058.66
5.14.0-1059.67

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-headers-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-image-unsigned-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-headers-5.14.0-1059",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-5.14.0-1059",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-host",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-tools-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-5.6

Package

Name
linux-oem-5.6
Purl
pkg:deb/ubuntu/linux-oem-5.6?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.6.0-1007.7
5.6.0-1008.8
5.6.0-1010.10
5.6.0-1011.11
5.6.0-1013.13
5.6.0-1017.17
5.6.0-1018.18
5.6.0-1020.20
5.6.0-1021.21
5.6.0-1023.23
5.6.0-1026.26
5.6.0-1027.27
5.6.0-1028.28
5.6.0-1031.32
5.6.0-1032.33
5.6.0-1033.35
5.6.0-1034.36
5.6.0-1035.37
5.6.0-1036.39
5.6.0-1039.43
5.6.0-1042.46
5.6.0-1047.51
5.6.0-1048.52
5.6.0-1050.54
5.6.0-1052.56
5.6.0-1053.57
5.6.0-1054.58
5.6.0-1055.59
5.6.0-1056.60

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-headers-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-modules-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-host",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-tools-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-5.11

Package

Name
linux-oracle-5.11
Purl
pkg:deb/ubuntu/linux-oracle-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1008.8~20.04.1
5.11.0-1013.14~20.04.1
5.11.0-1016.17~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-5.13

Package

Name
linux-oracle-5.13
Purl
pkg:deb/ubuntu/linux-oracle-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1011.13~20.04.2
5.13.0-1015.19~20.04.1
5.13.0-1016.20~20.04.1
5.13.0-1018.22~20.04.1
5.13.0-1021.26~20.04.1
5.13.0-1025.30~20.04.1
5.13.0-1027.32~20.04.1
5.13.0-1028.33~20.04.1
5.13.0-1030.35~20.04.1
5.13.0-1033.39~20.04.1
5.13.0-1034.40~20.04.1
5.13.0-1036.43~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-5.8

Package

Name
linux-oracle-5.8
Purl
pkg:deb/ubuntu/linux-oracle-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1031.32~20.04.2
5.8.0-1033.34~20.04.1
5.8.0-1034.35~20.04.2
5.8.0-1037.38~20.04.1
5.8.0-1038.39~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-raspi2

Package

Name
linux-raspi2
Purl
pkg:deb/ubuntu/linux-raspi2?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1007.8
5.3.0-1014.16
5.3.0-1015.17
5.3.0-1017.19
5.4.0-1004.4
5.4.0-1006.6

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-image-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-headers-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-tools-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-24.28
5.4.0-26.30
5.4.0-27.31
5.4.0-28.32
5.4.0-30.34
5.4.0-31.35
5.4.0-33.37
5.4.0-34.38
5.4.0-36.41
5.4.0-37.42
5.4.0-39.44
5.4.0-40.45

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fat-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "input-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "kernel-image-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-headers-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-image-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-headers-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-tools-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-tools-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "md-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "message-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "parport-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "pata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "plip-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "sata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv-5.11

Package

Name
linux-riscv-5.11
Purl
pkg:deb/ubuntu/linux-riscv-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1015.16~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1018.19~20.04.2
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1024.25~20.04.1
5.11.0-1026.28~20.04.1
5.11.0-1028.31~20.04.1
5.11.0-1029.32~20.04.1
5.11.0-1030.34
5.11.0-1031.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-image-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv-5.8

Package

Name
linux-riscv-5.8
Purl
pkg:deb/ubuntu/linux-riscv-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-14.16~20.04.1
5.8.0-14.16~20.04.3
5.8.0-16.18~20.04.1
5.8.0-17.19~20.04.1
5.8.0-18.20~20.04.1
5.8.0-20.22~20.04.1
5.8.0-22.24~20.04.1
5.8.0-25.27~20.04.1
5.8.0-26.28~20.04.1
5.8.0-29.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:22.04:LTS
linux-allwinner-5.19

Package

Name
linux-allwinner-5.19
Purl
pkg:deb/ubuntu/linux-allwinner-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1007.7~22.04.1
5.19.0-1009.9~22.04.1
5.19.0-1010.10~22.04.1
5.19.0-1011.11~22.04.1
5.19.0-1012.12~22.04.1
5.19.0-1013.13~22.04.1
5.19.0-1014.14~22.04.1
5.19.0-1015.15~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-allwinner-5.19-headers-5.19.0-1015",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-allwinner-5.19-tools-5.19.0-1015",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-5.19

Package

Name
linux-aws-5.19
Purl
pkg:deb/ubuntu/linux-aws-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1019.20~22.04.1
5.19.0-1020.21~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1024.25~22.04.1
5.19.0-1025.26~22.04.1
5.19.0-1026.27~22.04.1
5.19.0-1027.28~22.04.1
5.19.0-1028.29~22.04.1
5.19.0-1029.30~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.19-cloud-tools-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-aws-5.19-headers-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-aws-5.19-tools-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-6.2

Package

Name
linux-aws-6.2
Purl
pkg:deb/ubuntu/linux-aws-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1005.5~22.04.1
6.2.0-1006.6~22.04.1
6.2.0-1007.7~22.04.1
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.3
6.2.0-1010.10~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.2-cloud-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.2-headers-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.2-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-6.5

Package

Name
linux-aws-6.5
Purl
pkg:deb/ubuntu/linux-aws-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1008.8~22.04.1
6.5.0-1010.10~22.04.1
6.5.0-1011.11~22.04.1
6.5.0-1012.12~22.04.1
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.2
6.5.0-1018.18~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1021.21~22.04.1
6.5.0-1022.22~22.04.1
6.5.0-1023.23~22.04.1
6.5.0-1024.24~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.5-cloud-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.5-headers-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.5-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-6.8

Package

Name
linux-aws-6.8
Purl
pkg:deb/ubuntu/linux-aws-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49~22.04.1

Affected versions

6.*
6.8.0-1009.9~22.04.2
6.8.0-1010.10~22.04.2
6.8.0-1011.12~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.15~22.04.1
6.8.0-1015.16~22.04.1
6.8.0-1016.17~22.04.2
6.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1023.25~22.04.1
6.8.0-1024.26~22.04.1
6.8.0-1027.29~22.04.1
6.8.0-1028.30~22.04.1
6.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
6.8.0-1033.35~22.04.1
6.8.0-1035.37~22.04.1
6.8.0-1036.38~22.04.1
6.8.0-1039.41~22.04.1
6.8.0-1040.42~22.04.1
6.8.0-1041.43~22.04.1
6.8.0-1042.44~22.04.1
6.8.0-1043.45~22.04.1
6.8.0-1044.46~22.04.1
6.8.0-1045.47~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.8-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.8-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.8-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-5.19

Package

Name
linux-azure-5.19
Purl
pkg:deb/ubuntu/linux-azure-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1020.21~22.04.1
5.19.0-1021.22~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1025.28~22.04.1
5.19.0-1026.29~22.04.1
5.19.0-1027.30~22.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.19-cloud-tools-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-azure-5.19-headers-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-azure-5.19-tools-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-6.2

Package

Name
linux-azure-6.2
Purl
pkg:deb/ubuntu/linux-azure-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1005.5~22.04.1
6.2.0-1006.6~22.04.1
6.2.0-1007.7~22.04.1
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.3
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1
6.2.0-1019.19~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.2-cloud-tools-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.2-headers-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.2-tools-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-6.5

Package

Name
linux-azure-6.5
Purl
pkg:deb/ubuntu/linux-azure-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1007.7~22.04.1
6.5.0-1009.9~22.04.1
6.5.0-1010.10~22.04.1
6.5.0-1011.11~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.1
6.5.0-1018.19~22.04.2
6.5.0-1019.20~22.04.1
6.5.0-1021.22~22.04.1
6.5.0-1022.23~22.04.1
6.5.0-1023.24~22.04.1
6.5.0-1024.25~22.04.1
6.5.0-1025.26~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.5-cloud-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.5-headers-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.5-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-6.8

Package

Name
linux-azure-6.8
Purl
pkg:deb/ubuntu/linux-azure-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1051.57~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1012.14~22.04.1
6.8.0-1013.15~22.04.1
6.8.0-1014.16~22.04.1
6.8.0-1015.17~22.04.2
6.8.0-1017.20~22.04.1
6.8.0-1018.21~22.04.1
6.8.0-1020.23~22.04.1
6.8.0-1021.25~22.04.1
6.8.0-1025.30~22.04.1
6.8.0-1026.31~22.04.1
6.8.0-1027.32~22.04.1
6.8.0-1028.33~22.04.1
6.8.0-1029.34~22.04.1
6.8.0-1030.35~22.04.1
6.8.0-1031.36~22.04.1
6.8.0-1034.39~22.04.1
6.8.0-1036.42~22.04.1
6.8.0-1040.46~22.04.1
6.8.0-1041.47~22.04.1
6.8.0-1044.50~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.8-cloud-tools-6.8.0-1051",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.8-headers-6.8.0-1051",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.8-tools-6.8.0-1051",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-fde-5.19

Package

Name
linux-azure-fde-5.19
Purl
pkg:deb/ubuntu/linux-azure-fde-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1025.28~22.04.1.1
5.19.0-1026.29~22.04.1.1
5.19.0-1027.30~22.04.2.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1027-azure-fde",
            "binary_version":  "5.19.0-1027.30~22.04.2.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-fde-6.2

Package

Name
linux-azure-fde-6.2
Purl
pkg:deb/ubuntu/linux-azure-fde-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1008.8~22.04.1.1
6.2.0-1009.9~22.04.3.1
6.2.0-1011.11~22.04.1.1
6.2.0-1012.12~22.04.1.1
6.2.0-1014.14~22.04.1.1
6.2.0-1015.15~22.04.1.1
6.2.0-1016.16~22.04.1.1
6.2.0-1017.17~22.04.1.1
6.2.0-1018.18~22.04.1.1
6.2.0-1019.19~22.04.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1019-azure-fde",
            "binary_version":  "6.2.0-1019.19~22.04.1.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-fde-6.8

Package

Name
linux-azure-fde-6.8
Purl
pkg:deb/ubuntu/linux-azure-fde-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.53~22.04.1

Affected versions

6.*
6.8.0-1041.48~22.04.1
6.8.0-1042.49~22.04.1
6.8.0-1044.51~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-6.8-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.8-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.8-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-5.19

Package

Name
linux-gcp-5.19
Purl
pkg:deb/ubuntu/linux-gcp-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1020.22~22.04.2
5.19.0-1021.23~22.04.1
5.19.0-1022.24~22.04.1
5.19.0-1024.26~22.04.1
5.19.0-1025.27~22.04.1
5.19.0-1026.28~22.04.1
5.19.0-1027.29~22.04.1
5.19.0-1030.32~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.19-headers-5.19.0-1030",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.19-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-6.2

Package

Name
linux-gcp-6.2
Purl
pkg:deb/ubuntu/linux-gcp-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1009.9~22.04.3
6.2.0-1010.10~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1011.11~22.04.3
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1016.18~22.04.1
6.2.0-1017.19~22.04.1
6.2.0-1018.20~22.04.1
6.2.0-1019.21~22.04.1
6.2.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.2-headers-6.2.0-1021",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.2-tools-6.2.0-1021",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-6.5

Package

Name
linux-gcp-6.5
Purl
pkg:deb/ubuntu/linux-gcp-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1010.10~22.04.3
6.5.0-1011.11~22.04.1
6.5.0-1013.13~22.04.1
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.1
6.5.0-1018.18~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1022.24~22.04.1
6.5.0-1023.25~22.04.1
6.5.0-1024.26~22.04.1
6.5.0-1025.27~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.5-headers-6.5.0-1025",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.5-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-6.8

Package

Name
linux-gcp-6.8
Purl
pkg:deb/ubuntu/linux-gcp-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50~22.04.2

Affected versions

6.*
6.8.0-1010.11~22.04.1
6.8.0-1011.12~22.04.1
6.8.0-1012.13~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.16~22.04.1
6.8.0-1015.17~22.04.1
6.8.0-1016.18~22.04.1
6.8.0-1017.19~22.04.1
6.8.0-1018.20~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1024.26~22.04.1
6.8.0-1025.27~22.04.1
6.8.0-1026.28~22.04.1
6.8.0-1027.29~22.04.1
6.8.0-1028.30~22.04.1
6.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
6.8.0-1033.35~22.04.1
6.8.0-1034.36~22.04.2
6.8.0-1036.38~22.04.1
6.8.0-1037.39~22.04.1
6.8.0-1040.42~22.04.1
6.8.0-1041.43~22.04.1
6.8.0-1042.45~22.04.1
6.8.0-1043.46~22.04.1
6.8.0-1044.47~22.04.1
6.8.0-1045.48~22.04.1
6.8.0-1046.49~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-gcp-6.8-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-gcp-6.8-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-5.19

Package

Name
linux-hwe-5.19
Purl
pkg:deb/ubuntu/linux-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-28.29~22.04.1
5.19.0-32.33~22.04.1
5.19.0-35.36~22.04.1
5.19.0-38.39~22.04.1
5.19.0-40.41~22.04.1
5.19.0-41.42~22.04.1
5.19.0-42.43~22.04.1
5.19.0-43.44~22.04.1
5.19.0-45.46~22.04.1
5.19.0-46.47~22.04.1
5.19.0-50.50

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-cloud-tools-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-cloud-tools-common",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-headers-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-common",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-host",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-source-5.19.0",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-6.2

Package

Name
linux-hwe-6.2
Purl
pkg:deb/ubuntu/linux-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-25.25~22.04.2
6.2.0-26.26~22.04.1
6.2.0-31.31~22.04.1
6.2.0-32.32~22.04.1
6.2.0-33.33~22.04.1
6.2.0-34.34~22.04.1
6.2.0-35.35~22.04.1
6.2.0-36.37~22.04.1
6.2.0-37.38~22.04.1
6.2.0-39.40~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-cloud-tools-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-cloud-tools-common",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-headers-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-common",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-host",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-source-6.2.0",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-6.5

Package

Name
linux-hwe-6.5
Purl
pkg:deb/ubuntu/linux-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-14.14~22.04.1
6.5.0-15.15~22.04.1
6.5.0-17.17~22.04.1
6.5.0-18.18~22.04.1
6.5.0-21.21~22.04.1
6.5.0-25.25~22.04.1
6.5.0-26.26~22.04.1
6.5.0-27.28~22.04.1
6.5.0-28.29~22.04.1
6.5.0-35.35~22.04.1
6.5.0-41.41~22.04.2
6.5.0-44.44~22.04.1
6.5.0-45.45~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-cloud-tools-common",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-common",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-host",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-source-6.5.0",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-6.8

Package

Name
linux-hwe-6.8
Purl
pkg:deb/ubuntu/linux-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100~22.04.1

Affected versions

6.*
6.8.0-38.38~22.04.1
6.8.0-39.39~22.04.1
6.8.0-40.40~22.04.3
6.8.0-45.45~22.04.1
6.8.0-47.47~22.04.1
6.8.0-48.48~22.04.1
6.8.0-49.49~22.04.1
6.8.0-50.51~22.04.1
6.8.0-51.52~22.04.1
6.8.0-52.53~22.04.1
6.8.0-57.59~22.04.1
6.8.0-58.60~22.04.1
6.8.0-59.61~22.04.1
6.8.0-60.63~22.04.1
6.8.0-64.67~22.04.1
6.8.0-65.68~22.04.1
6.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
6.8.0-83.83~22.04.1
6.8.0-84.84~22.04.1
6.8.0-85.85~22.04.1
6.8.0-86.87~22.04.1
6.8.0-87.88~22.04.1
6.8.0-88.89~22.04.2
6.8.0-90.91~22.04.1
6.8.0-94.96~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-ibm-6.8

Package

Name
linux-ibm-6.8
Purl
pkg:deb/ubuntu/linux-ibm-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1044.44~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.13~22.04.1
6.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
6.8.0-1016.16~22.04.1
6.8.0-1017.17~22.04.1
6.8.0-1018.18~22.04.1
6.8.0-1019.19~22.04.1
6.8.0-1023.23~22.04.1
6.8.0-1024.24~22.04.1
6.8.0-1025.25~22.04.1
6.8.0-1026.26~22.04.1
6.8.0-1027.27~22.04.1
6.8.0-1028.28~22.04.1
6.8.0-1029.29~22.04.1
6.8.0-1030.30~22.04.1
6.8.0-1033.33~22.04.1
6.8.0-1036.36~22.04.1
6.8.0-1037.37~22.04.1
6.8.0-1038.38~22.04.1
6.8.0-1039.39~22.04.1
6.8.0-1040.40~22.04.1
6.8.0-1041.41~22.04.1
6.8.0-1042.42~22.04.1
6.8.0-1043.43~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-ibm-6.8-headers-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-ibm-6.8-tools-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-intel-iot-realtime

Package

Name
linux-intel-iot-realtime
Purl
pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1073.75

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-host",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-lowlatency-hwe-5.19

Package

Name
linux-lowlatency-hwe-5.19
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1017.18~22.04.1
5.19.0-1018.19~22.04.1
5.19.0-1021.22~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1024.25~22.04.1
5.19.0-1025.26~22.04.1
5.19.0-1027.28~22.04.1
5.19.0-1028.29~22.04.1
5.19.0-1030.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-cloud-tools-common",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-common",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-host",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-lowlatency-hwe-6.2

Package

Name
linux-lowlatency-hwe-6.2
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-cloud-tools-common",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-common",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-host",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-lowlatency-hwe-6.5

Package

Name
linux-lowlatency-hwe-6.5
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-14.14.1~22.04.1
6.5.0-15.15.1.1~22.04.1
6.5.0-17.17.1.1.1~22.04.1
6.5.0-21.21.1~22.04.1
6.5.0-25.25.1~22.04.1
6.5.0-26.26.1~22.04.1
6.5.0-27.28.1~22.04.1
6.5.0-28.29.1~22.04.1
6.5.0-35.35.1~22.04.1
6.5.0-41.41.1~22.04.1
6.5.0-42.42.1~22.04.1
6.5.0-44.44.1~22.04.1
6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-cloud-tools-common",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-common",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-host",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-lowlatency-hwe-6.8

Package

Name
linux-lowlatency-hwe-6.8
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100.1~22.04.1

Affected versions

6.*
6.8.0-38.38.1~22.04.2
6.8.0-40.40.1~22.04.1
6.8.0-44.44.1~22.04.1
6.8.0-45.45.1~22.04.1
6.8.0-47.47.1~22.04.1
6.8.0-48.48.3~22.04.1
6.8.0-49.49.1~22.04.1
6.8.0-50.51.1~22.04.1
6.8.0-51.52.1~22.04.1
6.8.0-52.53.1~22.04.1
6.8.0-54.56.1~22.04.1
6.8.0-55.57.1~22.04.1
6.8.0-56.58.1~22.04.1
6.8.0-57.59.1~22.04.1
6.8.0-58.60.1~22.04.1
6.8.0-59.61.1~22.04.1
6.8.0-60.63.1~22.04.1
6.8.0-62.65.1~22.04.1
6.8.0-63.66.1~22.04.1
6.8.0-64.67.1~22.04.1
6.8.0-65.68.1~22.04.1
6.8.0-78.78.1~22.04.1
6.8.0-79.79.1~22.04.1
6.8.0-83.83.1~22.04.1
6.8.0-84.84.1~22.04.1
6.8.0-85.85.1~22.04.1
6.8.0-86.87.1~22.04.1
6.8.0-87.88.1~22.04.1
6.8.0-88.89.1~22.04.1
6.8.0-90.91.1~22.04.1
6.8.0-94.96.1~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia-6.2

Package

Name
linux-nvidia-6.2
Purl
pkg:deb/ubuntu/linux-nvidia-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1003.3~22.04.1
6.2.0-1009.9
6.2.0-1010.10
6.2.0-1011.11
6.2.0-1012.12
6.2.0-1013.13
6.2.0-1015.15

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-headers-6.2.0-1015",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-tools-6.2.0-1015",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-tools-host",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia-6.5

Package

Name
linux-nvidia-6.5
Purl
pkg:deb/ubuntu/linux-nvidia-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1004.4
6.5.0-1007.7
6.5.0-1013.13
6.5.0-1014.14
6.5.0-1015.15
6.5.0-1018.18
6.5.0-1019.19
6.5.0-1021.22
6.5.0-1022.23
6.5.0-1023.24
6.5.0-1024.25

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-headers-6.5.0-1024",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-tools-host",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia-6.8

Package

Name
linux-nvidia-6.8
Purl
pkg:deb/ubuntu/linux-nvidia-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.15~22.04.1
6.8.0-1015.16~22.04.1
6.8.0-1017.19~22.04.1
6.8.0-1018.20~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1022.25~22.04.2
6.8.0-1023.26~22.04.1
6.8.0-1024.27~22.04.1
6.8.0-1025.28~22.04.1
6.8.0-1026.29~22.04.1
6.8.0-1027.30~22.04.1
6.8.0-1028.31~22.04.1
6.8.0-1029.32~22.04.1
6.8.0-1030.33~22.04.1
6.8.0-1031.34~22.04.1
6.8.0-1032.35~22.04.1
6.8.0-1035.38~22.04.1
6.8.0-1036.39~22.04.1
6.8.0-1038.41~22.04.1
6.8.0-1039.42~22.04.1
6.8.0-1040.43~22.04.1
6.8.0-1041.44~22.04.2
6.8.0-1042.45~22.04.1
6.8.0-1043.46~22.04.1
6.8.0-1044.47~22.04.1
6.8.0-1045.48~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-nvidia-6.8-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-nvidia-6.8-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-5.17

Package

Name
linux-oem-5.17
Purl
pkg:deb/ubuntu/linux-oem-5.17?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.17.0-1003.3
5.17.0-1004.4
5.17.0-1006.6
5.17.0-1011.12
5.17.0-1012.13
5.17.0-1013.14
5.17.0-1014.15
5.17.0-1015.16
5.17.0-1016.17
5.17.0-1017.18
5.17.0-1018.19
5.17.0-1019.20
5.17.0-1020.21
5.17.0-1021.22
5.17.0-1024.25
5.17.0-1025.26
5.17.0-1026.27
5.17.0-1027.28
5.17.0-1028.29
5.17.0-1029.30
5.17.0-1030.31
5.17.0-1031.32
5.17.0-1032.33
5.17.0-1033.34
5.17.0-1034.35
5.17.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-headers-5.17.0-1035",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-5.17.0-1035",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-host",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-6.0

Package

Name
linux-oem-6.0
Purl
pkg:deb/ubuntu/linux-oem-6.0?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.0.0-1006.6
6.0.0-1007.7
6.0.0-1008.8
6.0.0-1009.9
6.0.0-1010.10
6.0.0-1011.11
6.0.0-1012.12
6.0.0-1013.13
6.0.0-1014.14
6.0.0-1015.15
6.0.0-1016.16
6.0.0-1017.17
6.0.0-1018.18
6.0.0-1019.19
6.0.0-1020.20
6.0.0-1021.21

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-headers-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-image-unsigned-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-headers-6.0.0-1021",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-tools-6.0.0-1021",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-tools-host",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-tools-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-6.1

Package

Name
linux-oem-6.1
Purl
pkg:deb/ubuntu/linux-oem-6.1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.1.0-1004.4
6.1.0-1006.6
6.1.0-1007.7
6.1.0-1008.8
6.1.0-1009.9
6.1.0-1010.10
6.1.0-1012.12
6.1.0-1013.13
6.1.0-1014.14
6.1.0-1015.15
6.1.0-1016.16
6.1.0-1017.17
6.1.0-1019.19
6.1.0-1020.20
6.1.0-1021.21
6.1.0-1022.22
6.1.0-1023.23
6.1.0-1024.24
6.1.0-1025.25
6.1.0-1026.26
6.1.0-1027.27
6.1.0-1028.28
6.1.0-1029.29
6.1.0-1033.33
6.1.0-1034.34
6.1.0-1035.35
6.1.0-1036.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-headers-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-image-unsigned-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-headers-6.1.0-1036",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-tools-6.1.0-1036",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-tools-host",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-tools-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-6.5

Package

Name
linux-oem-6.5
Purl
pkg:deb/ubuntu/linux-oem-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1003.3
6.5.0-1004.4
6.5.0-1006.6
6.5.0-1007.7
6.5.0-1008.8
6.5.0-1009.10
6.5.0-1011.12
6.5.0-1013.14
6.5.0-1014.15
6.5.0-1015.16
6.5.0-1016.17
6.5.0-1018.19
6.5.0-1019.20
6.5.0-1020.21
6.5.0-1022.23
6.5.0-1023.24
6.5.0-1024.25
6.5.0-1025.26
6.5.0-1027.28

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-usbio-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-headers-6.5.0-1027",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-tools-6.5.0-1027",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-tools-host",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-6.5

Package

Name
linux-oracle-6.5
Purl
pkg:deb/ubuntu/linux-oracle-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1013.13~22.04.4
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1018.18~22.04.1
6.5.0-1019.19~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1021.21~22.04.1
6.5.0-1023.23~22.04.1
6.5.0-1024.24~22.04.1
6.5.0-1025.25~22.04.1
6.5.0-1026.26~22.04.1
6.5.0-1027.27~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.5-headers-6.5.0-1027",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.5-tools-6.5.0-1027",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-6.8

Package

Name
linux-oracle-6.8
Purl
pkg:deb/ubuntu/linux-oracle-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.44~22.04.1

Affected versions

6.*
6.8.0-1006.6~22.04.3
6.8.0-1008.8~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.13~22.04.1
6.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
6.8.0-1016.17~22.04.1
6.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
6.8.0-1019.20~22.04.1
6.8.0-1020.21~22.04.1
6.8.0-1021.22~22.04.1
6.8.0-1022.23~22.04.1
6.8.0-1023.24~22.04.1
6.8.0-1024.25~22.04.1
6.8.0-1025.26~22.04.1
6.8.0-1026.27~22.04.1
6.8.0-1027.28~22.04.1
6.8.0-1028.29~22.04.1
6.8.0-1029.30~22.04.1
6.8.0-1030.31~22.04.1
6.8.0-1032.33~22.04.1
6.8.0-1033.34~22.04.1
6.8.0-1035.36~22.04.1
6.8.0-1037.38~22.04.1
6.8.0-1038.39~22.04.1
6.8.0-1039.40~22.04.1
6.8.0-1040.41~22.04.1
6.8.0-1041.42~22.04.1
6.8.0-1042.43~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.8-headers-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.8-tools-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1032.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1004.4
5.13.0-1006.6+22.04.1
5.13.0-1007.7+22.04.1
5.13.0-1010.11+22.04.1
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1011.12
5.15.0-1012.13
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.21
5.15.0-1019.22
5.15.0-1020.23
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1026.30
5.15.0-1027.31
5.15.0-1028.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-image-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-headers-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-tools-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv-5.19

Package

Name
linux-riscv-5.19
Purl
pkg:deb/ubuntu/linux-riscv-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1012.13~22.04.1
5.19.0-1015.16~22.04.1
5.19.0-1016.17~22.04.1
5.19.0-1017.18~22.04.1
5.19.0-1018.19~22.04.1
5.19.0-1019.21~22.04.1
5.19.0-1020.22~22.04.1
5.19.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.19-headers-5.19.0-1021",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.19-tools-5.19.0-1021",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv-6.5

Package

Name
linux-riscv-6.5
Purl
pkg:deb/ubuntu/linux-riscv-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-17.17.1.1~22.04.1
6.5.0-21.21.1~22.04.1
6.5.0-25.25.1~22.04.1
6.5.0-26.26.1~22.04.1
6.5.0-27.28.1~22.04.1
6.5.0-28.29.1~22.04.1
6.5.0-35.35.1~22.04.1
6.5.0-40.40.1~22.04.1
6.5.0-42.42.1~22.04.1
6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv-6.8

Package

Name
linux-riscv-6.8
Purl
pkg:deb/ubuntu/linux-riscv-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100~22.04.1

Affected versions

6.*
6.8.0-38.38.1~22.04.1
6.8.0-39.39.1~22.04.1
6.8.0-40.40.1~22.04.1
6.8.0-41.41.1~22.04.1
6.8.0-44.44.1~22.04.1
6.8.0-47.47.1~22.04.1
6.8.0-48.48.1~22.04.2
6.8.0-49.49.1~22.04.1
6.8.0-50.51.1~22.04.1
6.8.0-51.52.1~22.04.1
6.8.0-52.53.1~22.04.1
6.8.0-53.55.1~22.04.1
6.8.0-55.57.1~22.04.1
6.8.0-56.58.1~22.04.1
6.8.0-57.59.1~22.04.1
6.8.0-58.60.1~22.04.1
6.8.0-59.61.1~22.04.1
6.8.0-62.65~22.04.1
6.8.0-63.66~22.04.1
6.8.0-64.67~22.04.1
6.8.0-71.71~22.04.1
6.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
6.8.0-83.83~22.04.1
6.8.0-84.84~22.04.1
6.8.0-86.87~22.04.1
6.8.0-87.88~22.04.1
6.8.0-88.89~22.04.1
6.8.0-90.91~22.04.1
6.8.0-94.96~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.8-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.8-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-starfive-5.19

Package

Name
linux-starfive-5.19
Purl
pkg:deb/ubuntu/linux-starfive-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1014.16~22.04.1
5.19.0-1015.17~22.04.1
5.19.0-1016.18~22.04.1
5.19.0-1017.19~22.04.1
5.19.0-1018.20~22.04.1
5.19.0-1019.21~22.04.1
5.19.0-1020.22~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-5.19-headers-5.19.0-1020",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-5.19-tools-5.19.0-1020",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-starfive-6.2

Package

Name
linux-starfive-6.2
Purl
pkg:deb/ubuntu/linux-starfive-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1006.7~22.04.1
6.2.0-1007.8~22.04.1
6.2.0-1009.10~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.2-headers-6.2.0-1009",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.2-tools-6.2.0-1009",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-starfive-6.5

Package

Name
linux-starfive-6.5
Purl
pkg:deb/ubuntu/linux-starfive-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1007.8~22.04.1
6.5.0-1008.9~22.04.1
6.5.0-1009.10~22.04.1
6.5.0-1010.11~22.04.1
6.5.0-1011.12~22.04.1
6.5.0-1012.13~22.04.1
6.5.0-1014.15~22.04.1
6.5.0-1015.16~22.04.1
6.5.0-1016.17~22.04.1
6.5.0-1017.18~22.04.1
6.5.0-1018.19~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.5-headers-6.5.0-1018",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.5-tools-6.5.0-1018",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:24.04:LTS
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100

Affected versions

6.*
6.5.0-9.9
6.6.0-14.14
6.8.0-11.11
6.8.0-20.20
6.8.0-22.22
6.8.0-28.28
6.8.0-31.31
6.8.0-35.35
6.8.0-36.36
6.8.0-38.38
6.8.0-39.39
6.8.0-40.40
6.8.0-41.41
6.8.0-44.44
6.8.0-45.45
6.8.0-47.47
6.8.0-48.48
6.8.0-49.49
6.8.0-50.51
6.8.0-51.52
6.8.0-52.53
6.8.0-53.55
6.8.0-54.56
6.8.0-55.57
6.8.0-56.58
6.8.0-57.59
6.8.0-58.60
6.8.0-59.61
6.8.0-60.63
6.8.0-62.65
6.8.0-63.66
6.8.0-64.67
6.8.0-71.71
6.8.0-78.78
6.8.0-79.79
6.8.0-83.83
6.8.0-84.84
6.8.0-85.85
6.8.0-86.87
6.8.0-87.88
6.8.0-88.89
6.8.0-90.91
6.8.0-94.96

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-lib-rust-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-source-6.8.0",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "6.8.0-100.100"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49

Affected versions

6.*
6.5.0-1008.8
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1006.6
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1016.17
6.8.0-1017.18
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1023.25
6.8.0-1024.26
6.8.0-1025.27
6.8.0-1026.28
6.8.0-1027.29
6.8.0-1028.30
6.8.0-1029.31
6.8.0-1030.32
6.8.0-1031.33
6.8.0-1032.34
6.8.0-1033.35
6.8.0-1035.37
6.8.0-1036.38
6.8.0-1038.40
6.8.0-1039.41
6.8.0-1040.42
6.8.0-1041.43
6.8.0-1042.44
6.8.0-1043.45
6.8.0-1044.46
6.8.0-1045.47

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-aws-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-aws-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-aws-6.14

Package

Name
linux-aws-6.14
Purl
pkg:deb/ubuntu/linux-aws-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1011.11~24.04.1

Affected versions

6.*
6.14.0-1007.7~24.04.1
6.14.0-1009.9~24.04.1
6.14.0-1010.10~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.14-cloud-tools-6.14.0-1011",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.14-headers-6.14.0-1011",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.14-tools-6.14.0-1011",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1011-aws",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1011-aws-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.52

Affected versions

6.*
6.5.0-1007.7
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1012.14
6.8.0-1013.15
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.20
6.8.0-1018.21
6.8.0-1020.23
6.8.0-1021.25
6.8.0-1025.30
6.8.0-1026.31
6.8.0-1027.32
6.8.0-1028.33
6.8.0-1029.34
6.8.0-1030.35
6.8.0-1031.36
6.8.0-1034.39
6.8.0-1038.44
6.8.0-1040.46
6.8.0-1041.47
6.8.0-1042.48
6.8.0-1044.50

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-azure-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-azure-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-6.11

Package

Name
linux-azure-6.11
Purl
pkg:deb/ubuntu/linux-azure-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1008.8~24.04.1
6.11.0-1012.12~24.04.1
6.11.0-1013.13~24.04.1
6.11.0-1014.14~24.04.1
6.11.0-1015.15~24.04.1
6.11.0-1017.17~24.04.1
6.11.0-1018.18~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.11-cloud-tools-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.11-headers-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.11-tools-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.53

Affected versions

6.*
6.8.0-1041.48
6.8.0-1044.51

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-azure-fde-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-azure-fde-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-nvidia

Package

Name
linux-azure-nvidia
Purl
pkg:deb/ubuntu/linux-azure-nvidia?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1016.17
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1022.23
6.8.0-1025.27
6.8.0-1027.30
6.8.0-1029.32
6.8.0-1039.42

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-nvidia-cloud-tools-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-azure-nvidia-headers-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-azure-nvidia-tools-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50

Affected versions

6.*
6.5.0-1007.7
6.6.0-1001.1
6.8.0-1002.2
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.9
6.8.0-1009.10
6.8.0-1010.11
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1024.26
6.8.0-1025.27
6.8.0-1026.28
6.8.0-1027.29
6.8.0-1028.30
6.8.0-1029.31
6.8.0-1030.32
6.8.0-1031.33
6.8.0-1032.34
6.8.0-1033.35
6.8.0-1034.36
6.8.0-1036.38
6.8.0-1037.39
6.8.0-1039.41
6.8.0-1040.42
6.8.0-1041.43
6.8.0-1042.45
6.8.0-1043.46
6.8.0-1044.47
6.8.0-1045.48
6.8.0-1046.49

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-gcp-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-gcp-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-6.11

Package

Name
linux-gcp-6.11
Purl
pkg:deb/ubuntu/linux-gcp-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1006.6~24.04.2
6.11.0-1011.11~24.04.1
6.11.0-1013.13~24.04.1
6.11.0-1014.14~24.04.1
6.11.0-1015.15~24.04.1
6.11.0-1016.16~24.04.1
6.11.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-headers-6.11.0-1017",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-lib-rust-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-tools-6.11.0-1017",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-6.14

Package

Name
linux-gcp-6.14
Purl
pkg:deb/ubuntu/linux-gcp-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1014.15~24.04.1

Affected versions

6.*
6.14.0-1007.7~24.04.1
6.14.0-1011.11~24.04.1
6.14.0-1012.12~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1014-gcp-64k",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.14-headers-6.14.0-1014",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.14-tools-6.14.0-1014",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1014-gcp-64k",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1014-gcp-64k",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-lib-rust-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1014-gcp-64k",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1014-gcp-64k",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1014-gcp",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1014-gcp-64k",
            "binary_version":  "6.14.0-1014.15~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.48

Affected versions

6.*
6.8.0-1003.5
6.8.0-1004.7
6.8.0-1005.8
6.8.0-1006.9
6.8.0-1007.10
6.8.0-1008.11
6.8.0-1009.12
6.8.0-1010.13
6.8.0-1011.14
6.8.0-1012.15
6.8.0-1013.17
6.8.0-1014.18
6.8.0-1015.19
6.8.0-1016.20
6.8.0-1017.21
6.8.0-1019.23
6.8.0-1020.24
6.8.0-1021.25
6.8.0-1022.26
6.8.0-1023.27
6.8.0-1024.28
6.8.0-1025.29
6.8.0-1026.30
6.8.0-1027.31
6.8.0-1028.32
6.8.0-1029.33
6.8.0-1032.36
6.8.0-1033.37
6.8.0-1035.39
6.8.0-1036.40
6.8.0-1037.41
6.8.0-1038.43
6.8.0-1039.44
6.8.0-1040.45
6.8.0-1041.46
6.8.0-1042.47

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-gke-headers-6.8.0-1043",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-gke-tools-6.8.0-1043",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1030.33

Affected versions

6.*
6.8.0-1001.3
6.8.0-1002.4
6.8.0-1003.5
6.8.0-1004.6
6.8.0-1006.8
6.8.0-1007.9
6.8.0-1008.10
6.8.0-1009.11
6.8.0-1010.12
6.8.0-1011.13
6.8.0-1012.14
6.8.0-1013.15
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1022.24
6.8.0-1023.25
6.8.0-1024.26
6.8.0-1025.28
6.8.0-1026.29
6.8.0-1027.30
6.8.0-1028.31
6.8.0-1029.32

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-6.8.0-1030",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-gkeop-headers-6.8.0-1030",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-gkeop-tools-6.8.0-1030",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-hwe-6.11

Package

Name
linux-hwe-6.11
Purl
pkg:deb/ubuntu/linux-hwe-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-17.17~24.04.2
6.11.0-19.19~24.04.1
6.11.0-21.21~24.04.1
6.11.0-24.24~24.04.1
6.11.0-25.25~24.04.1
6.11.0-26.26~24.04.1
6.11.0-28.28~24.04.1
6.11.0-29.29~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-cloud-tools-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-headers-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-lib-rust-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-tools-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-vision-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-ibm

Package

Name
linux-ibm
Purl
pkg:deb/ubuntu/linux-ibm?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1044.44

Affected versions

6.*
6.5.0-1009.9
6.8.0-1001.1
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1015.15
6.8.0-1016.16
6.8.0-1017.17
6.8.0-1018.18
6.8.0-1019.19
6.8.0-1022.22
6.8.0-1023.23
6.8.0-1024.24
6.8.0-1025.25
6.8.0-1026.26
6.8.0-1027.27
6.8.0-1028.28
6.8.0-1029.29
6.8.0-1030.30
6.8.0-1033.33
6.8.0-1036.36
6.8.0-1037.37
6.8.0-1038.38
6.8.0-1039.39
6.8.0-1040.40
6.8.0-1041.41
6.8.0-1042.42
6.8.0-1043.43

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-ibm-headers-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-ibm-tools-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-intel

Package

Name
linux-intel
Purl
pkg:deb/ubuntu/linux-intel?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1005.12
6.8.0-1006.13
6.8.0-1007.14

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-intel-cloud-tools-6.8.0-1007",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-intel-headers-6.8.0-1007",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-intel-tools-6.8.0-1007",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-lowlatency

Package

Name
linux-lowlatency
Purl
pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100.1

Affected versions

6.*
6.5.0-9.9.1
6.6.0-14.14.1
6.8.0-7.7.1
6.8.0-25.25.3
6.8.0-28.28.1
6.8.0-31.31.1
6.8.0-35.35.1
6.8.0-36.36.1
6.8.0-38.38.1
6.8.0-39.39.1
6.8.0-40.40.1
6.8.0-41.41.1
6.8.0-44.44.1
6.8.0-45.45.1
6.8.0-47.47.1
6.8.0-48.48.3
6.8.0-49.49.1
6.8.0-50.51.1
6.8.0-51.52.1
6.8.0-52.53.1
6.8.0-53.55.2
6.8.0-54.56.1
6.8.0-55.57.1
6.8.0-56.58.1
6.8.0-57.59.1
6.8.0-58.60.1
6.8.0-59.61.1
6.8.0-60.63.1
6.8.0-62.65.1
6.8.0-63.66.1
6.8.0-64.67.1
6.8.0-65.68.1
6.8.0-78.78.1
6.8.0-79.79.1
6.8.0-83.83.1
6.8.0-84.84.1
6.8.0-85.85.1
6.8.0-86.87.1
6.8.0-87.88.1
6.8.0-88.89.1
6.8.0-90.91.1
6.8.0-94.96.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-lib-rust-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-lowlatency-hwe-6.11

Package

Name
linux-lowlatency-hwe-6.11
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1009.10~24.04.1
6.11.0-1011.12~24.04.1
6.11.0-1012.13~24.04.1
6.11.0-1013.14~24.04.1
6.11.0-1014.15~24.04.1
6.11.0-1015.16~24.04.2
6.11.0-1016.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-headers-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia

Package

Name
linux-nvidia
Purl
pkg:deb/ubuntu/linux-nvidia?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49

Affected versions

6.*
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1022.25
6.8.0-1023.26
6.8.0-1024.27
6.8.0-1025.28
6.8.0-1026.29
6.8.0-1027.30
6.8.0-1028.31
6.8.0-1029.32
6.8.0-1030.33
6.8.0-1031.34
6.8.0-1032.35
6.8.0-1035.38
6.8.0-1036.39
6.8.0-1038.41
6.8.0-1039.42
6.8.0-1040.43
6.8.0-1041.44
6.8.0-1042.45
6.8.0-1043.46
6.8.0-1044.47
6.8.0-1045.48

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-nvidia-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-nvidia-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia-6.11

Package

Name
linux-nvidia-6.11
Purl
pkg:deb/ubuntu/linux-nvidia-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1002.2
6.11.0-1003.3
6.11.0-1007.7
6.11.0-1010.10
6.11.0-1011.11
6.11.0-1012.12
6.11.0-1013.13
6.11.0-1016.16

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-headers-6.11.0-1016",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-lib-rust-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia-lowlatency

Package

Name
linux-nvidia-lowlatency
Purl
pkg:deb/ubuntu/linux-nvidia-lowlatency?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49.1

Affected versions

6.*
6.8.0-1009.9.1
6.8.0-1011.11.1
6.8.0-1012.12.1
6.8.0-1013.14.1
6.8.0-1014.15.1
6.8.0-1015.16.1
6.8.0-1017.19.1
6.8.0-1018.20.1
6.8.0-1019.21.1
6.8.0-1020.22.1
6.8.0-1021.23.1
6.8.0-1022.25.2
6.8.0-1023.26.1
6.8.0-1024.27.1
6.8.0-1025.28.1
6.8.0-1026.29.1
6.8.0-1027.30.1
6.8.0-1028.31.1
6.8.0-1029.32.1
6.8.0-1030.33.1
6.8.0-1031.34.1
6.8.0-1032.35.1
6.8.0-1035.38.1
6.8.0-1036.39.1
6.8.0-1038.41.1
6.8.0-1039.42.1
6.8.0-1040.43.1
6.8.0-1041.44.1
6.8.0-1042.45.1
6.8.0-1043.46.1
6.8.0-1044.47.1
6.8.0-1045.48.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-nvidia-lowlatency-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-nvidia-lowlatency-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-nvidia-tegra

Package

Name
linux-nvidia-tegra
Purl
pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1020.20

Affected versions

6.*
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1016.16
6.8.0-1019.19

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-nvidia-tegra-headers-6.8.0-1020",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-nvidia-tegra-tools-6.8.0-1020",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-6.11

Package

Name
linux-oem-6.11
Purl
pkg:deb/ubuntu/linux-oem-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1007.7
6.11.0-1008.8
6.11.0-1009.9
6.11.0-1010.10
6.11.0-1011.11
6.11.0-1012.12
6.11.0-1013.13
6.11.0-1015.15
6.11.0-1016.16
6.11.0-1017.17
6.11.0-1018.18
6.11.0-1020.20
6.11.0-1021.21
6.11.0-1022.22
6.11.0-1023.23
6.11.0-1024.24
6.11.0-1025.25
6.11.0-1027.27

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-usbio-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-vision-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-oem-6.11-headers-6.11.0-1027",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-oem-6.11-tools-6.11.0-1027",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-6.14

Package

Name
linux-oem-6.14
Purl
pkg:deb/ubuntu/linux-oem-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1010.10

Affected versions

6.*
6.14.0-1004.4
6.14.0-1005.5
6.14.0-1006.6
6.14.0-1007.7
6.14.0-1008.8

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-modules-usbio-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-modules-vision-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-oem-6.14-headers-6.14.0-1010",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-oem-6.14-tools-6.14.0-1010",
            "binary_version":  "6.14.0-1010.10"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1010-oem",
            "binary_version":  "6.14.0-1010.10"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oem-6.8

Package

Name
linux-oem-6.8
Purl
pkg:deb/ubuntu/linux-oem-6.8?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1016.16
6.8.0-1017.17
6.8.0-1018.18
6.8.0-1019.19
6.8.0-1020.20
6.8.0-1024.24
6.8.0-1025.25
6.8.0-1026.26
6.8.0-1027.27
6.8.0-1028.28
6.8.0-1029.29
6.8.0-1030.30
6.8.0-1031.31
6.8.0-1032.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-oem-6.8-headers-6.8.0-1032",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-oem-6.8-tools-6.8.0-1032",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle

Package

Name
linux-oracle
Purl
pkg:deb/ubuntu/linux-oracle?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.44

Affected versions

6.*
6.5.0-1010.10
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1008.8
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1015.16
6.8.0-1016.17
6.8.0-1017.18
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1020.21
6.8.0-1021.22
6.8.0-1022.23
6.8.0-1023.24
6.8.0-1024.25
6.8.0-1025.26
6.8.0-1026.27
6.8.0-1027.28
6.8.0-1028.29
6.8.0-1029.30
6.8.0-1030.31
6.8.0-1032.33
6.8.0-1033.34
6.8.0-1035.36
6.8.0-1037.38
6.8.0-1038.39
6.8.0-1039.40
6.8.0-1040.41
6.8.0-1041.42
6.8.0-1042.43

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-oracle-headers-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-oracle-tools-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-oracle-6.14

Package

Name
linux-oracle-6.14
Purl
pkg:deb/ubuntu/linux-oracle-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1011.11~24.04.1

Affected versions

6.*
6.14.0-1007.7~24.04.1
6.14.0-1009.9~24.04.1
6.14.0-1010.10~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1011-oracle",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1011-oracle-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1011-oracle",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1011-oracle-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1011-oracle",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1011-oracle-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1011-oracle",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1011-oracle-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1011-oracle",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1011-oracle-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.14-headers-6.14.0-1011",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.14-tools-6.14.0-1011",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1011-oracle",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1011-oracle-64k",
            "binary_version":  "6.14.0-1011.11~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.51

Affected versions

6.*
6.5.0-1005.7
6.7.0-1001.1
6.8.0-1001.1
6.8.0-1002.2
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.10
6.8.0-1010.11
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.23
6.8.0-1020.24
6.8.0-1024.28
6.8.0-1028.32
6.8.0-1029.33
6.8.0-1030.34
6.8.0-1031.35
6.8.0-1032.36
6.8.0-1035.39
6.8.0-1036.40
6.8.0-1038.42
6.8.0-1039.43
6.8.0-1040.44
6.8.0-1041.45
6.8.0-1042.46
6.8.0-1043.47
6.8.0-1044.48
6.8.0-1045.49

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-image-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-raspi-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-raspi-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-2019.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.1-1015.16

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-headers-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-tools-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-9.9.1
6.8.0-20.20.1
6.8.0-28.28.1
6.8.0-31.31.1
6.8.0-35.35.1
6.8.0-36.36.1
6.8.0-38.38.1
6.8.0-39.39.1
6.8.0-40.40.1
6.8.0-41.41.1
6.8.0-44.44.1
6.8.0-47.47.1
6.8.0-48.48.1
6.8.0-49.49.1
6.8.0-50.51.1
6.8.0-51.52.1
6.8.0-52.53.1
6.8.0-53.55.1
6.8.0-55.57.1
6.8.0-56.58.1
6.8.0-57.59.1
6.8.0-58.60.1
6.8.0-59.61.1
6.8.0-60.63.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-riscv-headers-6.8.0-60",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-riscv-tools-6.8.0-60",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-riscv-6.14

Package

Name
linux-riscv-6.14
Purl
pkg:deb/ubuntu/linux-riscv-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-28.28.1~24.04.1

Affected versions

6.*
6.14.0-22.22.1~24.04.1
6.14.0-23.23.1~24.04.1
6.14.0-24.24.1~24.04.1
6.14.0-27.27.1~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-28-generic",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-28-generic",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.14.0-28-generic",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-28-generic",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.14-headers-6.14.0-28",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.14-tools-6.14.0-28",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-28-generic",
            "binary_version":  "6.14.0-28.28.1~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-xilinx

Package

Name
linux-xilinx
Purl
pkg:deb/ubuntu/linux-xilinx?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1023.24

Affected versions

6.*
6.8.0-1008.9
6.8.0-1009.10
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1017.18
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1020.21
6.8.0-1021.22
6.8.0-1022.23

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-image-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-xilinx-headers-6.8.0-1023",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-xilinx-tools-6.8.0-1023",
            "binary_version":  "6.8.0-1023.24"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:25.10
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.17.0-1003.3
6.17.0-1004.4
6.17.0-1005.5
6.17.0-1007.7
6.17.0-1008.8
6.17.0-1010.10
6.17.0-1012.12
6.17.0-1014.14
6.17.0-1015.15
6.17.0-1017.17

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-azure-fde-headers-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-azure-fde-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:Nvidia-BlueField:24.04:LTS
linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1016.20

Affected versions

6.*
6.8.0-1011.15
6.8.0-1012.16
6.8.0-1013.17
6.8.0-1014.18

Ecosystem specific

{
    "availability":  "Available for NVIDIA BlueField platforms",
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-headers-6.8.0-1016",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-bluefield-tools-6.8.0-1016",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:Pro:FIPS-updates:24.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49+fips1

Affected versions

6.*
6.8.0-1035.37+fips1
6.8.0-1036.38+fips1
6.8.0-1038.40+fips1
6.8.0-1039.41+fips1
6.8.0-1040.42+fips1
6.8.0-1041.43+fips1
6.8.0-1042.44+fips1
6.8.0-1043.45+fips1
6.8.0-1044.46+fips1
6.8.0-1045.47+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.52+fips1

Affected versions

6.*
6.8.0-1034.39+fips1
6.8.0-1040.46+fips1
6.8.0-1044.50+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100+fips1

Affected versions

6.*
6.8.0-38.38+fips4
6.8.0-78.78+fips1
6.8.0-79.79+fips1
6.8.0-83.83+fips1
6.8.0-84.84+fips1
6.8.0-85.85+fips1
6.8.0-86.87+fips1
6.8.0-87.88+fips1
6.8.0-88.89+fips1
6.8.0-90.91+fips1
6.8.0-94.96+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-lib-rust-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-hmac-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50+fips1

Affected versions

6.*
6.8.0-1036.38+fips1
6.8.0-1037.39+fips1
6.8.0-1039.41+fips1
6.8.0-1040.42+fips1
6.8.0-1041.43+fips1
6.8.0-1042.45+fips1
6.8.0-1043.46+fips1
6.8.0-1044.47+fips1
6.8.0-1045.48+fips1
6.8.0-1046.49+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:Pro:Realtime:22.04:LTS
linux-realtime-6.8

Package

Name
linux-realtime-6.8
Purl
pkg:deb/ubuntu/linux-realtime-6.8?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.1-1041.42~22.04.1

Affected versions

6.*
6.8.1-1004.4~22.04.1
6.8.1-1005.5~22.04.2
6.8.1-1006.6~22.04.1
6.8.1-1007.7~22.04.1
6.8.1-1008.8~22.04.1
6.8.1-1009.9~22.04.1
6.8.1-1010.10~22.04.1
6.8.1-1011.11~22.04.1
6.8.1-1012.12~22.04.1
6.8.1-1013.14~22.04.1
6.8.1-1014.15~22.04.1
6.8.1-1015.16~22.04.1
6.8.1-1016.17~22.04.1
6.8.1-1017.18~22.04.1
6.8.1-1018.19~22.04.1
6.8.1-1019.20~22.04.1
6.8.1-1020.21~22.04.1
6.8.1-1021.22~22.04.1
6.8.1-1022.23~22.04.1
6.8.1-1023.24~22.04.1
6.8.1-1024.25~22.04.1
6.8.1-1025.26~22.04.1
6.8.1-1026.27~22.04.1
6.8.1-1030.31~22.04.1
6.8.1-1031.32~22.04.1
6.8.1-1034.35~22.04.1
6.8.1-1035.36~22.04.1
6.8.1-1036.37~22.04.1
6.8.1-1037.38~22.04.1
6.8.1-1038.39~22.04.1
6.8.1-1039.40~22.04.1
6.8.1-1040.41~22.04.1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.8-cloud-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.8-headers-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.8-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
Ubuntu:Pro:Realtime:24.04:LTS
linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-2037.38

Affected versions

6.*
6.7.0-2001.1
6.8.0-2001.1
6.8.0-2002.2
6.8.0-2004.4
6.8.0-2005.5
6.8.0-2006.6
6.8.0-2007.7
6.8.0-2008.8
6.8.0-2009.9
6.8.0-2010.10
6.8.0-2011.11
6.8.0-2012.12
6.8.0-2013.14
6.8.0-2014.15
6.8.0-2015.16
6.8.0-2016.17
6.8.0-2017.18
6.8.0-2018.19
6.8.0-2019.20
6.8.0-2022.23
6.8.0-2023.24
6.8.0-2024.25
6.8.0-2025.26
6.8.0-2026.27
6.8.0-2028.29
6.8.0-2029.30
6.8.0-2030.31
6.8.0-2031.32
6.8.0-2032.33
6.8.0-2033.34
6.8.0-2034.35
6.8.0-2035.36
6.8.0-2036.37

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-image-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2037",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2037",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.1-1041.42

Affected versions

6.*
6.8.0-1008.19
6.8.1-1001.1
6.8.1-1002.2
6.8.1-1003.3
6.8.1-1004.4
6.8.1-1005.5
6.8.1-1006.6
6.8.1-1007.7
6.8.1-1008.8
6.8.1-1009.9
6.8.1-1010.10
6.8.1-1011.11
6.8.1-1012.12
6.8.1-1013.14
6.8.1-1014.15
6.8.1-1015.16
6.8.1-1016.17
6.8.1-1017.18
6.8.1-1018.19
6.8.1-1019.20
6.8.1-1020.21
6.8.1-1021.22
6.8.1-1022.23
6.8.1-1023.24
6.8.1-1024.25
6.8.1-1025.26
6.8.1-1026.27
6.8.1-1030.31
6.8.1-1031.32
6.8.1-1033.34
6.8.1-1034.35
6.8.1-1035.36
6.8.1-1036.37
6.8.1-1037.38
6.8.1-1038.39
6.8.1-1039.40
6.8.1-1040.41

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-realtime-headers-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-realtime-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"
linux-realtime-6.14

Package

Name
linux-realtime-6.14
Purl
pkg:deb/ubuntu/linux-realtime-6.14?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1010.10~24.04.1

Affected versions

6.*
6.14.0-1003.3~24.04.3

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-cloud-tools-6.14.0-1010",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-headers-6.14.0-1010",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-tools-6.14.0-1010",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1010-realtime",
            "binary_version":  "6.14.0-1010.10~24.04.1"
        }
    ],
    "priority_reason":  "Exploitation requires CAP_NET_ADMIN in the initial user namespace, as the MACsec genl operations use GENL_ADMIN_PERM which checks netlink_capable() against init_user_ns. This is not obtainable via unprivileged user namespaces."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38020.json"