UBUNTU-CVE-2025-38334

Source
https://ubuntu.com/security/CVE-2025-38334
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2025-38334
Upstream
Downstream
USN (22)
Related
Published
2025-07-10T09:15:00Z
Modified
2026-10-12T14:20:51Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - low
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved: x86/sgx: Prevent attempts to reclaim poisoned pages TL;DR: SGX page reclaim touches the page to copy its contents to secondary storage. SGX instructions do not gracefully handle machine checks. Despite this, the existing SGX code will try to reclaim pages that it knows are poisoned. Avoid even trying to reclaim poisoned pages. The longer story: Pages used by an enclave only get epc_page->poison set in arch_memory_failure() but they currently stay on sgx_active_page_list until sgx_encl_release(), with the SGX_EPC_PAGE_RECLAIMER_TRACKED flag untouched. epc_page->poison is not checked in the reclaimer logic meaning that, if other conditions are met, an attempt will be made to reclaim an EPC page that was poisoned. This is bad because 1. we don't want that page to end up added to another enclave and 2. it is likely to cause one core to shut down and the kernel to panic. Specifically, reclaiming uses microcode operations including "EWB" which accesses the EPC page contents to encrypt and write them out to non-SGX memory. Those operations cannot handle MCEs in their accesses other than by putting the executing core into a special shutdown state (affecting both threads with HT.) The kernel will subsequently panic on the remaining cores seeing the core didn't enter MCE handler(s) in time. Call sgx_unmark_page_reclaimable() to remove the affected EPC page from sgx_active_page_list on memory error to stop it being considered for reclaiming. Testing epc_page->poison in sgx_reclaim_pages() would also work but I assume it's better to add code in the less likely paths. The affected EPC page is not added to &node->sgx_poison_page_list until later in sgx_encl_release()->sgx_free_epc_page() when it is EREMOVEd. Membership on other lists doesn't change to avoid changing any of the lists' semantics except for sgx_active_page_list. There's a "TBD" comment in arch_memory_failure() about pre-emptive actions, the goal here is not to address everything that it may imply. This also doesn't completely close the time window when a memory error notification will be fatal (for a not previously poisoned EPC page) -- the MCE can happen after sgx_reclaim_pages() has selected its candidates or even inside a microcode operation (actually easy to trigger due to the amount of time spent in them.) The spinlock in sgx_unmark_page_reclaimable() is safe because memory_failure() runs in process context and no spinlocks are held, explicitly noted in a mm/memory-failure.c comment.

References

Affected packages

Ubuntu:16.04:LTS
linux-hwe-edge

Package

Name
linux-hwe-edge
Purl
pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.8.0-28.30~16.04.1
4.8.0-30.32~16.04.1
4.8.0-32.34~16.04.1
4.8.0-34.36~16.04.1
4.10.0-14.16~16.04.1
4.10.0-19.21~16.04.1
4.10.0-20.22~16.04.1
4.10.0-21.23~16.04.1
4.10.0-22.24~16.04.1
4.10.0-24.28~16.04.1
4.10.0-26.30~16.04.1
4.11.0-13.19~16.04.1
4.11.0-14.20~16.04.1
4.13.0-16.19~16.04.3
4.13.0-17.20~16.04.1
4.13.0-19.22~16.04.1
4.13.0-21.24~16.04.1
4.13.0-25.29~16.04.2
4.15.0-13.14~16.04.1
4.15.0-15.16~16.04.1
4.15.0-20.21~16.04.1
4.15.0-22.24~16.04.1
4.15.0-23.25~16.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "dasd-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-headers-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-4.15.0-23",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-source-4.15.0",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-generic-lpae",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "linux-tools-4.15.0-23-lowlatency",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "message-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "serial-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version":  "4.15.0-23.25~16.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:18.04:LTS
linux-aws-5.0

Package

Name
linux-aws-5.0
Purl
pkg:deb/ubuntu/linux-aws-5.0?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1021.24~18.04.1
5.0.0-1022.25~18.04.1
5.0.0-1023.26~18.04.1
5.0.0-1024.27~18.04.1
5.0.0-1025.28
5.0.0-1027.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-aws-headers-5.0.0-1027",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-image-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1027-aws",
            "binary_version":  "5.0.0-1027.30"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-5.3

Package

Name
linux-aws-5.3
Purl
pkg:deb/ubuntu/linux-aws-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1016.17~18.04.1
5.3.0-1017.18~18.04.1
5.3.0-1019.21~18.04.1
5.3.0-1023.25~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.2
5.3.0-1033.35
5.3.0-1034.36
5.3.0-1035.37

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-image-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-aws",
            "binary_version":  "5.3.0-1035.37"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1002.2
4.15.0-1003.3
4.15.0-1004.4
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1012.12
4.15.0-1013.13
4.15.0-1014.14
4.15.0-1018.18
4.15.0-1019.19
4.15.0-1021.21
4.15.0-1022.23
4.15.0-1023.24
4.15.0-1025.26
4.15.0-1028.29
4.15.0-1030.31
4.15.0-1031.32
4.15.0-1032.33
4.15.0-1035.36
4.15.0-1036.38
4.15.0-1037.39
4.18.0-1011.11~18.04.1
4.18.0-1013.13~18.04.1
4.18.0-1014.14~18.04.1
4.18.0-1018.18~18.04.1
4.18.0-1019.19~18.04.1
4.18.0-1020.20~18.04.1
4.18.0-1023.24~18.04.1
4.18.0-1024.25~18.04.1
4.18.0-1025.27~18.04.1
5.*
5.0.0-1014.14~18.04.1
5.0.0-1016.17~18.04.1
5.0.0-1018.19~18.04.1
5.0.0-1020.21~18.04.1
5.0.0-1022.23~18.04.1
5.0.0-1023.24~18.04.1
5.0.0-1025.27~18.04.1
5.0.0-1027.29~18.04.1
5.0.0-1028.30~18.04.1
5.0.0-1029.31~18.04.1
5.0.0-1031.33
5.0.0-1032.34
5.0.0-1035.37
5.0.0-1036.38

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-azure-tools-5.0.0-1036",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1036-azure",
            "binary_version":  "5.0.0-1036.38"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-5.3

Package

Name
linux-azure-5.3
Purl
pkg:deb/ubuntu/linux-azure-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1007.8~18.04.1
5.3.0-1008.9~18.04.1
5.3.0-1009.10~18.04.1
5.3.0-1010.11~18.04.1
5.3.0-1012.13~18.04.1
5.3.0-1013.14~18.04.1
5.3.0-1016.17~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1019.20~18.04.1
5.3.0-1020.21~18.04.1
5.3.0-1022.23~18.04.1
5.3.0-1028.29~18.04.1
5.3.0-1031.32~18.04.1
5.3.0-1032.33~18.04.1
5.3.0-1034.35~18.04.1
5.3.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1035-azure",
            "binary_version":  "5.3.0-1035.36"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-edge

Package

Name
linux-azure-edge
Purl
pkg:deb/ubuntu/linux-azure-edge?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.18.0-1006.6~18.04.1
4.18.0-1007.7~18.04.1
4.18.0-1008.8~18.04.1
5.*
5.0.0-1012.12~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-edge-tools-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-azure-headers-5.0.0-1012",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1012-azure",
            "binary_version":  "5.0.0-1012.12~18.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1001.1
4.15.0-1003.3
4.15.0-1005.5
4.15.0-1006.6
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1010.10
4.15.0-1014.14
4.15.0-1015.15
4.15.0-1017.18
4.15.0-1018.19
4.15.0-1019.20
4.15.0-1021.22
4.15.0-1023.24
4.15.0-1024.25
4.15.0-1025.26
4.15.0-1026.27
4.15.0-1027.28
4.15.0-1028.29
4.15.0-1029.31
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1042.45
4.15.0-1044.70
5.*
5.0.0-1020.20~18.04.1
5.0.0-1021.21~18.04.1
5.0.0-1025.26~18.04.1
5.0.0-1026.27~18.04.1
5.0.0-1028.29~18.04.1
5.0.0-1029.30~18.04.1
5.0.0-1031.32
5.0.0-1033.34
5.0.0-1034.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-headers-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-gcp-tools-5.0.0-1034",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1034-gcp",
            "binary_version":  "5.0.0-1034.35"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-5.3

Package

Name
linux-gcp-5.3
Purl
pkg:deb/ubuntu/linux-gcp-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1008.9~18.04.1
5.3.0-1009.10~18.04.1
5.3.0-1010.11~18.04.1
5.3.0-1012.13~18.04.1
5.3.0-1014.15~18.04.1
5.3.0-1016.17~18.04.1
5.3.0-1017.18~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1020.22~18.04.1
5.3.0-1026.28~18.04.1
5.3.0-1029.31~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1032-gcp",
            "binary_version":  "5.3.0-1032.34~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gke-4.15

Package

Name
linux-gke-4.15
Purl
pkg:deb/ubuntu/linux-gke-4.15?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1041.43
4.15.0-1042.44
4.15.0-1044.46
4.15.0-1045.48
4.15.0-1046.49
4.15.0-1048.51
4.15.0-1049.52
4.15.0-1050.53
4.15.0-1052.55
4.15.0-1055.58
4.15.0-1057.60
4.15.0-1058.61
4.15.0-1059.62
4.15.0-1063.66
4.15.0-1064.67
4.15.0-1066.69
4.15.0-1067.70
4.15.0-1069.72
4.15.0-1070.73
4.15.0-1072.76
4.15.0-1073.78
4.15.0-1074.79
4.15.0-1076.81
4.15.0-1077.82
4.15.0-1078.83
4.15.0-1079.84

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-modules-extra-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1079-gke",
            "binary_version":  "4.15.0-1079.84"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gke-5.4

Package

Name
linux-gke-5.4
Purl
pkg:deb/ubuntu/linux-gke-5.4?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1025.25~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.31~18.04.1
5.4.0-1030.32~18.04.1
5.4.0-1032.34~18.04.1
5.4.0-1033.35~18.04.1
5.4.0-1035.37~18.04.1
5.4.0-1036.38~18.04.1
5.4.0-1037.39~18.04.1
5.4.0-1039.41~18.04.1
5.4.0-1040.42~18.04.1
5.4.0-1042.44~18.04.1
5.4.0-1043.45~18.04.1
5.4.0-1044.46~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1
5.4.0-1052.55~18.04.1
5.4.0-1053.56~18.04.1
5.4.0-1054.57~18.04.1
5.4.0-1055.58~18.04.1
5.4.0-1056.59~18.04.1
5.4.0-1057.60~18.04.1
5.4.0-1059.62~18.04.1
5.4.0-1061.64~18.04.1
5.4.0-1062.65~18.04.1
5.4.0-1063.66~18.04.1
5.4.0-1065.68~18.04.1
5.4.0-1066.69~18.04.1
5.4.0-1067.70~18.04.1
5.4.0-1068.71~18.04.1
5.4.0-1071.76~18.04.3
5.4.0-1072.77~18.04.1
5.4.0-1074.79~18.04.1
5.4.0-1076.82~18.04.1
5.4.0-1078.84~18.04.1
5.4.0-1080.86~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1080-gke",
            "binary_version":  "5.4.0-1080.86~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gkeop-5.4

Package

Name
linux-gkeop-5.4
Purl
pkg:deb/ubuntu/linux-gkeop-5.4?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1001.1
5.4.0-1003.3
5.4.0-1004.5
5.4.0-1005.6
5.4.0-1007.8~18.04.1
5.4.0-1008.9~18.04.1
5.4.0-1009.10~18.04.1
5.4.0-1010.11~18.04.1
5.4.0-1011.12~18.04.2
5.4.0-1012.13~18.04.1
5.4.0-1013.14~18.04.1
5.4.0-1014.15~18.04.1
5.4.0-1015.16~18.04.1
5.4.0-1016.17~18.04.1
5.4.0-1018.19~18.04.1
5.4.0-1021.22~18.04.1
5.4.0-1022.23~18.04.1
5.4.0-1023.24~18.04.1
5.4.0-1024.25~18.04.1
5.4.0-1025.26~18.04.1
5.4.0-1026.27~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.30~18.04.2
5.4.0-1031.32~18.04.1
5.4.0-1032.33~18.04.1
5.4.0-1033.34~18.04.1
5.4.0-1034.35~18.04.1
5.4.0-1036.37~18.04.1
5.4.0-1037.38~18.04.1
5.4.0-1038.39~18.04.1
5.4.0-1039.40~18.04.1
5.4.0-1040.41~18.04.1
5.4.0-1043.44~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1048.51~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-source-5.4.0",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1051-gkeop",
            "binary_version":  "5.4.0-1051.54~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe

Package

Name
linux-hwe
Purl
pkg:deb/ubuntu/linux-hwe?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.18.0-13.14~18.04.1
4.18.0-14.15~18.04.1
4.18.0-15.16~18.04.1
4.18.0-16.17~18.04.1
4.18.0-17.18~18.04.1
4.18.0-18.19~18.04.1
4.18.0-20.21~18.04.1
4.18.0-21.22~18.04.1
4.18.0-22.23~18.04.1
4.18.0-24.25~18.04.1
4.18.0-25.26~18.04.1
5.*
5.0.0-23.24~18.04.1
5.0.0-25.26~18.04.1
5.0.0-27.28~18.04.1
5.0.0-29.31~18.04.1
5.0.0-31.33~18.04.1
5.0.0-32.34~18.04.2
5.0.0-35.38~18.04.1
5.0.0-36.39~18.04.1
5.0.0-37.40~18.04.1
5.3.0-26.28~18.04.1
5.3.0-28.30~18.04.1
5.3.0-40.32~18.04.1
5.3.0-42.34~18.04.1
5.3.0-45.37~18.04.1
5.3.0-46.38~18.04.1
5.3.0-51.44~18.04.2
5.3.0-53.47~18.04.1
5.3.0-59.53~18.04.1
5.3.0-61.55~18.04.1
5.3.0-62.56~18.04.1
5.3.0-64.58~18.04.1
5.3.0-65.59
5.3.0-66.60
5.3.0-67.61
5.3.0-68.63
5.3.0-69.65
5.3.0-70.66
5.3.0-72.68
5.3.0-73.69
5.3.0-74.70
5.3.0-75.71
5.3.0-76.72

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fat-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "input-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "kernel-image-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-headers-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-headers-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-tools-5.3.0-76",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-hwe-udebs-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-generic",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "linux-tools-5.3.0-76-lowlatency",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "md-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "message-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "parport-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "plip-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "sata-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "serial-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "usb-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-76-generic-di",
            "binary_version":  "5.3.0-76.72"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-edge

Package

Name
linux-hwe-edge
Purl
pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-15.16~18.04.1
5.0.0-16.17~18.04.1
5.0.0-17.18~18.04.1
5.0.0-19.20~18.04.1
5.0.0-20.21~18.04.1
5.3.0-19.20~18.04.2
5.3.0-22.24~18.04.1
5.3.0-23.25~18.04.1
5.3.0-23.25~18.04.2
5.3.0-24.26~18.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "dasd-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "floppy-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-headers-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-tools-5.3.0-24",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-hwe-edge-udebs-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-source-5.3.0",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-generic-lpae",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "linux-tools-5.3.0-24-lowlatency",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "message-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "serial-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "virtio-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name":  "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version":  "5.3.0-24.26~18.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem

Package

Name
linux-oem
Purl
pkg:deb/ubuntu/linux-oem?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1002.3
4.15.0-1004.5
4.15.0-1006.9
4.15.0-1008.11
4.15.0-1009.12
4.15.0-1012.15
4.15.0-1013.16
4.15.0-1015.18
4.15.0-1017.20
4.15.0-1018.21
4.15.0-1021.24
4.15.0-1024.29
4.15.0-1026.31
4.15.0-1028.33
4.15.0-1030.35
4.15.0-1033.38
4.15.0-1034.39
4.15.0-1035.40
4.15.0-1036.41
4.15.0-1038.43
4.15.0-1039.44
4.15.0-1043.48
4.15.0-1045.50
4.15.0-1050.57
4.15.0-1056.65
4.15.0-1057.66
4.15.0-1059.68
4.15.0-1063.72
4.15.0-1064.73
4.15.0-1065.75
4.15.0-1066.76
4.15.0-1067.77
4.15.0-1069.79
4.15.0-1073.83
4.15.0-1076.86
4.15.0-1079.89
4.15.0-1080.90
4.15.0-1081.91
4.15.0-1087.97
4.15.0-1090.100
4.15.0-1091.101
4.15.0-1093.103
4.15.0-1094.104
4.15.0-1096.106
4.15.0-1097.107
4.15.0-1099.109
4.15.0-1100.110
4.15.0-1101.112
4.15.0-1102.113
4.15.0-1103.114

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "crypto-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fat-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "floppy-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "input-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "irda-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "kernel-image-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-buildinfo-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-headers-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-modules-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-headers-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-oem-tools-4.15.0-1103",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-tools-4.15.0-1103-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "linux-udebs-oem",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "md-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "message-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "mouse-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "multipath-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nfs-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "parport-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "plip-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "ppp-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "sata-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "scsi-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "serial-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "usb-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "virtio-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        },
        {
            "binary_name":  "vlan-modules-4.15.0-1103-oem-di",
            "binary_version":  "4.15.0-1103.114"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-5.0

Package

Name
linux-oracle-5.0
Purl
pkg:deb/ubuntu/linux-oracle-5.0?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1007.12~18.04.1
5.0.0-1008.13~18.04.1
5.0.0-1009.14~18.04.1
5.0.0-1010.15~18.04.1
5.0.0-1011.16
5.0.0-1013.18
5.0.0-1014.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-headers-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version":  "5.0.0-1014.19"
        },
        {
            "binary_name":  "linux-tools-5.0.0-1014-oracle",
            "binary_version":  "5.0.0-1014.19"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-5.3

Package

Name
linux-oracle-5.3
Purl
pkg:deb/ubuntu/linux-oracle-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1011.12~18.04.1
5.3.0-1013.14~18.04.1
5.3.0-1014.15~18.04.1
5.3.0-1016.18~18.04.1
5.3.0-1018.20~18.04.1
5.3.0-1024.26~18.04.1
5.3.0-1027.29~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-headers-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name":  "linux-tools-5.3.0-1030-oracle",
            "binary_version":  "5.3.0-1030.32~18.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:20.04:LTS
linux-aws-5.11

Package

Name
linux-aws-5.11
Purl
pkg:deb/ubuntu/linux-aws-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1009.9~20.04.2
5.11.0-1014.15~20.04.1
5.11.0-1016.17~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.2
5.11.0-1021.22~20.04.2
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-aws",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-5.13

Package

Name
linux-aws-5.13
Purl
pkg:deb/ubuntu/linux-aws-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9~20.04.2
5.13.0-1011.12~20.04.1
5.13.0-1012.13~20.04.1
5.13.0-1014.15~20.04.1
5.13.0-1017.19~20.04.1
5.13.0-1019.21~20.04.1
5.13.0-1021.23~20.04.2
5.13.0-1022.24~20.04.1
5.13.0-1023.25~20.04.1
5.13.0-1025.27~20.04.1
5.13.0-1028.31~20.04.1
5.13.0-1029.32~20.04.1
5.13.0-1031.35~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-aws",
            "binary_version":  "5.13.0-1031.35~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-5.8

Package

Name
linux-aws-5.8
Purl
pkg:deb/ubuntu/linux-aws-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1035.37~20.04.1
5.8.0-1038.40~20.04.1
5.8.0-1041.43~20.04.1
5.8.0-1042.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1042-aws",
            "binary_version":  "5.8.0-1042.44~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-5.11

Package

Name
linux-azure-5.11
Purl
pkg:deb/ubuntu/linux-azure-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1007.7~20.04.2
5.11.0-1012.13~20.04.1
5.11.0-1013.14~20.04.1
5.11.0-1015.16~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-azure",
            "binary_version":  "5.11.0-1028.31~20.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-5.13

Package

Name
linux-azure-5.13
Purl
pkg:deb/ubuntu/linux-azure-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1009.10~20.04.2
5.13.0-1012.14~20.04.1
5.13.0-1013.15~20.04.1
5.13.0-1014.16~20.04.1
5.13.0-1017.19~20.04.1
5.13.0-1021.24~20.04.1
5.13.0-1022.26~20.04.1
5.13.0-1023.27~20.04.1
5.13.0-1025.29~20.04.1
5.13.0-1028.33~20.04.1
5.13.0-1029.34~20.04.1
5.13.0-1031.37~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1031-azure",
            "binary_version":  "5.13.0-1031.37~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-5.8

Package

Name
linux-azure-5.8
Purl
pkg:deb/ubuntu/linux-azure-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1033.35~20.04.1
5.8.0-1036.38~20.04.1
5.8.0-1039.42~20.04.1
5.8.0-1040.43~20.04.1
5.8.0-1041.44~20.04.1
5.8.0-1042.45~20.04.1
5.8.0-1043.46~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1043-azure",
            "binary_version":  "5.8.0-1043.46~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1063.66+cvm2.2
5.4.0-1063.66+cvm3.2
5.4.0-1064.67+cvm1.1
5.4.0-1065.68+cvm2.1
5.4.0-1067.70+cvm1.1
5.4.0-1068.71+cvm1.1
5.4.0-1069.72+cvm1.1
5.4.0-1070.73+cvm1.1
5.4.0-1072.75+cvm1.1
5.4.0-1073.76+cvm1.1
5.4.0-1074.77+cvm1.1
5.4.0-1076.79+cvm1.1
5.4.0-1078.81+cvm1.1
5.4.0-1080.83+cvm1.1
5.4.0-1083.87+cvm1.1
5.4.0-1085.90+cvm1.1
5.4.0-1085.90+cvm2.1
5.4.0-1086.91+cvm1.1
5.4.0-1089.94+cvm1.2
5.4.0-1090.95+cvm1.1
5.4.0-1091.96+cvm1.1
5.4.0-1092.97+cvm1.1
5.4.0-1095.101+cvm1.1
5.4.0-1098.104+cvm1.1
5.4.0-1100.106+cvm1.1
5.4.0-1103.109+cvm1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1103-azure-fde",
            "binary_version":  "5.4.0-1103.109+cvm1.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-5.11

Package

Name
linux-gcp-5.11
Purl
pkg:deb/ubuntu/linux-gcp-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1009.10~20.04.1
5.11.0-1014.16~20.04.1
5.11.0-1017.19~20.04.1
5.11.0-1018.20~20.04.2
5.11.0-1020.22~20.04.1
5.11.0-1021.23~20.04.1
5.11.0-1022.24~20.04.1
5.11.0-1023.25~20.04.1
5.11.0-1024.26~20.04.1
5.11.0-1026.29~20.04.1
5.11.0-1028.32~20.04.1
5.11.0-1029.33~20.04.3

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1029-gcp",
            "binary_version":  "5.11.0-1029.33~20.04.3"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-5.13

Package

Name
linux-gcp-5.13
Purl
pkg:deb/ubuntu/linux-gcp-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9~20.04.3
5.13.0-1012.15~20.04.1
5.13.0-1013.16~20.04.1
5.13.0-1015.18~20.04.1
5.13.0-1019.23~20.04.1
5.13.0-1021.25~20.04.1
5.13.0-1023.28~20.04.1
5.13.0-1024.29~20.04.1
5.13.0-1025.30~20.04.1
5.13.0-1027.32~20.04.1
5.13.0-1030.36~20.04.1
5.13.0-1031.37~20.04.1
5.13.0-1033.40~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1033-gcp",
            "binary_version":  "5.13.0-1033.40~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-5.8

Package

Name
linux-gcp-5.8
Purl
pkg:deb/ubuntu/linux-gcp-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1032.34~20.04.1
5.8.0-1035.37~20.04.1
5.8.0-1038.40~20.04.1
5.8.0-1039.41

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1039-gcp",
            "binary_version":  "5.8.0-1039.41"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1033.35
5.4.0-1035.37
5.4.0-1036.38
5.4.0-1037.39
5.4.0-1039.41
5.4.0-1041.43
5.4.0-1042.44
5.4.0-1043.45
5.4.0-1044.46
5.4.0-1046.48
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1055.58
5.4.0-1056.59
5.4.0-1057.60
5.4.0-1059.62
5.4.0-1061.64
5.4.0-1062.65
5.4.0-1063.66
5.4.0-1065.68
5.4.0-1066.69
5.4.0-1067.70
5.4.0-1068.71
5.4.0-1071.76
5.4.0-1072.77
5.4.0-1074.79
5.4.0-1076.82
5.4.0-1078.84
5.4.0-1080.86
5.4.0-1081.87
5.4.0-1083.89
5.4.0-1084.90
5.4.0-1086.93
5.4.0-1087.94
5.4.0-1090.97
5.4.0-1091.98
5.4.0-1094.101
5.4.0-1095.102
5.4.0-1096.103
5.4.0-1097.104
5.4.0-1098.105
5.4.0-1099.106
5.4.0-1100.107
5.4.0-1101.108
5.4.0-1102.109
5.4.0-1103.110
5.4.0-1104.111
5.4.0-1105.112

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-gke-headers-5.4.0-1105",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-gke-tools-5.4.0-1105",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1105-gke",
            "binary_version":  "5.4.0-1105.112"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gke-5.15

Package

Name
linux-gke-5.15
Purl
pkg:deb/ubuntu/linux-gke-5.15?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1011.14~20.04.1
5.15.0-1014.17~20.04.1
5.15.0-1015.18~20.04.1
5.15.0-1016.19~20.04.1
5.15.0-1019.23~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1023.28~20.04.2
5.15.0-1027.32~20.04.1
5.15.0-1028.33~20.04.1
5.15.0-1029.34~20.04.1
5.15.0-1031.36~20.04.1
5.15.0-1032.37~20.04.1
5.15.0-1033.38~20.04.1
5.15.0-1034.39~20.04.1
5.15.0-1036.41~20.04.1
5.15.0-1037.42~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1039.44~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-gke-5.15-headers-5.15.0-1039",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-gke-5.15-tools-5.15.0-1039",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1039-gke",
            "binary_version":  "5.15.0-1039.44~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1008.9
5.4.0-1009.10
5.4.0-1010.11
5.4.0-1011.12
5.4.0-1012.13
5.4.0-1013.14
5.4.0-1014.15
5.4.0-1015.16
5.4.0-1016.17
5.4.0-1018.19
5.4.0-1021.22
5.4.0-1022.23
5.4.0-1023.24
5.4.0-1024.25
5.4.0-1025.26
5.4.0-1026.27
5.4.0-1027.28
5.4.0-1029.30
5.4.0-1031.32
5.4.0-1032.33
5.4.0-1033.34
5.4.0-1034.35
5.4.0-1036.37
5.4.0-1037.38
5.4.0-1038.39
5.4.0-1039.40
5.4.0-1040.41
5.4.0-1043.44
5.4.0-1046.48
5.4.0-1048.51
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1056.60
5.4.0-1057.61
5.4.0-1060.64
5.4.0-1061.65
5.4.0-1062.66
5.4.0-1064.68
5.4.0-1065.69
5.4.0-1066.70
5.4.0-1067.71
5.4.0-1068.72
5.4.0-1069.73
5.4.0-1070.74
5.4.0-1071.75
5.4.0-1072.76
5.4.0-1073.77
5.4.0-1074.78
5.4.0-1075.79
5.4.0-1076.80
5.4.0-1077.81
5.4.0-1078.82
5.4.0-1079.83
5.4.0-1080.84
5.4.0-1081.85
5.4.0-1083.87
5.4.0-1084.88
5.4.0-1085.89
5.4.0-1086.90
5.4.0-1087.91
5.4.0-1088.92
5.4.0-1089.93
5.4.0-1090.94
5.4.0-1091.95
5.4.0-1092.96
5.4.0-1093.97
5.4.0-1094.98
5.4.0-1095.99
5.4.0-1096.100
5.4.0-1097.101
5.4.0-1098.102
5.4.0-1099.103
5.4.0-1100.104
5.4.0-1101.105
5.4.0-1102.106

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-cloud-tools-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-headers-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-source-5.4.0",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-gkeop-tools-5.4.0-1102",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-image-unsigned-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1102-gkeop",
            "binary_version":  "5.4.0-1102.106"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gkeop-5.15

Package

Name
linux-gkeop-5.15
Purl
pkg:deb/ubuntu/linux-gkeop-5.15?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1003.5~20.04.2
5.15.0-1005.7~20.04.1
5.15.0-1007.10~20.04.1
5.15.0-1008.12~20.04.1
5.15.0-1011.15~20.04.2
5.15.0-1012.16~20.04.1
5.15.0-1013.17~20.04.1
5.15.0-1015.19~20.04.1
5.15.0-1016.21~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1022.27~20.04.1
5.15.0-1023.28~20.04.1
5.15.0-1024.29~20.04.1
5.15.0-1025.30~20.04.1
5.15.0-1026.31~20.04.1
5.15.0-1027.32~20.04.1
5.15.0-1028.33~20.04.1
5.15.0-1030.35~20.04.1
5.15.0-1031.37~20.04.1
5.15.0-1032.38~20.04.1
5.15.0-1033.39~20.04.1
5.15.0-1034.40~20.04.1
5.15.0-1035.41~20.04.1
5.15.0-1036.42~20.04.1
5.15.0-1037.43~20.04.1
5.15.0-1038.44~20.04.1
5.15.0-1039.45~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1043.50~20.04.1
5.15.0-1044.51~20.04.1
5.15.0-1045.52~20.04.1
5.15.0-1046.53~20.04.1
5.15.0-1047.54~20.04.1
5.15.0-1048.55~20.04.1
5.15.0-1049.56~20.04.1
5.15.0-1050.57~20.04.1
5.15.0-1051.58~20.04.1
5.15.0-1052.59~20.04.1
5.15.0-1053.60~20.04.1
5.15.0-1054.61~20.04.1
5.15.0-1055.62~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-headers-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-gkeop-5.15-tools-5.15.0-1055",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1055-gkeop",
            "binary_version":  "5.15.0-1055.62~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-5.11

Package

Name
linux-hwe-5.11
Purl
pkg:deb/ubuntu/linux-hwe-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-22.23~20.04.1
5.11.0-25.27~20.04.1
5.11.0-27.29~20.04.1
5.11.0-34.36~20.04.1
5.11.0-36.40~20.04.1
5.11.0-37.41~20.04.2
5.11.0-38.42~20.04.1
5.11.0-40.44~20.04.2
5.11.0-41.45~20.04.1
5.11.0-43.47~20.04.2
5.11.0-44.48~20.04.2
5.11.0-46.51~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-cloud-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-source-5.11.0",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-common",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-tools-host",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-64k",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-generic-lpae",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-46-lowlatency",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version":  "5.11.0-46.51~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-5.13

Package

Name
linux-hwe-5.13
Purl
pkg:deb/ubuntu/linux-hwe-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-21.21~20.04.1
5.13.0-22.22~20.04.1
5.13.0-23.23~20.04.2
5.13.0-25.26~20.04.1
5.13.0-27.29~20.04.1
5.13.0-28.31~20.04.1
5.13.0-30.33~20.04.1
5.13.0-35.40~20.04.1
5.13.0-37.42~20.04.1
5.13.0-39.44~20.04.1
5.13.0-40.45~20.04.1
5.13.0-41.46~20.04.1
5.13.0-44.49~20.04.1
5.13.0-48.54~20.04.1
5.13.0-51.58~20.04.1
5.13.0-52.59~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-source-5.13.0",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-common",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-tools-host",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-64k",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-generic-lpae",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-52-lowlatency",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version":  "5.13.0-52.59~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-5.8

Package

Name
linux-hwe-5.8
Purl
pkg:deb/ubuntu/linux-hwe-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-23.24~20.04.1
5.8.0-25.26~20.04.1
5.8.0-28.30~20.04.1
5.8.0-29.31~20.04.1
5.8.0-31.33~20.04.1
5.8.0-33.36~20.04.1
5.8.0-34.37~20.04.2
5.8.0-36.40~20.04.1
5.8.0-38.43~20.04.1
5.8.0-40.45~20.04.1
5.8.0-41.46~20.04.1
5.8.0-43.49~20.04.1
5.8.0-44.50~20.04.1
5.8.0-45.51~20.04.1
5.8.0-48.54~20.04.1
5.8.0-49.55~20.04.1
5.8.0-50.56~20.04.1
5.8.0-53.60~20.04.1
5.8.0-55.62~20.04.1
5.8.0-59.66~20.04.1
5.8.0-63.71~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "dasd-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "floppy-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-cloud-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-source-5.8.0",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-common",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-tools-host",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-64k",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-generic-lpae",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-63-lowlatency",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "serial-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version":  "5.8.0-63.71~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-intel-5.13

Package

Name
linux-intel-5.13
Purl
pkg:deb/ubuntu/linux-intel-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1007.7
5.13.0-1008.8
5.13.0-1009.9
5.13.0-1010.10
5.13.0-1011.11
5.13.0-1014.15
5.13.0-1017.19

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-cloud-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-source-5.13.0",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-common",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-intel-5.13-tools-host",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1017-intel",
            "binary_version":  "5.13.0-1017.19"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-5.10

Package

Name
linux-oem-5.10
Purl
pkg:deb/ubuntu/linux-oem-5.10?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.10.0-1008.9
5.10.0-1011.12
5.10.0-1013.14
5.10.0-1014.15
5.10.0-1016.17
5.10.0-1017.18
5.10.0-1019.20
5.10.0-1021.22
5.10.0-1022.23
5.10.0-1023.24
5.10.0-1025.26
5.10.0-1026.27
5.10.0-1029.30
5.10.0-1032.33
5.10.0-1033.34
5.10.0-1034.35
5.10.0-1038.40
5.10.0-1044.46
5.10.0-1045.47
5.10.0-1049.51
5.10.0-1050.52
5.10.0-1051.53
5.10.0-1052.54
5.10.0-1053.55
5.10.0-1055.58
5.10.0-1057.61

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-headers-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-modules-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-oem-5.10-tools-host",
            "binary_version":  "5.10.0-1057.61"
        },
        {
            "binary_name":  "linux-tools-5.10.0-1057-oem",
            "binary_version":  "5.10.0-1057.61"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-5.13

Package

Name
linux-oem-5.13
Purl
pkg:deb/ubuntu/linux-oem-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1009.10
5.13.0-1010.11
5.13.0-1012.16
5.13.0-1014.18
5.13.0-1017.21
5.13.0-1019.23
5.13.0-1020.24
5.13.0-1021.25
5.13.0-1022.26
5.13.0-1026.32
5.13.0-1028.35
5.13.0-1029.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-oem-5.13-tools-host",
            "binary_version":  "5.13.0-1029.36"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1029-oem",
            "binary_version":  "5.13.0-1029.36"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-5.14

Package

Name
linux-oem-5.14
Purl
pkg:deb/ubuntu/linux-oem-5.14?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.14.0-1004.4
5.14.0-1005.5
5.14.0-1007.7
5.14.0-1008.8
5.14.0-1010.10
5.14.0-1011.11
5.14.0-1013.13
5.14.0-1018.19
5.14.0-1020.22
5.14.0-1022.24
5.14.0-1024.26
5.14.0-1027.30
5.14.0-1029.32
5.14.0-1031.34
5.14.0-1032.35
5.14.0-1033.36
5.14.0-1034.37
5.14.0-1036.40
5.14.0-1038.42
5.14.0-1042.47
5.14.0-1044.49
5.14.0-1045.51
5.14.0-1046.53
5.14.0-1047.54
5.14.0-1048.55
5.14.0-1049.56
5.14.0-1050.57
5.14.0-1051.58
5.14.0-1052.59
5.14.0-1054.61
5.14.0-1055.62
5.14.0-1056.63
5.14.0-1057.64
5.14.0-1058.66
5.14.0-1059.67

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-headers-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-image-unsigned-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-headers-5.14.0-1059",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-5.14.0-1059",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-oem-5.14-tools-host",
            "binary_version":  "5.14.0-1059.67"
        },
        {
            "binary_name":  "linux-tools-5.14.0-1059-oem",
            "binary_version":  "5.14.0-1059.67"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-5.6

Package

Name
linux-oem-5.6
Purl
pkg:deb/ubuntu/linux-oem-5.6?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.6.0-1007.7
5.6.0-1008.8
5.6.0-1010.10
5.6.0-1011.11
5.6.0-1013.13
5.6.0-1017.17
5.6.0-1018.18
5.6.0-1020.20
5.6.0-1021.21
5.6.0-1023.23
5.6.0-1026.26
5.6.0-1027.27
5.6.0-1028.28
5.6.0-1031.32
5.6.0-1032.33
5.6.0-1033.35
5.6.0-1034.36
5.6.0-1035.37
5.6.0-1036.39
5.6.0-1039.43
5.6.0-1042.46
5.6.0-1047.51
5.6.0-1048.52
5.6.0-1050.54
5.6.0-1052.56
5.6.0-1053.57
5.6.0-1054.58
5.6.0-1055.59
5.6.0-1056.60

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-headers-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-modules-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-oem-5.6-tools-host",
            "binary_version":  "5.6.0-1056.60"
        },
        {
            "binary_name":  "linux-tools-5.6.0-1056-oem",
            "binary_version":  "5.6.0-1056.60"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-5.11

Package

Name
linux-oracle-5.11
Purl
pkg:deb/ubuntu/linux-oracle-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1008.8~20.04.1
5.11.0-1013.14~20.04.1
5.11.0-1016.17~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1028-oracle",
            "binary_version":  "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-5.13

Package

Name
linux-oracle-5.13
Purl
pkg:deb/ubuntu/linux-oracle-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1011.13~20.04.2
5.13.0-1015.19~20.04.1
5.13.0-1016.20~20.04.1
5.13.0-1018.22~20.04.1
5.13.0-1021.26~20.04.1
5.13.0-1025.30~20.04.1
5.13.0-1027.32~20.04.1
5.13.0-1028.33~20.04.1
5.13.0-1030.35~20.04.1
5.13.0-1033.39~20.04.1
5.13.0-1034.40~20.04.1
5.13.0-1036.43~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.13.0-1036-oracle",
            "binary_version":  "5.13.0-1036.43~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-5.8

Package

Name
linux-oracle-5.8
Purl
pkg:deb/ubuntu/linux-oracle-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1031.32~20.04.2
5.8.0-1033.34~20.04.1
5.8.0-1034.35~20.04.2
5.8.0-1037.38~20.04.1
5.8.0-1038.39~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-1038-oracle",
            "binary_version":  "5.8.0-1038.39~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-raspi2

Package

Name
linux-raspi2
Purl
pkg:deb/ubuntu/linux-raspi2?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1007.8
5.3.0-1014.16
5.3.0-1015.17
5.3.0-1017.19
5.4.0-1004.4
5.4.0-1006.6

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-headers-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-image-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-modules-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-headers-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-raspi2-tools-5.4.0-1006",
            "binary_version":  "5.4.0-1006.6"
        },
        {
            "binary_name":  "linux-tools-5.4.0-1006-raspi2",
            "binary_version":  "5.4.0-1006.6"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-24.28
5.4.0-26.30
5.4.0-27.31
5.4.0-28.32
5.4.0-30.34
5.4.0-31.35
5.4.0-33.37
5.4.0-34.38
5.4.0-36.41
5.4.0-37.42
5.4.0-39.44
5.4.0-40.45

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "crypto-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fat-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "input-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ipmi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "kernel-image-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-buildinfo-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-headers-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-image-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-modules-extra-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-headers-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-riscv-tools-5.4.0-40",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-tools-5.4.0-40-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "md-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "message-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "mouse-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "multipath-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nfs-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "parport-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "pata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "plip-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "ppp-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "sata-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "scsi-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "storage-core-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "usb-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "virtio-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        },
        {
            "binary_name":  "vlan-modules-5.4.0-40-generic-di",
            "binary_version":  "5.4.0-40.45"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-5.11

Package

Name
linux-riscv-5.11
Purl
pkg:deb/ubuntu/linux-riscv-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1015.16~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1018.19~20.04.2
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1024.25~20.04.1
5.11.0-1026.28~20.04.1
5.11.0-1028.31~20.04.1
5.11.0-1029.32~20.04.1
5.11.0-1030.34
5.11.0-1031.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-headers-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-image-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version":  "5.11.0-1031.35"
        },
        {
            "binary_name":  "linux-tools-5.11.0-1031-generic",
            "binary_version":  "5.11.0-1031.35"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-5.8

Package

Name
linux-riscv-5.8
Purl
pkg:deb/ubuntu/linux-riscv-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-14.16~20.04.1
5.8.0-14.16~20.04.3
5.8.0-16.18~20.04.1
5.8.0-17.19~20.04.1
5.8.0-18.20~20.04.1
5.8.0-20.22~20.04.1
5.8.0-22.24~20.04.1
5.8.0-25.27~20.04.1
5.8.0-26.28~20.04.1
5.8.0-29.31~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "block-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "crypto-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fat-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "input-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ipmi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "kernel-image-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.8.0-29-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "linux-udebs-generic",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "md-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "message-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "mouse-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "multipath-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nfs-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "parport-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "pata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "plip-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "ppp-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "sata-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "scsi-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "storage-core-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "usb-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "virtio-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name":  "vlan-modules-5.8.0-29-generic-di",
            "binary_version":  "5.8.0-29.31~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:22.04:LTS
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-19.19
5.15.0-17.17
5.15.0-18.18
5.15.0-22.22
5.15.0-23.23
5.15.0-25.25
5.15.0-27.28
5.15.0-30.31
5.15.0-33.34
5.15.0-35.36
5.15.0-37.39
5.15.0-39.42
5.15.0-40.43
5.15.0-41.44
5.15.0-43.46
5.15.0-46.49
5.15.0-47.51
5.15.0-48.54
5.15.0-50.56
5.15.0-52.58
5.15.0-53.59
5.15.0-56.62
5.15.0-57.63
5.15.0-58.64
5.15.0-60.66
5.15.0-67.74
5.15.0-69.76
5.15.0-70.77
5.15.0-71.78
5.15.0-72.79
5.15.0-73.80
5.15.0-75.82
5.15.0-76.83
5.15.0-78.85
5.15.0-79.86
5.15.0-82.91
5.15.0-83.92
5.15.0-84.93
5.15.0-86.96
5.15.0-87.97
5.15.0-88.98
5.15.0-89.99
5.15.0-91.101
5.15.0-92.102
5.15.0-94.104
5.15.0-97.107
5.15.0-100.110
5.15.0-101.111
5.15.0-102.112
5.15.0-105.115
5.15.0-106.116
5.15.0-107.117
5.15.0-112.122
5.15.0-113.123
5.15.0-116.126
5.15.0-117.127
5.15.0-118.128
5.15.0-119.129
5.15.0-121.131
5.15.0-122.132
5.15.0-124.134
5.15.0-125.135
5.15.0-126.136
5.15.0-127.137
5.15.0-128.138
5.15.0-130.140
5.15.0-131.141
5.15.0-133.144
5.15.0-134.145
5.15.0-135.146
5.15.0-136.147
5.15.0-138.148
5.15.0-139.149
5.15.0-140.150
5.15.0-141.151
5.15.0-142.152
5.15.0-143.153
5.15.0-144.157
5.15.0-151.161
5.15.0-152.162
5.15.0-153.163
5.15.0-156.166
5.15.0-157.167
5.15.0-160.170
5.15.0-161.171
5.15.0-163.173
5.15.0-164.174
5.15.0-168.178
5.15.0-170.180
5.15.0-171.181
5.15.0-173.183
5.15.0-174.184
5.15.0-176.186
5.15.0-177.187
5.15.0-179.189
5.15.0-181.191
5.15.0-185.195
5.15.0-186.196
5.15.0-187.197
5.15.0-190.200
5.15.0-191.201
5.15.0-194.204
5.15.0-198.208

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-source-5.15.0",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "5.15.0-198.208"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "5.15.0-198.208"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-allwinner-5.19

Package

Name
linux-allwinner-5.19
Purl
pkg:deb/ubuntu/linux-allwinner-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1007.7~22.04.1
5.19.0-1009.9~22.04.1
5.19.0-1010.10~22.04.1
5.19.0-1011.11~22.04.1
5.19.0-1012.12~22.04.1
5.19.0-1013.13~22.04.1
5.19.0-1014.14~22.04.1
5.19.0-1015.15~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-allwinner-5.19-headers-5.19.0-1015",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-allwinner-5.19-tools-5.19.0-1015",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1015-allwinner",
            "binary_version":  "5.19.0-1015.15~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1005.6
5.15.0-1002.4
5.15.0-1003.5
5.15.0-1004.6
5.15.0-1005.7
5.15.0-1008.10
5.15.0-1009.11
5.15.0-1011.14
5.15.0-1013.17
5.15.0-1014.18
5.15.0-1015.19
5.15.0-1017.21
5.15.0-1019.23
5.15.0-1020.24
5.15.0-1021.25
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1026.30
5.15.0-1027.31
5.15.0-1028.32
5.15.0-1030.34
5.15.0-1031.35
5.15.0-1033.37
5.15.0-1034.38
5.15.0-1035.39
5.15.0-1036.40
5.15.0-1037.41
5.15.0-1038.43
5.15.0-1039.44
5.15.0-1040.45
5.15.0-1042.47
5.15.0-1043.48
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1047.52
5.15.0-1048.53
5.15.0-1049.54
5.15.0-1050.55
5.15.0-1051.56
5.15.0-1052.57
5.15.0-1053.58
5.15.0-1055.60
5.15.0-1056.61
5.15.0-1057.63
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1068.74
5.15.0-1069.75
5.15.0-1070.76
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1076.83
5.15.0-1078.85
5.15.0-1079.86
5.15.0-1080.87
5.15.0-1081.88
5.15.0-1082.89
5.15.0-1083.90
5.15.0-1084.91
5.15.0-1085.92
5.15.0-1086.93
5.15.0-1087.94
5.15.0-1088.95
5.15.0-1089.96
5.15.0-1090.97
5.15.0-1091.98
5.15.0-1092.99
5.15.0-1093.100
5.15.0-1095.102
5.15.0-1096.103
5.15.0-1097.104
5.15.0-1098.105
5.15.0-1099.106
5.15.0-1100.107
5.15.0-1101.108
5.15.0-1103.110
5.15.0-1104.111
5.15.0-1105.112
5.15.0-1106.113
5.15.0-1108.115
5.15.0-1109.116
5.15.0-1111.118
5.15.0-1112.119
5.15.0-1113.120
5.15.0-1114.121
5.15.0-1115.122
5.15.0-1116.123
5.15.0-1117.124

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-aws-headers-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-aws-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws-64k",
            "binary_version":  "5.15.0-1117.124"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-5.19

Package

Name
linux-aws-5.19
Purl
pkg:deb/ubuntu/linux-aws-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1019.20~22.04.1
5.19.0-1020.21~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1024.25~22.04.1
5.19.0-1025.26~22.04.1
5.19.0-1026.27~22.04.1
5.19.0-1027.28~22.04.1
5.19.0-1028.29~22.04.1
5.19.0-1029.30~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.19-cloud-tools-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-aws-5.19-headers-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-aws-5.19-tools-5.19.0-1029",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1029-aws",
            "binary_version":  "5.19.0-1029.30~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-6.2

Package

Name
linux-aws-6.2
Purl
pkg:deb/ubuntu/linux-aws-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1005.5~22.04.1
6.2.0-1006.6~22.04.1
6.2.0-1007.7~22.04.1
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.3
6.2.0-1010.10~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.2-cloud-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.2-headers-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.2-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-aws",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-6.5

Package

Name
linux-aws-6.5
Purl
pkg:deb/ubuntu/linux-aws-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1008.8~22.04.1
6.5.0-1010.10~22.04.1
6.5.0-1011.11~22.04.1
6.5.0-1012.12~22.04.1
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.2
6.5.0-1018.18~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1021.21~22.04.1
6.5.0-1022.22~22.04.1
6.5.0-1023.23~22.04.1
6.5.0-1024.24~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.5-cloud-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.5-headers-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.5-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-aws",
            "binary_version":  "6.5.0-1024.24~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-6.8

Package

Name
linux-aws-6.8
Purl
pkg:deb/ubuntu/linux-aws-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49~22.04.1

Affected versions

6.*
6.8.0-1009.9~22.04.2
6.8.0-1010.10~22.04.2
6.8.0-1011.12~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.15~22.04.1
6.8.0-1015.16~22.04.1
6.8.0-1016.17~22.04.2
6.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1023.25~22.04.1
6.8.0-1024.26~22.04.1
6.8.0-1027.29~22.04.1
6.8.0-1028.30~22.04.1
6.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
6.8.0-1033.35~22.04.1
6.8.0-1035.37~22.04.1
6.8.0-1036.38~22.04.1
6.8.0-1039.41~22.04.1
6.8.0-1040.42~22.04.1
6.8.0-1041.43~22.04.1
6.8.0-1042.44~22.04.1
6.8.0-1043.45~22.04.1
6.8.0-1044.46~22.04.1
6.8.0-1045.47~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.8-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.8-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-aws-6.8-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1006.7
5.15.0-1001.2
5.15.0-1002.3
5.15.0-1003.4
5.15.0-1005.6
5.15.0-1007.8
5.15.0-1008.9
5.15.0-1010.12
5.15.0-1012.15
5.15.0-1013.16
5.15.0-1014.17
5.15.0-1017.20
5.15.0-1019.24
5.15.0-1020.25
5.15.0-1021.26
5.15.0-1022.27
5.15.0-1023.29
5.15.0-1024.30
5.15.0-1029.36
5.15.0-1030.37
5.15.0-1031.38
5.15.0-1033.40
5.15.0-1034.41
5.15.0-1035.42
5.15.0-1036.43
5.15.0-1037.44
5.15.0-1038.45
5.15.0-1039.46
5.15.0-1040.47
5.15.0-1041.48
5.15.0-1042.49
5.15.0-1044.51
5.15.0-1045.52
5.15.0-1046.53
5.15.0-1047.54
5.15.0-1049.56
5.15.0-1050.57
5.15.0-1051.59
5.15.0-1052.60
5.15.0-1053.61
5.15.0-1054.62
5.15.0-1056.64
5.15.0-1057.65
5.15.0-1058.66
5.15.0-1059.67
5.15.0-1060.69
5.15.0-1061.70
5.15.0-1063.72
5.15.0-1064.73
5.15.0-1066.75
5.15.0-1067.76
5.15.0-1068.77
5.15.0-1070.79
5.15.0-1071.80
5.15.0-1072.81
5.15.0-1073.82
5.15.0-1074.83
5.15.0-1075.84
5.15.0-1078.87
5.15.0-1079.88
5.15.0-1081.90
5.15.0-1082.91
5.15.0-1084.93
5.15.0-1086.95
5.15.0-1087.96
5.15.0-1088.97
5.15.0-1089.98
5.15.0-1090.99
5.15.0-1091.100
5.15.0-1092.101
5.15.0-1094.103
5.15.0-1095.104
5.15.0-1096.105
5.15.0-1097.106
5.15.0-1098.107
5.15.0-1099.108
5.15.0-1101.110
5.15.0-1102.111
5.15.0-1103.112
5.15.0-1109.118
5.15.0-1110.119
5.15.0-1111.120
5.15.0-1114.123
5.15.0-1116.125
5.15.0-1117.126
5.15.0-1118.127
5.15.0-1119.128
5.15.0-1121.130
5.15.0-1122.131
5.15.0-1123.132

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-azure-headers-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-azure-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-5.19

Package

Name
linux-azure-5.19
Purl
pkg:deb/ubuntu/linux-azure-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1020.21~22.04.1
5.19.0-1021.22~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1025.28~22.04.1
5.19.0-1026.29~22.04.1
5.19.0-1027.30~22.04.2

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.19-cloud-tools-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-azure-5.19-headers-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-azure-5.19-tools-5.19.0-1027",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1027-azure",
            "binary_version":  "5.19.0-1027.30~22.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-6.2

Package

Name
linux-azure-6.2
Purl
pkg:deb/ubuntu/linux-azure-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1005.5~22.04.1
6.2.0-1006.6~22.04.1
6.2.0-1007.7~22.04.1
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.3
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1
6.2.0-1019.19~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.2-cloud-tools-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.2-headers-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.2-tools-6.2.0-1019",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1019-azure",
            "binary_version":  "6.2.0-1019.19~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-6.5

Package

Name
linux-azure-6.5
Purl
pkg:deb/ubuntu/linux-azure-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1007.7~22.04.1
6.5.0-1009.9~22.04.1
6.5.0-1010.10~22.04.1
6.5.0-1011.11~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.1
6.5.0-1018.19~22.04.2
6.5.0-1019.20~22.04.1
6.5.0-1021.22~22.04.1
6.5.0-1022.23~22.04.1
6.5.0-1023.24~22.04.1
6.5.0-1024.25~22.04.1
6.5.0-1025.26~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.5-cloud-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.5-headers-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.5-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1025-azure",
            "binary_version":  "6.5.0-1025.26~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-6.8

Package

Name
linux-azure-6.8
Purl
pkg:deb/ubuntu/linux-azure-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1051.57~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1012.14~22.04.1
6.8.0-1013.15~22.04.1
6.8.0-1014.16~22.04.1
6.8.0-1015.17~22.04.2
6.8.0-1017.20~22.04.1
6.8.0-1018.21~22.04.1
6.8.0-1020.23~22.04.1
6.8.0-1021.25~22.04.1
6.8.0-1025.30~22.04.1
6.8.0-1026.31~22.04.1
6.8.0-1027.32~22.04.1
6.8.0-1028.33~22.04.1
6.8.0-1029.34~22.04.1
6.8.0-1030.35~22.04.1
6.8.0-1031.36~22.04.1
6.8.0-1034.39~22.04.1
6.8.0-1036.42~22.04.1
6.8.0-1040.46~22.04.1
6.8.0-1041.47~22.04.1
6.8.0-1044.50~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.8-cloud-tools-6.8.0-1051",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.8-headers-6.8.0-1051",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-azure-6.8-tools-6.8.0-1051",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1051-azure",
            "binary_version":  "6.8.0-1051.57~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1019.24.1
5.15.0-1024.30.1
5.15.0-1029.36.1
5.15.0-1030.37.1
5.15.0-1031.38.1
5.15.0-1033.40.1
5.15.0-1034.41.1
5.15.0-1035.42.1
5.15.0-1036.43.1
5.15.0-1037.44.1
5.15.0-1038.45.1
5.15.0-1039.46.1
5.15.0-1041.48.1
5.15.0-1042.49.1
5.15.0-1044.51.1
5.15.0-1045.52.1
5.15.0-1046.53.1
5.15.0-1047.54.1
5.15.0-1049.56.1
5.15.0-1050.57.1
5.15.0-1051.59.1
5.15.0-1052.60.1
5.15.0-1053.61.1
5.15.0-1054.62.1
5.15.0-1056.64.1
5.15.0-1057.65.1
5.15.0-1058.66.1
5.15.0-1059.67.1
5.15.0-1060.69.1
5.15.0-1061.70.1
5.15.0-1063.72.1
5.15.0-1064.73.1
5.15.0-1065.74.1
5.15.0-1067.76.1
5.15.0-1068.77.1
5.15.0-1070.79.1
5.15.0-1071.80.1
5.15.0-1072.81.1
5.15.0-1073.82.1
5.15.0-1076.85.1
5.15.0-1078.87.1
5.15.0-1081.90.1
5.15.0-1082.91.1
5.15.0-1084.93.1
5.15.0-1086.95.1
5.15.0-1087.96.1
5.15.0-1088.97.1
5.15.0-1089.98.1
5.15.0-1090.99.1
5.15.0-1091.100.1
5.15.0-1092.101.1
5.15.0-1094.103.1
5.15.0-1095.104.1
5.15.0-1096.105.1
5.15.0-1097.106.1
5.15.0-1098.107.1
5.15.0-1102.111.1
5.15.0-1109.118.1
5.15.0-1110.119.1
5.15.0-1111.120.1
5.15.0-1114.123
5.15.0-1116.125
5.15.0-1117.126
5.15.0-1118.127
5.15.0-1119.128
5.15.0-1120.129
5.15.0-1121.130
5.15.0-1122.131

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-azure-fde-headers-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-azure-fde-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde-5.19

Package

Name
linux-azure-fde-5.19
Purl
pkg:deb/ubuntu/linux-azure-fde-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1025.28~22.04.1.1
5.19.0-1026.29~22.04.1.1
5.19.0-1027.30~22.04.2.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1027-azure-fde",
            "binary_version":  "5.19.0-1027.30~22.04.2.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde-6.2

Package

Name
linux-azure-fde-6.2
Purl
pkg:deb/ubuntu/linux-azure-fde-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1008.8~22.04.1.1
6.2.0-1009.9~22.04.3.1
6.2.0-1011.11~22.04.1.1
6.2.0-1012.12~22.04.1.1
6.2.0-1014.14~22.04.1.1
6.2.0-1015.15~22.04.1.1
6.2.0-1016.16~22.04.1.1
6.2.0-1017.17~22.04.1.1
6.2.0-1018.18~22.04.1.1
6.2.0-1019.19~22.04.1.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1019-azure-fde",
            "binary_version":  "6.2.0-1019.19~22.04.1.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde-6.8

Package

Name
linux-azure-fde-6.8
Purl
pkg:deb/ubuntu/linux-azure-fde-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.53~22.04.1

Affected versions

6.*
6.8.0-1041.48~22.04.1
6.8.0-1042.49~22.04.1
6.8.0-1044.51~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-6.8-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.8-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-6.8-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1005.6
5.15.0-1001.3
5.15.0-1002.5
5.15.0-1003.6
5.15.0-1004.7
5.15.0-1005.8
5.15.0-1006.9
5.15.0-1008.12
5.15.0-1010.15
5.15.0-1013.18
5.15.0-1016.21
5.15.0-1017.23
5.15.0-1018.24
5.15.0-1019.25
5.15.0-1021.28
5.15.0-1022.29
5.15.0-1025.32
5.15.0-1026.33
5.15.0-1027.34
5.15.0-1029.36
5.15.0-1030.37
5.15.0-1031.38
5.15.0-1032.40
5.15.0-1034.42
5.15.0-1035.43
5.15.0-1036.44
5.15.0-1037.45
5.15.0-1038.46
5.15.0-1039.47
5.15.0-1040.48
5.15.0-1041.49
5.15.0-1042.50
5.15.0-1044.52
5.15.0-1045.53
5.15.0-1046.54
5.15.0-1047.55
5.15.0-1048.56
5.15.0-1049.57
5.15.0-1051.59
5.15.0-1052.60
5.15.0-1053.61
5.15.0-1054.62
5.15.0-1055.63
5.15.0-1058.66
5.15.0-1059.67
5.15.0-1060.68
5.15.0-1062.70
5.15.0-1063.71
5.15.0-1064.72
5.15.0-1065.73
5.15.0-1066.74
5.15.0-1067.75
5.15.0-1068.76
5.15.0-1069.77
5.15.0-1070.78
5.15.0-1071.79
5.15.0-1072.80
5.15.0-1073.81
5.15.0-1074.83
5.15.0-1075.84
5.15.0-1077.86
5.15.0-1078.87
5.15.0-1079.88
5.15.0-1080.89
5.15.0-1081.90
5.15.0-1082.91
5.15.0-1083.92
5.15.0-1084.93
5.15.0-1085.94
5.15.0-1086.95
5.15.0-1087.96
5.15.0-1088.97
5.15.0-1090.99
5.15.0-1091.100
5.15.0-1092.101
5.15.0-1093.102
5.15.0-1095.104
5.15.0-1096.105
5.15.0-1097.106
5.15.0-1098.107
5.15.0-1099.108
5.15.0-1100.109
5.15.0-1101.110
5.15.0-1103.112
5.15.0-1104.113
5.15.0-1105.114
5.15.0-1106.115
5.15.0-1108.117
5.15.0-1109.118
5.15.0-1111.121
5.15.0-1112.122
5.15.0-1114.124
5.15.0-1115.125
5.15.0-1117.127
5.15.0-1118.128

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-gcp-headers-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-gcp-tools-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-5.19

Package

Name
linux-gcp-5.19
Purl
pkg:deb/ubuntu/linux-gcp-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1020.22~22.04.2
5.19.0-1021.23~22.04.1
5.19.0-1022.24~22.04.1
5.19.0-1024.26~22.04.1
5.19.0-1025.27~22.04.1
5.19.0-1026.28~22.04.1
5.19.0-1027.29~22.04.1
5.19.0-1030.32~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.19-headers-5.19.0-1030",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.19-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-gcp",
            "binary_version":  "5.19.0-1030.32~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-6.2

Package

Name
linux-gcp-6.2
Purl
pkg:deb/ubuntu/linux-gcp-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1009.9~22.04.3
6.2.0-1010.10~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1011.11~22.04.3
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1016.18~22.04.1
6.2.0-1017.19~22.04.1
6.2.0-1018.20~22.04.1
6.2.0-1019.21~22.04.1
6.2.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.2-headers-6.2.0-1021",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.2-tools-6.2.0-1021",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1021-gcp",
            "binary_version":  "6.2.0-1021.23~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-6.5

Package

Name
linux-gcp-6.5
Purl
pkg:deb/ubuntu/linux-gcp-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1010.10~22.04.3
6.5.0-1011.11~22.04.1
6.5.0-1013.13~22.04.1
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.1
6.5.0-1018.18~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1022.24~22.04.1
6.5.0-1023.25~22.04.1
6.5.0-1024.26~22.04.1
6.5.0-1025.27~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.5-headers-6.5.0-1025",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.5-tools-6.5.0-1025",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1025-gcp",
            "binary_version":  "6.5.0-1025.27~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-6.8

Package

Name
linux-gcp-6.8
Purl
pkg:deb/ubuntu/linux-gcp-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50~22.04.2

Affected versions

6.*
6.8.0-1010.11~22.04.1
6.8.0-1011.12~22.04.1
6.8.0-1012.13~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.16~22.04.1
6.8.0-1015.17~22.04.1
6.8.0-1016.18~22.04.1
6.8.0-1017.19~22.04.1
6.8.0-1018.20~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1024.26~22.04.1
6.8.0-1025.27~22.04.1
6.8.0-1026.28~22.04.1
6.8.0-1027.29~22.04.1
6.8.0-1028.30~22.04.1
6.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
6.8.0-1033.35~22.04.1
6.8.0-1034.36~22.04.2
6.8.0-1036.38~22.04.1
6.8.0-1037.39~22.04.1
6.8.0-1040.42~22.04.1
6.8.0-1041.43~22.04.1
6.8.0-1042.45~22.04.1
6.8.0-1043.46~22.04.1
6.8.0-1044.47~22.04.1
6.8.0-1045.48~22.04.1
6.8.0-1046.49~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-gcp-6.8-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-gcp-6.8-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50~22.04.2"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.5
5.15.0-1005.6
5.15.0-1006.7
5.15.0-1008.10
5.15.0-1010.13
5.15.0-1011.14
5.15.0-1014.17
5.15.0-1015.18
5.15.0-1016.19
5.15.0-1017.20
5.15.0-1019.23
5.15.0-1020.25
5.15.0-1023.28
5.15.0-1024.29
5.15.0-1027.32
5.15.0-1028.33
5.15.0-1030.35
5.15.0-1031.36
5.15.0-1032.37
5.15.0-1033.38
5.15.0-1034.39
5.15.0-1035.40
5.15.0-1036.41
5.15.0-1037.42
5.15.0-1038.43
5.15.0-1039.44
5.15.0-1040.45
5.15.0-1041.46
5.15.0-1042.47
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1046.51
5.15.0-1047.52
5.15.0-1048.53
5.15.0-1049.54
5.15.0-1050.55
5.15.0-1051.56
5.15.0-1052.57
5.15.0-1053.58
5.15.0-1054.59
5.15.0-1057.62
5.15.0-1058.63
5.15.0-1059.64
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1068.74
5.15.0-1069.75
5.15.0-1070.76
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1075.81
5.15.0-1076.82
5.15.0-1077.83
5.15.0-1078.84
5.15.0-1079.85
5.15.0-1080.86
5.15.0-1081.87
5.15.0-1082.88
5.15.0-1083.89
5.15.0-1084.90
5.15.0-1085.91
5.15.0-1086.92
5.15.0-1087.93
5.15.0-1088.94
5.15.0-1089.95
5.15.0-1090.96
5.15.0-1091.97
5.15.0-1092.98
5.15.0-1093.99
5.15.0-1094.100
5.15.0-1095.101
5.15.0-1096.102
5.15.0-1097.103
5.15.0-1099.105
5.15.0-1100.106
5.15.0-1101.107
5.15.0-1102.108
5.15.0-1104.110
5.15.0-1105.111
5.15.0-1107.113
5.15.0-1108.114
5.15.0-1110.116
5.15.0-1111.117
5.15.0-1112.118
5.15.0-1113.119

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-gke-headers-5.15.0-1113",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-gke-tools-5.15.0-1113",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1113-gke",
            "binary_version":  "5.15.0-1113.119"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1001.2
5.15.0-1002.4
5.15.0-1003.5
5.15.0-1004.6
5.15.0-1005.7
5.15.0-1007.10
5.15.0-1008.12
5.15.0-1011.15
5.15.0-1012.16
5.15.0-1013.17
5.15.0-1015.19
5.15.0-1016.21
5.15.0-1017.22
5.15.0-1018.23
5.15.0-1019.24
5.15.0-1020.25
5.15.0-1021.26
5.15.0-1022.27
5.15.0-1023.28
5.15.0-1024.29
5.15.0-1025.30
5.15.0-1026.31
5.15.0-1027.32
5.15.0-1028.33
5.15.0-1030.35
5.15.0-1031.37
5.15.0-1032.38
5.15.0-1033.39
5.15.0-1034.40
5.15.0-1035.41
5.15.0-1036.42
5.15.0-1037.43
5.15.0-1038.44
5.15.0-1039.45
5.15.0-1040.46
5.15.0-1043.50
5.15.0-1044.51
5.15.0-1045.52
5.15.0-1046.53
5.15.0-1047.54
5.15.0-1048.55
5.15.0-1049.56
5.15.0-1050.57
5.15.0-1051.58
5.15.0-1052.59
5.15.0-1053.60
5.15.0-1054.61
5.15.0-1055.62
5.15.0-1056.63
5.15.0-1057.64
5.15.0-1058.66
5.15.0-1059.67
5.15.0-1060.68
5.15.0-1061.69
5.15.0-1062.70
5.15.0-1063.71
5.15.0-1064.72
5.15.0-1065.73
5.15.0-1066.74
5.15.0-1067.75
5.15.0-1068.76
5.15.0-1069.77
5.15.0-1070.78
5.15.0-1071.79
5.15.0-1073.81
5.15.0-1074.82
5.15.0-1075.83
5.15.0-1076.84
5.15.0-1078.86
5.15.0-1079.87
5.15.0-1080.88
5.15.0-1081.89
5.15.0-1082.90
5.15.0-1083.91
5.15.0-1084.92
5.15.0-1086.94
5.15.0-1087.95
5.15.0-1088.96
5.15.0-1089.97
5.15.0-1091.99
5.15.0-1092.100
5.15.0-1094.102
5.15.0-1095.103
5.15.0-1096.104
5.15.0-1097.105
5.15.0-1098.106
5.15.0-1099.107
5.15.0-1100.108

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-5.15.0-1100",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-gkeop-headers-5.15.0-1100",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-gkeop-tools-5.15.0-1100",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1100-gkeop",
            "binary_version":  "5.15.0-1100.108"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-5.19

Package

Name
linux-hwe-5.19
Purl
pkg:deb/ubuntu/linux-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-28.29~22.04.1
5.19.0-32.33~22.04.1
5.19.0-35.36~22.04.1
5.19.0-38.39~22.04.1
5.19.0-40.41~22.04.1
5.19.0-41.42~22.04.1
5.19.0-42.43~22.04.1
5.19.0-43.44~22.04.1
5.19.0-45.46~22.04.1
5.19.0-46.47~22.04.1
5.19.0-50.50

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-headers-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-cloud-tools-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-cloud-tools-common",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-headers-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-5.19.0-50",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-common",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-hwe-5.19-tools-host",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-source-5.19.0",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic-64k",
            "binary_version":  "5.19.0-50.50"
        },
        {
            "binary_name":  "linux-tools-5.19.0-50-generic-lpae",
            "binary_version":  "5.19.0-50.50"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-6.2

Package

Name
linux-hwe-6.2
Purl
pkg:deb/ubuntu/linux-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-25.25~22.04.2
6.2.0-26.26~22.04.1
6.2.0-31.31~22.04.1
6.2.0-32.32~22.04.1
6.2.0-33.33~22.04.1
6.2.0-34.34~22.04.1
6.2.0-35.35~22.04.1
6.2.0-36.37~22.04.1
6.2.0-37.38~22.04.1
6.2.0-39.40~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-cloud-tools-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-cloud-tools-common",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-headers-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-6.2.0-39",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-common",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.2-tools-host",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-source-6.2.0",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic-64k",
            "binary_version":  "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-39-generic-lpae",
            "binary_version":  "6.2.0-39.40~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-6.5

Package

Name
linux-hwe-6.5
Purl
pkg:deb/ubuntu/linux-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-14.14~22.04.1
6.5.0-15.15~22.04.1
6.5.0-17.17~22.04.1
6.5.0-18.18~22.04.1
6.5.0-21.21~22.04.1
6.5.0-25.25~22.04.1
6.5.0-26.26~22.04.1
6.5.0-27.28~22.04.1
6.5.0-28.29~22.04.1
6.5.0-35.35~22.04.1
6.5.0-41.41~22.04.2
6.5.0-44.44~22.04.1
6.5.0-45.45~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-cloud-tools-common",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-common",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.5-tools-host",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-source-6.5.0",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic-64k",
            "binary_version":  "6.5.0-45.45~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-6.8

Package

Name
linux-hwe-6.8
Purl
pkg:deb/ubuntu/linux-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100~22.04.1

Affected versions

6.*
6.8.0-38.38~22.04.1
6.8.0-39.39~22.04.1
6.8.0-40.40~22.04.3
6.8.0-45.45~22.04.1
6.8.0-47.47~22.04.1
6.8.0-48.48~22.04.1
6.8.0-49.49~22.04.1
6.8.0-50.51~22.04.1
6.8.0-51.52~22.04.1
6.8.0-52.53~22.04.1
6.8.0-57.59~22.04.1
6.8.0-58.60~22.04.1
6.8.0-59.61~22.04.1
6.8.0-60.63~22.04.1
6.8.0-64.67~22.04.1
6.8.0-65.68~22.04.1
6.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
6.8.0-83.83~22.04.1
6.8.0-84.84~22.04.1
6.8.0-85.85~22.04.1
6.8.0-86.87~22.04.1
6.8.0-87.88~22.04.1
6.8.0-88.89~22.04.2
6.8.0-90.91~22.04.1
6.8.0-94.96~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.8-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-ibm

Package

Name
linux-ibm
Purl
pkg:deb/ubuntu/linux-ibm?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1007.8
5.15.0-1009.11
5.15.0-1010.12
5.15.0-1012.14
5.15.0-1013.15
5.15.0-1015.17
5.15.0-1017.20
5.15.0-1018.21
5.15.0-1021.24
5.15.0-1022.25
5.15.0-1023.26
5.15.0-1025.28
5.15.0-1026.29
5.15.0-1027.30
5.15.0-1028.31
5.15.0-1029.32
5.15.0-1030.33
5.15.0-1031.34
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1035.38
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1040.43
5.15.0-1041.44
5.15.0-1042.45
5.15.0-1043.46
5.15.0-1044.47
5.15.0-1045.48
5.15.0-1046.49
5.15.0-1047.50
5.15.0-1048.51
5.15.0-1049.52
5.15.0-1050.53
5.15.0-1053.56
5.15.0-1054.57
5.15.0-1055.58
5.15.0-1056.59
5.15.0-1057.60
5.15.0-1058.61
5.15.0-1059.62
5.15.0-1060.63
5.15.0-1061.64
5.15.0-1062.65
5.15.0-1063.66
5.15.0-1064.67
5.15.0-1065.68
5.15.0-1066.69
5.15.0-1067.70
5.15.0-1068.71
5.15.0-1069.72
5.15.0-1070.73
5.15.0-1071.74
5.15.0-1072.75
5.15.0-1073.76
5.15.0-1074.77
5.15.0-1075.78
5.15.0-1076.79
5.15.0-1077.80
5.15.0-1078.81
5.15.0-1079.82
5.15.0-1080.83
5.15.0-1081.84
5.15.0-1084.87
5.15.0-1085.88
5.15.0-1086.89
5.15.0-1087.90
5.15.0-1089.92
5.15.0-1090.93
5.15.0-1091.94
5.15.0-1092.95
5.15.0-1093.96
5.15.0-1094.97
5.15.0-1095.98
5.15.0-1097.100
5.15.0-1098.101
5.15.0-1099.102
5.15.0-1100.103
5.15.0-1102.105
5.15.0-1103.106
5.15.0-1105.109
5.15.0-1106.110
5.15.0-1107.111
5.15.0-1108.112
5.15.0-1109.113
5.15.0-1110.114
5.15.0-1111.115

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-cloud-tools-common",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-headers-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-source-5.15.0",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-tools-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-ibm-tools-common",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-ibm-6.8

Package

Name
linux-ibm-6.8
Purl
pkg:deb/ubuntu/linux-ibm-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1044.44~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.13~22.04.1
6.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
6.8.0-1016.16~22.04.1
6.8.0-1017.17~22.04.1
6.8.0-1018.18~22.04.1
6.8.0-1019.19~22.04.1
6.8.0-1023.23~22.04.1
6.8.0-1024.24~22.04.1
6.8.0-1025.25~22.04.1
6.8.0-1026.26~22.04.1
6.8.0-1027.27~22.04.1
6.8.0-1028.28~22.04.1
6.8.0-1029.29~22.04.1
6.8.0-1030.30~22.04.1
6.8.0-1033.33~22.04.1
6.8.0-1036.36~22.04.1
6.8.0-1037.37~22.04.1
6.8.0-1038.38~22.04.1
6.8.0-1039.39~22.04.1
6.8.0-1040.40~22.04.1
6.8.0-1041.41~22.04.1
6.8.0-1042.42~22.04.1
6.8.0-1043.43~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-ibm-6.8-headers-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-ibm-6.8-tools-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-intel-iot-realtime

Package

Name
linux-intel-iot-realtime
Purl
pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1073.75

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-common",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-host",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version":  "5.15.0-1073.75"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-intel-iotg

Package

Name
linux-intel-iotg
Purl
pkg:deb/ubuntu/linux-intel-iotg?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1004.6
5.15.0-1008.11
5.15.0-1010.14
5.15.0-1013.17
5.15.0-1015.20
5.15.0-1016.21
5.15.0-1017.22
5.15.0-1018.23
5.15.0-1021.26
5.15.0-1023.28
5.15.0-1025.30
5.15.0-1026.31
5.15.0-1027.32
5.15.0-1028.33
5.15.0-1030.35
5.15.0-1031.36
5.15.0-1033.38
5.15.0-1034.39
5.15.0-1035.40
5.15.0-1036.41
5.15.0-1037.42
5.15.0-1038.43
5.15.0-1039.45
5.15.0-1040.46
5.15.0-1043.49
5.15.0-1045.51
5.15.0-1046.52
5.15.0-1047.53
5.15.0-1048.54
5.15.0-1049.55
5.15.0-1050.56
5.15.0-1051.57
5.15.0-1052.58
5.15.0-1055.61
5.15.0-1057.63
5.15.0-1058.64
5.15.0-1059.65
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1074.80
5.15.0-1075.81
5.15.0-1076.82
5.15.0-1077.83
5.15.0-1078.84
5.15.0-1079.85
5.15.0-1080.86
5.15.0-1081.87
5.15.0-1082.88
5.15.0-1083.89
5.15.0-1084.90
5.15.0-1085.91
5.15.0-1086.92
5.15.0-1087.93
5.15.0-1088.94
5.15.0-1090.96
5.15.0-1091.97
5.15.0-1092.98
5.15.0-1093.99
5.15.0-1094.100
5.15.0-1095.101
5.15.0-1096.102
5.15.0-1098.104
5.15.0-1099.105
5.15.0-1100.106
5.15.0-1101.107
5.15.0-1103.109
5.15.0-1104.110
5.15.0-1106.112
5.15.0-1107.113
5.15.0-1108.114
5.15.0-1109.115
5.15.0-1110.116
5.15.0-1111.117
5.15.0-1112.118

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-cloud-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-cloud-tools-common",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-headers-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-common",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-intel-iotg-tools-host",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-kvm

Package

Name
linux-kvm
Purl
pkg:deb/ubuntu/linux-kvm?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1004.4
5.13.0-1006.6+22.04.1
5.13.0-1007.7+22.04.1
5.13.0-1010.11+22.04.1
5.15.0-1002.2
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1010.11
5.15.0-1012.14
5.15.0-1013.16
5.15.0-1016.19
5.15.0-1017.21
5.15.0-1018.22
5.15.0-1019.23
5.15.0-1020.24
5.15.0-1021.26
5.15.0-1024.29
5.15.0-1025.30
5.15.0-1026.31
5.15.0-1028.33
5.15.0-1029.34
5.15.0-1030.35
5.15.0-1031.36
5.15.0-1032.37
5.15.0-1033.38
5.15.0-1034.39
5.15.0-1035.40
5.15.0-1037.42
5.15.0-1038.43
5.15.0-1039.44
5.15.0-1040.45
5.15.0-1041.46
5.15.0-1042.47
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1046.51
5.15.0-1047.52
5.15.0-1048.53
5.15.0-1049.54
5.15.0-1050.55
5.15.0-1051.56
5.15.0-1052.57
5.15.0-1053.58
5.15.0-1054.59
5.15.0-1057.62
5.15.0-1058.63
5.15.0-1059.64
5.15.0-1060.65
5.15.0-1061.66
5.15.0-1062.67
5.15.0-1063.68
5.15.0-1064.69
5.15.0-1065.70
5.15.0-1066.71
5.15.0-1067.72
5.15.0-1068.73
5.15.0-1069.74
5.15.0-1070.75
5.15.0-1071.76
5.15.0-1072.77
5.15.0-1073.78
5.15.0-1076.81
5.15.0-1077.82
5.15.0-1078.83
5.15.0-1079.84
5.15.0-1080.85
5.15.0-1081.86
5.15.0-1082.87
5.15.0-1083.88
5.15.0-1084.89
5.15.0-1085.90
5.15.0-1086.91
5.15.0-1087.92
5.15.0-1088.93
5.15.0-1089.94
5.15.0-1090.95
5.15.0-1091.96
5.15.0-1092.97
5.15.0-1093.98
5.15.0-1095.100
5.15.0-1096.101
5.15.0-1097.102
5.15.0-1098.103
5.15.0-1100.105
5.15.0-1101.106
5.15.0-1103.108
5.15.0-1104.109
5.15.0-1105.110
5.15.0-1106.111
5.15.0-1107.112
5.15.0-1108.113
5.15.0-1109.114

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-kvm-headers-5.15.0-1109",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-kvm-tools-5.15.0-1109",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1109-kvm",
            "binary_version":  "5.15.0-1109.114"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency

Package

Name
linux-lowlatency
Purl
pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-22.22
5.15.0-23.23
5.15.0-24.24
5.15.0-27.28
5.15.0-30.31
5.15.0-33.34
5.15.0-35.36
5.15.0-37.39
5.15.0-39.42
5.15.0-40.43
5.15.0-41.44
5.15.0-43.46
5.15.0-46.49
5.15.0-47.53
5.15.0-48.54
5.15.0-50.56
5.15.0-52.58
5.15.0-53.59
5.15.0-56.62
5.15.0-57.63
5.15.0-58.64
5.15.0-60.66
5.15.0-67.74
5.15.0-69.76
5.15.0-70.77
5.15.0-71.78
5.15.0-72.79
5.15.0-73.80
5.15.0-75.82
5.15.0-76.83
5.15.0-78.85
5.15.0-79.88
5.15.0-82.91
5.15.0-83.92
5.15.0-84.93
5.15.0-86.95
5.15.0-87.96
5.15.0-88.98
5.15.0-89.99
5.15.0-91.101
5.15.0-92.102
5.15.0-94.104
5.15.0-97.107
5.15.0-100.110
5.15.0-101.111
5.15.0-102.112
5.15.0-105.115
5.15.0-106.116
5.15.0-107.117
5.15.0-110.120
5.15.0-113.123
5.15.0-116.126
5.15.0-117.127
5.15.0-118.128
5.15.0-119.129
5.15.0-121.131
5.15.0-122.132
5.15.0-124.134
5.15.0-125.135
5.15.0-126.136
5.15.0-127.137
5.15.0-128.138
5.15.0-129.139
5.15.0-131.141
5.15.0-133.143
5.15.0-134.145
5.15.0-135.146
5.15.0-136.147
5.15.0-138.148
5.15.0-139.149
5.15.0-140.150
5.15.0-141.151
5.15.0-142.152
5.15.0-143.153
5.15.0-144.157
5.15.0-145.158
5.15.0-152.162
5.15.0-153.163
5.15.0-156.166
5.15.0-157.167
5.15.0-160.170
5.15.0-161.171
5.15.0-163.173
5.15.0-164.174
5.15.0-168.178
5.15.0-170.180
5.15.0-171.181
5.15.0-173.183
5.15.0-174.184
5.15.0-175.185
5.15.0-177.187
5.15.0-178.188
5.15.0-179.189
5.15.0-181.191
5.15.0-183.193
5.15.0-184.194
5.15.0-190.200
5.15.0-191.201
5.15.0-194.204
5.15.0-195.205

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-lowlatency-headers-5.15.0-195",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-lowlatency-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency-hwe-5.19

Package

Name
linux-lowlatency-hwe-5.19
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1017.18~22.04.1
5.19.0-1018.19~22.04.1
5.19.0-1021.22~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1024.25~22.04.1
5.19.0-1025.26~22.04.1
5.19.0-1027.28~22.04.1
5.19.0-1028.29~22.04.1
5.19.0-1030.30

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-buildinfo-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-cloud-tools-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-cloud-tools-common",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-common",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.19-tools-host",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-lowlatency",
            "binary_version":  "5.19.0-1030.30"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1030-lowlatency-64k",
            "binary_version":  "5.19.0-1030.30"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency-hwe-6.2

Package

Name
linux-lowlatency-hwe-6.2
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-cloud-tools-common",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-common",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.2-tools-host",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-lowlatency",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1018-lowlatency-64k",
            "binary_version":  "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency-hwe-6.5

Package

Name
linux-lowlatency-hwe-6.5
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-14.14.1~22.04.1
6.5.0-15.15.1.1~22.04.1
6.5.0-17.17.1.1.1~22.04.1
6.5.0-21.21.1~22.04.1
6.5.0-25.25.1~22.04.1
6.5.0-26.26.1~22.04.1
6.5.0-27.28.1~22.04.1
6.5.0-28.29.1~22.04.1
6.5.0-35.35.1~22.04.1
6.5.0-41.41.1~22.04.1
6.5.0-42.42.1~22.04.1
6.5.0-44.44.1~22.04.1
6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-cloud-tools-common",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-common",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.5-tools-host",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-lowlatency",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-lowlatency-64k",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency-hwe-6.8

Package

Name
linux-lowlatency-hwe-6.8
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100.1~22.04.1

Affected versions

6.*
6.8.0-38.38.1~22.04.2
6.8.0-40.40.1~22.04.1
6.8.0-44.44.1~22.04.1
6.8.0-45.45.1~22.04.1
6.8.0-47.47.1~22.04.1
6.8.0-48.48.3~22.04.1
6.8.0-49.49.1~22.04.1
6.8.0-50.51.1~22.04.1
6.8.0-51.52.1~22.04.1
6.8.0-52.53.1~22.04.1
6.8.0-54.56.1~22.04.1
6.8.0-55.57.1~22.04.1
6.8.0-56.58.1~22.04.1
6.8.0-57.59.1~22.04.1
6.8.0-58.60.1~22.04.1
6.8.0-59.61.1~22.04.1
6.8.0-60.63.1~22.04.1
6.8.0-62.65.1~22.04.1
6.8.0-63.66.1~22.04.1
6.8.0-64.67.1~22.04.1
6.8.0-65.68.1~22.04.1
6.8.0-78.78.1~22.04.1
6.8.0-79.79.1~22.04.1
6.8.0-83.83.1~22.04.1
6.8.0-84.84.1~22.04.1
6.8.0-85.85.1~22.04.1
6.8.0-86.87.1~22.04.1
6.8.0-87.88.1~22.04.1
6.8.0-88.89.1~22.04.1
6.8.0-90.91.1~22.04.1
6.8.0-94.96.1~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.8-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia

Package

Name
linux-nvidia
Purl
pkg:deb/ubuntu/linux-nvidia?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1005.5
5.15.0-1007.7
5.15.0-1010.10
5.15.0-1015.15
5.15.0-1017.17
5.15.0-1018.18
5.15.0-1023.23
5.15.0-1025.25
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1029.29
5.15.0-1030.30
5.15.0-1031.31
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1037.37
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1043.43
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47
5.15.0-1048.48
5.15.0-1053.54
5.15.0-1054.55
5.15.0-1055.56
5.15.0-1058.59
5.15.0-1059.60
5.15.0-1060.61
5.15.0-1061.62
5.15.0-1062.63
5.15.0-1063.64
5.15.0-1064.65
5.15.0-1065.66
5.15.0-1066.67
5.15.0-1067.68
5.15.0-1068.69
5.15.0-1069.70
5.15.0-1070.71
5.15.0-1071.72
5.15.0-1072.73
5.15.0-1073.74
5.15.0-1074.75
5.15.0-1075.76
5.15.0-1076.77
5.15.0-1077.78
5.15.0-1078.79
5.15.0-1079.80
5.15.0-1080.81
5.15.0-1081.82
5.15.0-1082.83
5.15.0-1083.84
5.15.0-1085.86
5.15.0-1086.87
5.15.0-1087.88
5.15.0-1088.89
5.15.0-1090.91
5.15.0-1091.92
5.15.0-1092.93
5.15.0-1093.94
5.15.0-1094.95
5.15.0-1095.96
5.15.0-1096.97
5.15.0-1098.99
5.15.0-1099.100
5.15.0-1100.101
5.15.0-1101.102
5.15.0-1103.104
5.15.0-1104.105
5.15.0-1106.107
5.15.0-1107.108
5.15.0-1108.109
5.15.0-1109.110
5.15.0-1110.111
5.15.0-1111.112
5.15.0-1112.113

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-cloud-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-cloud-tools-common",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-headers-5.15.0-1112",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-tools-common",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-nvidia-tools-host",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-nvidia",
            "binary_version":  "5.15.0-1112.113"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version":  "5.15.0-1112.113"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-6.2

Package

Name
linux-nvidia-6.2
Purl
pkg:deb/ubuntu/linux-nvidia-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1003.3~22.04.1
6.2.0-1009.9
6.2.0-1010.10
6.2.0-1011.11
6.2.0-1012.12
6.2.0-1013.13
6.2.0-1015.15

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-buildinfo-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-image-unsigned-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-headers-6.2.0-1015",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-tools-6.2.0-1015",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-nvidia-6.2-tools-host",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1015-nvidia",
            "binary_version":  "6.2.0-1015.15"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1015-nvidia-64k",
            "binary_version":  "6.2.0-1015.15"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-6.5

Package

Name
linux-nvidia-6.5
Purl
pkg:deb/ubuntu/linux-nvidia-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1004.4
6.5.0-1007.7
6.5.0-1013.13
6.5.0-1014.14
6.5.0-1015.15
6.5.0-1018.18
6.5.0-1019.19
6.5.0-1021.22
6.5.0-1022.23
6.5.0-1023.24
6.5.0-1024.25

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-headers-6.5.0-1024",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-tools-6.5.0-1024",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-nvidia-6.5-tools-host",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-nvidia",
            "binary_version":  "6.5.0-1024.25"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1024-nvidia-64k",
            "binary_version":  "6.5.0-1024.25"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-6.8

Package

Name
linux-nvidia-6.8
Purl
pkg:deb/ubuntu/linux-nvidia-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.15~22.04.1
6.8.0-1015.16~22.04.1
6.8.0-1017.19~22.04.1
6.8.0-1018.20~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1022.25~22.04.2
6.8.0-1023.26~22.04.1
6.8.0-1024.27~22.04.1
6.8.0-1025.28~22.04.1
6.8.0-1026.29~22.04.1
6.8.0-1027.30~22.04.1
6.8.0-1028.31~22.04.1
6.8.0-1029.32~22.04.1
6.8.0-1030.33~22.04.1
6.8.0-1031.34~22.04.1
6.8.0-1032.35~22.04.1
6.8.0-1035.38~22.04.1
6.8.0-1036.39~22.04.1
6.8.0-1038.41~22.04.1
6.8.0-1039.42~22.04.1
6.8.0-1040.43~22.04.1
6.8.0-1041.44~22.04.2
6.8.0-1042.45~22.04.1
6.8.0-1043.46~22.04.1
6.8.0-1044.47~22.04.1
6.8.0-1045.48~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-nvidia-6.8-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-nvidia-6.8-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-tegra

Package

Name
linux-nvidia-tegra
Purl
pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1009.9
5.15.0-1010.10
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1014.14
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1017.17
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1025.25
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1030.30
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36
5.15.0-1037.37
5.15.0-1038.38
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1043.43
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47
5.15.0-1048.48
5.15.0-1049.49
5.15.0-1050.50
5.15.0-1051.51
5.15.0-1052.52
5.15.0-1053.53
5.15.0-1055.55
5.15.0-1056.56
5.15.0-1057.57
5.15.0-1058.58
5.15.0-1060.60
5.15.0-1061.61
5.15.0-1063.63
5.15.0-1064.66
5.15.0-1065.67
5.15.0-1066.68
5.15.0-1067.69
5.15.0-1068.70

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-nvidia-tegra-headers-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-nvidia-tegra-tools-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-tegra-igx

Package

Name
linux-nvidia-tegra-igx
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-igx?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1001.1
5.15.0-1002.2
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1009.9
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1023.23
5.15.0-1024.24
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1029.29
5.15.0-1030.30
5.15.0-1031.31
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36
5.15.0-1037.37
5.15.0-1038.38
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47
5.15.0-1049.49
5.15.0-1050.50
5.15.0-1052.52
5.15.0-1053.53
5.15.0-1054.54
5.15.0-1055.55
5.15.0-1056.56
5.15.0-1057.57

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-nvidia-tegra-igx-headers-5.15.0-1057",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-nvidia-tegra-igx-tools-5.15.0-1057",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1057-nvidia-tegra-igx",
            "binary_version":  "5.15.0-1057.57"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version":  "5.15.0-1057.57"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-5.17

Package

Name
linux-oem-5.17
Purl
pkg:deb/ubuntu/linux-oem-5.17?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.17.0-1003.3
5.17.0-1004.4
5.17.0-1006.6
5.17.0-1011.12
5.17.0-1012.13
5.17.0-1013.14
5.17.0-1014.15
5.17.0-1015.16
5.17.0-1016.17
5.17.0-1017.18
5.17.0-1018.19
5.17.0-1019.20
5.17.0-1020.21
5.17.0-1021.22
5.17.0-1024.25
5.17.0-1025.26
5.17.0-1026.27
5.17.0-1027.28
5.17.0-1028.29
5.17.0-1029.30
5.17.0-1030.31
5.17.0-1031.32
5.17.0-1032.33
5.17.0-1033.34
5.17.0-1034.35
5.17.0-1035.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-headers-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-image-unsigned-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-ipu6-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-ivsc-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-headers-5.17.0-1035",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-5.17.0-1035",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-oem-5.17-tools-host",
            "binary_version":  "5.17.0-1035.36"
        },
        {
            "binary_name":  "linux-tools-5.17.0-1035-oem",
            "binary_version":  "5.17.0-1035.36"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-6.0

Package

Name
linux-oem-6.0
Purl
pkg:deb/ubuntu/linux-oem-6.0?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.0.0-1006.6
6.0.0-1007.7
6.0.0-1008.8
6.0.0-1009.9
6.0.0-1010.10
6.0.0-1011.11
6.0.0-1012.12
6.0.0-1013.13
6.0.0-1014.14
6.0.0-1015.15
6.0.0-1016.16
6.0.0-1017.17
6.0.0-1018.18
6.0.0-1019.19
6.0.0-1020.20
6.0.0-1021.21

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-headers-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-image-unsigned-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-headers-6.0.0-1021",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-tools-6.0.0-1021",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-oem-6.0-tools-host",
            "binary_version":  "6.0.0-1021.21"
        },
        {
            "binary_name":  "linux-tools-6.0.0-1021-oem",
            "binary_version":  "6.0.0-1021.21"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-6.1

Package

Name
linux-oem-6.1
Purl
pkg:deb/ubuntu/linux-oem-6.1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.1.0-1004.4
6.1.0-1006.6
6.1.0-1007.7
6.1.0-1008.8
6.1.0-1009.9
6.1.0-1010.10
6.1.0-1012.12
6.1.0-1013.13
6.1.0-1014.14
6.1.0-1015.15
6.1.0-1016.16
6.1.0-1017.17
6.1.0-1019.19
6.1.0-1020.20
6.1.0-1021.21
6.1.0-1022.22
6.1.0-1023.23
6.1.0-1024.24
6.1.0-1025.25
6.1.0-1026.26
6.1.0-1027.27
6.1.0-1028.28
6.1.0-1029.29
6.1.0-1033.33
6.1.0-1034.34
6.1.0-1035.35
6.1.0-1036.36

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-headers-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-image-unsigned-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-headers-6.1.0-1036",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-tools-6.1.0-1036",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-oem-6.1-tools-host",
            "binary_version":  "6.1.0-1036.36"
        },
        {
            "binary_name":  "linux-tools-6.1.0-1036-oem",
            "binary_version":  "6.1.0-1036.36"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-6.5

Package

Name
linux-oem-6.5
Purl
pkg:deb/ubuntu/linux-oem-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1003.3
6.5.0-1004.4
6.5.0-1006.6
6.5.0-1007.7
6.5.0-1008.8
6.5.0-1009.10
6.5.0-1011.12
6.5.0-1013.14
6.5.0-1014.15
6.5.0-1015.16
6.5.0-1016.17
6.5.0-1018.19
6.5.0-1019.20
6.5.0-1020.21
6.5.0-1022.23
6.5.0-1023.24
6.5.0-1024.25
6.5.0-1025.26
6.5.0-1027.28

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-ivsc-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-modules-usbio-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-headers-6.5.0-1027",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-tools-6.5.0-1027",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-oem-6.5-tools-host",
            "binary_version":  "6.5.0-1027.28"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oem",
            "binary_version":  "6.5.0-1027.28"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle

Package

Name
linux-oracle
Purl
pkg:deb/ubuntu/linux-oracle?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.10
5.15.0-1001.3
5.15.0-1002.4
5.15.0-1003.5
5.15.0-1006.8
5.15.0-1007.9
5.15.0-1009.12
5.15.0-1011.15
5.15.0-1013.17
5.15.0-1016.20
5.15.0-1017.22
5.15.0-1018.23
5.15.0-1019.24
5.15.0-1021.27
5.15.0-1022.28
5.15.0-1025.31
5.15.0-1026.32
5.15.0-1027.33
5.15.0-1029.35
5.15.0-1030.36
5.15.0-1032.38
5.15.0-1033.39
5.15.0-1034.40
5.15.0-1035.41
5.15.0-1036.42
5.15.0-1037.43
5.15.0-1038.44
5.15.0-1039.45
5.15.0-1040.46
5.15.0-1041.47
5.15.0-1042.48
5.15.0-1044.50
5.15.0-1045.51
5.15.0-1046.52
5.15.0-1047.53
5.15.0-1048.54
5.15.0-1049.55
5.15.0-1050.56
5.15.0-1051.57
5.15.0-1052.58
5.15.0-1053.59
5.15.0-1054.60
5.15.0-1055.61
5.15.0-1058.64
5.15.0-1059.65
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1068.74
5.15.0-1069.75
5.15.0-1070.76
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1074.80
5.15.0-1075.81
5.15.0-1076.82
5.15.0-1077.83
5.15.0-1078.84
5.15.0-1079.85
5.15.0-1080.86
5.15.0-1081.87
5.15.0-1082.88
5.15.0-1083.89
5.15.0-1084.90
5.15.0-1085.91
5.15.0-1086.92
5.15.0-1088.94
5.15.0-1089.95
5.15.0-1090.96
5.15.0-1091.97
5.15.0-1092.98
5.15.0-1093.99
5.15.0-1094.100
5.15.0-1095.101
5.15.0-1096.102
5.15.0-1097.103
5.15.0-1098.104
5.15.0-1100.106
5.15.0-1101.107
5.15.0-1102.108
5.15.0-1103.109
5.15.0-1105.111
5.15.0-1106.112
5.15.0-1108.114
5.15.0-1109.115
5.15.0-1110.116
5.15.0-1111.117
5.15.0-1112.118
5.15.0-1113.119
5.15.0-1114.120

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-oracle-headers-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-oracle-tools-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-6.5

Package

Name
linux-oracle-6.5
Purl
pkg:deb/ubuntu/linux-oracle-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1013.13~22.04.4
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1018.18~22.04.1
6.5.0-1019.19~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1021.21~22.04.1
6.5.0-1023.23~22.04.1
6.5.0-1024.24~22.04.1
6.5.0-1025.25~22.04.1
6.5.0-1026.26~22.04.1
6.5.0-1027.27~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.5-headers-6.5.0-1027",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.5-tools-6.5.0-1027",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oracle",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1027-oracle-64k",
            "binary_version":  "6.5.0-1027.27~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-6.8

Package

Name
linux-oracle-6.8
Purl
pkg:deb/ubuntu/linux-oracle-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.44~22.04.1

Affected versions

6.*
6.8.0-1006.6~22.04.3
6.8.0-1008.8~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.13~22.04.1
6.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
6.8.0-1016.17~22.04.1
6.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
6.8.0-1019.20~22.04.1
6.8.0-1020.21~22.04.1
6.8.0-1021.22~22.04.1
6.8.0-1022.23~22.04.1
6.8.0-1023.24~22.04.1
6.8.0-1024.25~22.04.1
6.8.0-1025.26~22.04.1
6.8.0-1026.27~22.04.1
6.8.0-1027.28~22.04.1
6.8.0-1028.29~22.04.1
6.8.0-1029.30~22.04.1
6.8.0-1030.31~22.04.1
6.8.0-1032.33~22.04.1
6.8.0-1033.34~22.04.1
6.8.0-1035.36~22.04.1
6.8.0-1037.38~22.04.1
6.8.0-1038.39~22.04.1
6.8.0-1039.40~22.04.1
6.8.0-1040.41~22.04.1
6.8.0-1041.42~22.04.1
6.8.0-1042.43~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.8-headers-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.8-tools-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1008.8
5.15.0-1011.13
5.15.0-1012.14
5.15.0-1013.15
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.20
5.15.0-1021.23
5.15.0-1022.24
5.15.0-1023.25
5.15.0-1024.26
5.15.0-1025.27
5.15.0-1026.28
5.15.0-1027.29
5.15.0-1028.30
5.15.0-1029.31
5.15.0-1030.32
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1035.38
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1040.43
5.15.0-1041.44
5.15.0-1042.45
5.15.0-1043.46
5.15.0-1044.47
5.15.0-1045.48
5.15.0-1046.49
5.15.0-1047.50
5.15.0-1048.51
5.15.0-1049.52
5.15.0-1050.53
5.15.0-1053.56
5.15.0-1054.57
5.15.0-1055.58
5.15.0-1058.61
5.15.0-1059.62
5.15.0-1060.63
5.15.0-1061.64
5.15.0-1062.65
5.15.0-1063.66
5.15.0-1064.67
5.15.0-1065.68
5.15.0-1066.69
5.15.0-1067.70
5.15.0-1070.73
5.15.0-1071.74
5.15.0-1072.75
5.15.0-1073.76
5.15.0-1074.77
5.15.0-1075.78
5.15.0-1076.79
5.15.0-1077.80
5.15.0-1078.81
5.15.0-1079.82
5.15.0-1080.83
5.15.0-1083.86
5.15.0-1084.87
5.15.0-1085.88
5.15.0-1086.89
5.15.0-1087.90
5.15.0-1089.92
5.15.0-1090.93
5.15.0-1091.94
5.15.0-1092.95
5.15.0-1093.96
5.15.0-1097.100
5.15.0-1098.101
5.15.0-1099.102
5.15.0-1100.103
5.15.0-1102.105
5.15.0-1103.106
5.15.0-1105.108
5.15.0-1106.109
5.15.0-1108.111
5.15.0-1110.113

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-image-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-raspi-headers-5.15.0-1110",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-raspi-tools-5.15.0-1110",
            "binary_version":  "5.15.0-1110.113"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1110-raspi",
            "binary_version":  "5.15.0-1110.113"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1032.35

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1032",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1032.35"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1032-realtime",
            "binary_version":  "5.15.0-1032.35"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1004.4
5.13.0-1006.6+22.04.1
5.13.0-1007.7+22.04.1
5.13.0-1010.11+22.04.1
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1011.12
5.15.0-1012.13
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.21
5.15.0-1019.22
5.15.0-1020.23
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1026.30
5.15.0-1027.31
5.15.0-1028.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-image-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-headers-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-riscv-tools-5.15.0-1028",
            "binary_version":  "5.15.0-1028.32"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1028-generic",
            "binary_version":  "5.15.0-1028.32"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-5.19

Package

Name
linux-riscv-5.19
Purl
pkg:deb/ubuntu/linux-riscv-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1012.13~22.04.1
5.19.0-1015.16~22.04.1
5.19.0-1016.17~22.04.1
5.19.0-1017.18~22.04.1
5.19.0-1018.19~22.04.1
5.19.0-1019.21~22.04.1
5.19.0-1020.22~22.04.1
5.19.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.19-headers-5.19.0-1021",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.19-tools-5.19.0-1021",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1021-generic",
            "binary_version":  "5.19.0-1021.23~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-6.5

Package

Name
linux-riscv-6.5
Purl
pkg:deb/ubuntu/linux-riscv-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-17.17.1.1~22.04.1
6.5.0-21.21.1~22.04.1
6.5.0-25.25.1~22.04.1
6.5.0-26.26.1~22.04.1
6.5.0-27.28.1~22.04.1
6.5.0-28.29.1~22.04.1
6.5.0-35.35.1~22.04.1
6.5.0-40.40.1~22.04.1
6.5.0-42.42.1~22.04.1
6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.5-headers-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.5-tools-6.5.0-45",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-45-generic",
            "binary_version":  "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-6.8

Package

Name
linux-riscv-6.8
Purl
pkg:deb/ubuntu/linux-riscv-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100~22.04.1

Affected versions

6.*
6.8.0-38.38.1~22.04.1
6.8.0-39.39.1~22.04.1
6.8.0-40.40.1~22.04.1
6.8.0-41.41.1~22.04.1
6.8.0-44.44.1~22.04.1
6.8.0-47.47.1~22.04.1
6.8.0-48.48.1~22.04.2
6.8.0-49.49.1~22.04.1
6.8.0-50.51.1~22.04.1
6.8.0-51.52.1~22.04.1
6.8.0-52.53.1~22.04.1
6.8.0-53.55.1~22.04.1
6.8.0-55.57.1~22.04.1
6.8.0-56.58.1~22.04.1
6.8.0-57.59.1~22.04.1
6.8.0-58.60.1~22.04.1
6.8.0-59.61.1~22.04.1
6.8.0-62.65~22.04.1
6.8.0-63.66~22.04.1
6.8.0-64.67~22.04.1
6.8.0-71.71~22.04.1
6.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
6.8.0-83.83~22.04.1
6.8.0-84.84~22.04.1
6.8.0-86.87~22.04.1
6.8.0-87.88~22.04.1
6.8.0-88.89~22.04.1
6.8.0-90.91~22.04.1
6.8.0-94.96~22.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.8-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.8-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-starfive-5.19

Package

Name
linux-starfive-5.19
Purl
pkg:deb/ubuntu/linux-starfive-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1014.16~22.04.1
5.19.0-1015.17~22.04.1
5.19.0-1016.18~22.04.1
5.19.0-1017.19~22.04.1
5.19.0-1018.20~22.04.1
5.19.0-1019.21~22.04.1
5.19.0-1020.22~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-headers-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-image-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-modules-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-5.19-headers-5.19.0-1020",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-5.19-tools-5.19.0-1020",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name":  "linux-tools-5.19.0-1020-starfive",
            "binary_version":  "5.19.0-1020.22~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-starfive-6.2

Package

Name
linux-starfive-6.2
Purl
pkg:deb/ubuntu/linux-starfive-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1006.7~22.04.1
6.2.0-1007.8~22.04.1
6.2.0-1009.10~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.2-headers-6.2.0-1009",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.2-tools-6.2.0-1009",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.2.0-1009-starfive",
            "binary_version":  "6.2.0-1009.10~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-starfive-6.5

Package

Name
linux-starfive-6.5
Purl
pkg:deb/ubuntu/linux-starfive-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1007.8~22.04.1
6.5.0-1008.9~22.04.1
6.5.0-1009.10~22.04.1
6.5.0-1010.11~22.04.1
6.5.0-1011.12~22.04.1
6.5.0-1012.13~22.04.1
6.5.0-1014.15~22.04.1
6.5.0-1015.16~22.04.1
6.5.0-1016.17~22.04.1
6.5.0-1017.18~22.04.1
6.5.0-1018.19~22.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-image-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.5-headers-6.5.0-1018",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-starfive-6.5-tools-6.5.0-1018",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.5.0-1018-starfive",
            "binary_version":  "6.5.0-1018.19~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-xilinx-zynqmp

Package

Name
linux-xilinx-zynqmp
Purl
pkg:deb/ubuntu/linux-xilinx-zynqmp?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1025.29
5.15.0-1027.31
5.15.0-1030.34
5.15.0-1031.35
5.15.0-1035.39
5.15.0-1036.40
5.15.0-1037.41
5.15.0-1038.42
5.15.0-1039.43
5.15.0-1041.45
5.15.0-1044.48
5.15.0-1046.50
5.15.0-1050.54
5.15.0-1051.55
5.15.0-1052.56
5.15.0-1053.57
5.15.0-1054.58
5.15.0-1055.59
5.15.0-1056.60
5.15.0-1057.61
5.15.0-1059.63
5.15.0-1060.64
5.15.0-1061.65
5.15.0-1062.66
5.15.0-1063.67
5.15.0-1064.68
5.15.0-1065.69
5.15.0-1067.71
5.15.0-1068.72
5.15.0-1069.73
5.15.0-1070.74
5.15.0-1074.78
5.15.0-1075.79
5.15.0-1076.80
5.15.0-1077.81
5.15.0-1078.82
5.15.0-1079.83
5.15.0-1080.84

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-image-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1080-xilinx-zynqmp",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-xilinx-zynqmp-headers-5.15.0-1080",
            "binary_version":  "5.15.0-1080.84"
        },
        {
            "binary_name":  "linux-xilinx-zynqmp-tools-5.15.0-1080",
            "binary_version":  "5.15.0-1080.84"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:24.04:LTS
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100

Affected versions

6.*
6.5.0-9.9
6.6.0-14.14
6.8.0-11.11
6.8.0-20.20
6.8.0-22.22
6.8.0-28.28
6.8.0-31.31
6.8.0-35.35
6.8.0-36.36
6.8.0-38.38
6.8.0-39.39
6.8.0-40.40
6.8.0-41.41
6.8.0-44.44
6.8.0-45.45
6.8.0-47.47
6.8.0-48.48
6.8.0-49.49
6.8.0-50.51
6.8.0-51.52
6.8.0-52.53
6.8.0-53.55
6.8.0-54.56
6.8.0-55.57
6.8.0-56.58
6.8.0-57.59
6.8.0-58.60
6.8.0-59.61
6.8.0-60.63
6.8.0-62.65
6.8.0-63.66
6.8.0-64.67
6.8.0-71.71
6.8.0-78.78
6.8.0-79.79
6.8.0-83.83
6.8.0-84.84
6.8.0-85.85
6.8.0-86.87
6.8.0-87.88
6.8.0-88.89
6.8.0-90.91
6.8.0-94.96

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-cloud-tools-common",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-lib-rust-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-source-6.8.0",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-generic-64k",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-common",
            "binary_version":  "6.8.0-100.100"
        },
        {
            "binary_name":  "linux-tools-host",
            "binary_version":  "6.8.0-100.100"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49

Affected versions

6.*
6.5.0-1008.8
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1006.6
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1016.17
6.8.0-1017.18
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1023.25
6.8.0-1024.26
6.8.0-1025.27
6.8.0-1026.28
6.8.0-1027.29
6.8.0-1028.30
6.8.0-1029.31
6.8.0-1030.32
6.8.0-1031.33
6.8.0-1032.34
6.8.0-1033.35
6.8.0-1035.37
6.8.0-1036.38
6.8.0-1038.40
6.8.0-1039.41
6.8.0-1040.42
6.8.0-1041.43
6.8.0-1042.44
6.8.0-1043.45
6.8.0-1044.46
6.8.0-1045.47

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-aws-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-aws-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws-64k",
            "binary_version":  "6.8.0-1046.49"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-aws-6.14

Package

Name
linux-aws-6.14
Purl
pkg:deb/ubuntu/linux-aws-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1015.15~24.04.1

Affected versions

6.*
6.14.0-1007.7~24.04.1
6.14.0-1009.9~24.04.1
6.14.0-1010.10~24.04.1
6.14.0-1011.11~24.04.1
6.14.0-1012.12~24.04.1
6.14.0-1013.13~24.04.1
6.14.0-1014.14~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-aws-6.14-cloud-tools-6.14.0-1015",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.14-headers-6.14.0-1015",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-aws-6.14-tools-6.14.0-1015",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1015-aws",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1015-aws-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.52

Affected versions

6.*
6.5.0-1007.7
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1012.14
6.8.0-1013.15
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.20
6.8.0-1018.21
6.8.0-1020.23
6.8.0-1021.25
6.8.0-1025.30
6.8.0-1026.31
6.8.0-1027.32
6.8.0-1028.33
6.8.0-1029.34
6.8.0-1030.35
6.8.0-1031.36
6.8.0-1034.39
6.8.0-1038.44
6.8.0-1040.46
6.8.0-1041.47
6.8.0-1042.48
6.8.0-1044.50

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-azure-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-azure-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure",
            "binary_version":  "6.8.0-1046.52"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-6.11

Package

Name
linux-azure-6.11
Purl
pkg:deb/ubuntu/linux-azure-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1008.8~24.04.1
6.11.0-1012.12~24.04.1
6.11.0-1013.13~24.04.1
6.11.0-1014.14~24.04.1
6.11.0-1015.15~24.04.1
6.11.0-1017.17~24.04.1
6.11.0-1018.18~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.11-cloud-tools-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.11-headers-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.11-tools-6.11.0-1018",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1018-azure",
            "binary_version":  "6.11.0-1018.18~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-6.14

Package

Name
linux-azure-6.14
Purl
pkg:deb/ubuntu/linux-azure-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1014.14~24.04.1

Affected versions

6.*
6.14.0-1010.10~24.04.1
6.14.0-1012.12~24.04.1
6.14.0-1013.13~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-6.14-cloud-tools-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.14-headers-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-azure-6.14-tools-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1014-azure",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.53

Affected versions

6.*
6.8.0-1041.48
6.8.0-1044.51

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-azure-fde-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-azure-fde-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure-fde",
            "binary_version":  "6.8.0-1046.53"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-nvidia

Package

Name
linux-azure-nvidia
Purl
pkg:deb/ubuntu/linux-azure-nvidia?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1016.17
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1022.23
6.8.0-1025.27
6.8.0-1027.30
6.8.0-1029.32
6.8.0-1039.42

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-nvidia-cloud-tools-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-azure-nvidia-headers-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-azure-nvidia-tools-6.8.0-1039",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1039-azure-nvidia",
            "binary_version":  "6.8.0-1039.42"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-nvidia-6.14

Package

Name
linux-azure-nvidia-6.14
Purl
pkg:deb/ubuntu/linux-azure-nvidia-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1007.7

Affected versions

6.*
6.14.0-1003.3
6.14.0-1006.6

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-azure-nvidia-6.14-cloud-tools-6.14.0-1007",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-azure-nvidia-6.14-headers-6.14.0-1007",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-azure-nvidia-6.14-tools-6.14.0-1007",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1007-azure-nvidia",
            "binary_version":  "6.14.0-1007.7"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50

Affected versions

6.*
6.5.0-1007.7
6.6.0-1001.1
6.8.0-1002.2
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.9
6.8.0-1009.10
6.8.0-1010.11
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1024.26
6.8.0-1025.27
6.8.0-1026.28
6.8.0-1027.29
6.8.0-1028.30
6.8.0-1029.31
6.8.0-1030.32
6.8.0-1031.33
6.8.0-1032.34
6.8.0-1033.35
6.8.0-1034.36
6.8.0-1036.38
6.8.0-1037.39
6.8.0-1039.41
6.8.0-1040.42
6.8.0-1041.43
6.8.0-1042.45
6.8.0-1043.46
6.8.0-1044.47
6.8.0-1045.48
6.8.0-1046.49

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-gcp-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-gcp-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp",
            "binary_version":  "6.8.0-1047.50"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version":  "6.8.0-1047.50"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-6.11

Package

Name
linux-gcp-6.11
Purl
pkg:deb/ubuntu/linux-gcp-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1006.6~24.04.2
6.11.0-1011.11~24.04.1
6.11.0-1013.13~24.04.1
6.11.0-1014.14~24.04.1
6.11.0-1015.15~24.04.1
6.11.0-1016.16~24.04.1
6.11.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-headers-6.11.0-1017",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-lib-rust-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.11-tools-6.11.0-1017",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1017-gcp",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1017-gcp-64k",
            "binary_version":  "6.11.0-1017.17~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-6.14

Package

Name
linux-gcp-6.14
Purl
pkg:deb/ubuntu/linux-gcp-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1018.19~24.04.1

Affected versions

6.*
6.14.0-1007.7~24.04.1
6.14.0-1011.11~24.04.1
6.14.0-1012.12~24.04.1
6.14.0-1014.15~24.04.1
6.14.0-1015.16~24.04.1
6.14.0-1016.17~24.04.1
6.14.0-1017.18~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1018-gcp-64k",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.14-headers-6.14.0-1018",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-gcp-6.14-tools-6.14.0-1018",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1018-gcp-64k",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1018-gcp-64k",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-lib-rust-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1018-gcp-64k",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1018-gcp-64k",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1018-gcp",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1018-gcp-64k",
            "binary_version":  "6.14.0-1018.19~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.48

Affected versions

6.*
6.8.0-1003.5
6.8.0-1004.7
6.8.0-1005.8
6.8.0-1006.9
6.8.0-1007.10
6.8.0-1008.11
6.8.0-1009.12
6.8.0-1010.13
6.8.0-1011.14
6.8.0-1012.15
6.8.0-1013.17
6.8.0-1014.18
6.8.0-1015.19
6.8.0-1016.20
6.8.0-1017.21
6.8.0-1019.23
6.8.0-1020.24
6.8.0-1021.25
6.8.0-1022.26
6.8.0-1023.27
6.8.0-1024.28
6.8.0-1025.29
6.8.0-1026.30
6.8.0-1027.31
6.8.0-1028.32
6.8.0-1029.33
6.8.0-1032.36
6.8.0-1033.37
6.8.0-1035.39
6.8.0-1036.40
6.8.0-1037.41
6.8.0-1038.43
6.8.0-1039.44
6.8.0-1040.45
6.8.0-1041.46
6.8.0-1042.47

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-gke-headers-6.8.0-1043",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-gke-tools-6.8.0-1043",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-gke",
            "binary_version":  "6.8.0-1043.48"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-gke-64k",
            "binary_version":  "6.8.0-1043.48"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1030.33

Affected versions

6.*
6.8.0-1001.3
6.8.0-1002.4
6.8.0-1003.5
6.8.0-1004.6
6.8.0-1006.8
6.8.0-1007.9
6.8.0-1008.10
6.8.0-1009.11
6.8.0-1010.12
6.8.0-1011.13
6.8.0-1012.14
6.8.0-1013.15
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1022.24
6.8.0-1023.25
6.8.0-1024.26
6.8.0-1025.28
6.8.0-1026.29
6.8.0-1027.30
6.8.0-1028.31
6.8.0-1029.32

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-gkeop-cloud-tools-6.8.0-1030",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-gkeop-headers-6.8.0-1030",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-gkeop-tools-6.8.0-1030",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1030-gkeop",
            "binary_version":  "6.8.0-1030.33"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-6.11

Package

Name
linux-hwe-6.11
Purl
pkg:deb/ubuntu/linux-hwe-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-17.17~24.04.2
6.11.0-19.19~24.04.1
6.11.0-21.21~24.04.1
6.11.0-24.24~24.04.1
6.11.0-25.25~24.04.1
6.11.0-26.26~24.04.1
6.11.0-28.28~24.04.1
6.11.0-29.29~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-cloud-tools-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-headers-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-lib-rust-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-hwe-6.11-tools-6.11.0-29",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-modules-vision-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-29-generic",
            "binary_version":  "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-29-generic-64k",
            "binary_version":  "6.11.0-29.29~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-ibm

Package

Name
linux-ibm
Purl
pkg:deb/ubuntu/linux-ibm?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1044.44

Affected versions

6.*
6.5.0-1009.9
6.8.0-1001.1
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1015.15
6.8.0-1016.16
6.8.0-1017.17
6.8.0-1018.18
6.8.0-1019.19
6.8.0-1022.22
6.8.0-1023.23
6.8.0-1024.24
6.8.0-1025.25
6.8.0-1026.26
6.8.0-1027.27
6.8.0-1028.28
6.8.0-1029.29
6.8.0-1030.30
6.8.0-1033.33
6.8.0-1036.36
6.8.0-1037.37
6.8.0-1038.38
6.8.0-1039.39
6.8.0-1040.40
6.8.0-1041.41
6.8.0-1042.42
6.8.0-1043.43

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-ibm-headers-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-ibm-tools-6.8.0-1044",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1044-ibm",
            "binary_version":  "6.8.0-1044.44"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-intel

Package

Name
linux-intel
Purl
pkg:deb/ubuntu/linux-intel?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1005.12
6.8.0-1006.13
6.8.0-1007.14

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-intel-cloud-tools-6.8.0-1007",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-intel-headers-6.8.0-1007",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-intel-tools-6.8.0-1007",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1007-intel",
            "binary_version":  "6.8.0-1007.14"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency

Package

Name
linux-lowlatency
Purl
pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100.1

Affected versions

6.*
6.5.0-9.9.1
6.6.0-14.14.1
6.8.0-7.7.1
6.8.0-25.25.3
6.8.0-28.28.1
6.8.0-31.31.1
6.8.0-35.35.1
6.8.0-36.36.1
6.8.0-38.38.1
6.8.0-39.39.1
6.8.0-40.40.1
6.8.0-41.41.1
6.8.0-44.44.1
6.8.0-45.45.1
6.8.0-47.47.1
6.8.0-48.48.3
6.8.0-49.49.1
6.8.0-50.51.1
6.8.0-51.52.1
6.8.0-52.53.1
6.8.0-53.55.2
6.8.0-54.56.1
6.8.0-55.57.1
6.8.0-56.58.1
6.8.0-57.59.1
6.8.0-58.60.1
6.8.0-59.61.1
6.8.0-60.63.1
6.8.0-62.65.1
6.8.0-63.66.1
6.8.0-64.67.1
6.8.0-65.68.1
6.8.0-78.78.1
6.8.0-79.79.1
6.8.0-83.83.1
6.8.0-84.84.1
6.8.0-85.85.1
6.8.0-86.87.1
6.8.0-87.88.1
6.8.0-88.89.1
6.8.0-90.91.1
6.8.0-94.96.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-lib-rust-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-lowlatency-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency",
            "binary_version":  "6.8.0-100.100.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version":  "6.8.0-100.100.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency-hwe-6.11

Package

Name
linux-lowlatency-hwe-6.11
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1009.10~24.04.1
6.11.0-1011.12~24.04.1
6.11.0-1012.13~24.04.1
6.11.0-1013.14~24.04.1
6.11.0-1014.15~24.04.1
6.11.0-1015.16~24.04.2
6.11.0-1016.17~24.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-headers-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-6.11-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-lowlatency",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-lowlatency-64k",
            "binary_version":  "6.11.0-1016.17~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia

Package

Name
linux-nvidia
Purl
pkg:deb/ubuntu/linux-nvidia?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49

Affected versions

6.*
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1022.25
6.8.0-1023.26
6.8.0-1024.27
6.8.0-1025.28
6.8.0-1026.29
6.8.0-1027.30
6.8.0-1028.31
6.8.0-1029.32
6.8.0-1030.33
6.8.0-1031.34
6.8.0-1032.35
6.8.0-1035.38
6.8.0-1036.39
6.8.0-1038.41
6.8.0-1039.42
6.8.0-1040.43
6.8.0-1041.44
6.8.0-1042.45
6.8.0-1043.46
6.8.0-1044.47
6.8.0-1045.48

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-nvidia-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-nvidia-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia",
            "binary_version":  "6.8.0-1046.49"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version":  "6.8.0-1046.49"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-6.11

Package

Name
linux-nvidia-6.11
Purl
pkg:deb/ubuntu/linux-nvidia-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1002.2
6.11.0-1003.3
6.11.0-1007.7
6.11.0-1010.10
6.11.0-1011.11
6.11.0-1012.12
6.11.0-1013.13
6.11.0-1016.16

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-buildinfo-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-headers-6.11.0-1016",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-lib-rust-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-nvidia-6.11-tools-6.11.0-1016",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-nvidia",
            "binary_version":  "6.11.0-1016.16"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1016-nvidia-64k",
            "binary_version":  "6.11.0-1016.16"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-lowlatency

Package

Name
linux-nvidia-lowlatency
Purl
pkg:deb/ubuntu/linux-nvidia-lowlatency?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49.1

Affected versions

6.*
6.8.0-1009.9.1
6.8.0-1011.11.1
6.8.0-1012.12.1
6.8.0-1013.14.1
6.8.0-1014.15.1
6.8.0-1015.16.1
6.8.0-1017.19.1
6.8.0-1018.20.1
6.8.0-1019.21.1
6.8.0-1020.22.1
6.8.0-1021.23.1
6.8.0-1022.25.2
6.8.0-1023.26.1
6.8.0-1024.27.1
6.8.0-1025.28.1
6.8.0-1026.29.1
6.8.0-1027.30.1
6.8.0-1028.31.1
6.8.0-1029.32.1
6.8.0-1030.33.1
6.8.0-1031.34.1
6.8.0-1032.35.1
6.8.0-1035.38.1
6.8.0-1036.39.1
6.8.0-1038.41.1
6.8.0-1039.42.1
6.8.0-1040.43.1
6.8.0-1041.44.1
6.8.0-1042.45.1
6.8.0-1043.46.1
6.8.0-1044.47.1
6.8.0-1045.48.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-nvidia-lowlatency-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-nvidia-lowlatency-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-lowlatency",
            "binary_version":  "6.8.0-1046.49.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version":  "6.8.0-1046.49.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-tegra

Package

Name
linux-nvidia-tegra
Purl
pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1020.20

Affected versions

6.*
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1016.16
6.8.0-1019.19

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-nvidia-tegra-headers-6.8.0-1020",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-nvidia-tegra-tools-6.8.0-1020",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1020-nvidia-tegra",
            "binary_version":  "6.8.0-1020.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1020-nvidia-tegra-rt",
            "binary_version":  "6.8.0-1020.20"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-6.11

Package

Name
linux-oem-6.11
Purl
pkg:deb/ubuntu/linux-oem-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.11.0-1007.7
6.11.0-1008.8
6.11.0-1009.9
6.11.0-1010.10
6.11.0-1011.11
6.11.0-1012.12
6.11.0-1013.13
6.11.0-1015.15
6.11.0-1016.16
6.11.0-1017.17
6.11.0-1018.18
6.11.0-1020.20
6.11.0-1021.21
6.11.0-1022.22
6.11.0-1023.23
6.11.0-1024.24
6.11.0-1025.25
6.11.0-1027.27

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-headers-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-image-unsigned-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-usbio-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-modules-vision-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-oem-6.11-headers-6.11.0-1027",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-oem-6.11-tools-6.11.0-1027",
            "binary_version":  "6.11.0-1027.27"
        },
        {
            "binary_name":  "linux-tools-6.11.0-1027-oem",
            "binary_version":  "6.11.0-1027.27"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-6.14

Package

Name
linux-oem-6.14
Purl
pkg:deb/ubuntu/linux-oem-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1014.14

Affected versions

6.*
6.14.0-1004.4
6.14.0-1005.5
6.14.0-1006.6
6.14.0-1007.7
6.14.0-1008.8
6.14.0-1010.10
6.14.0-1011.11
6.14.0-1012.12
6.14.0-1013.13

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-ipu7-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-usbio-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-modules-vision-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-oem-6.14-headers-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-oem-6.14-tools-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1014-oem",
            "binary_version":  "6.14.0-1014.14"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oem-6.8

Package

Name
linux-oem-6.8
Purl
pkg:deb/ubuntu/linux-oem-6.8?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1016.16
6.8.0-1017.17
6.8.0-1018.18
6.8.0-1019.19
6.8.0-1020.20
6.8.0-1024.24
6.8.0-1025.25
6.8.0-1026.26
6.8.0-1027.27
6.8.0-1028.28
6.8.0-1029.29
6.8.0-1030.30
6.8.0-1031.31
6.8.0-1032.32

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-oem-6.8-headers-6.8.0-1032",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-oem-6.8-tools-6.8.0-1032",
            "binary_version":  "6.8.0-1032.32"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1032-oem",
            "binary_version":  "6.8.0-1032.32"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle

Package

Name
linux-oracle
Purl
pkg:deb/ubuntu/linux-oracle?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.44

Affected versions

6.*
6.5.0-1010.10
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1008.8
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1015.16
6.8.0-1016.17
6.8.0-1017.18
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1020.21
6.8.0-1021.22
6.8.0-1022.23
6.8.0-1023.24
6.8.0-1024.25
6.8.0-1025.26
6.8.0-1026.27
6.8.0-1027.28
6.8.0-1028.29
6.8.0-1029.30
6.8.0-1030.31
6.8.0-1032.33
6.8.0-1033.34
6.8.0-1035.36
6.8.0-1037.38
6.8.0-1038.39
6.8.0-1039.40
6.8.0-1040.41
6.8.0-1041.42
6.8.0-1042.43

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-oracle-headers-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-oracle-tools-6.8.0-1043",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle",
            "binary_version":  "6.8.0-1043.44"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version":  "6.8.0-1043.44"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-6.14

Package

Name
linux-oracle-6.14
Purl
pkg:deb/ubuntu/linux-oracle-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1015.15~24.04.1

Affected versions

6.*
6.14.0-1007.7~24.04.1
6.14.0-1009.9~24.04.1
6.14.0-1010.10~24.04.1
6.14.0-1011.11~24.04.1
6.14.0-1012.12~24.04.1
6.14.0-1013.13~24.04.1
6.14.0-1014.14~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1015-oracle",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-6.14.0-1015-oracle-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1015-oracle",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1015-oracle-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1015-oracle",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1015-oracle-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1015-oracle",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1015-oracle-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1015-oracle",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1015-oracle-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.14-headers-6.14.0-1015",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-oracle-6.14-tools-6.14.0-1015",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1015-oracle",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1015-oracle-64k",
            "binary_version":  "6.14.0-1015.15~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.51

Affected versions

6.*
6.5.0-1005.7
6.7.0-1001.1
6.8.0-1001.1
6.8.0-1002.2
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.10
6.8.0-1010.11
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.23
6.8.0-1020.24
6.8.0-1024.28
6.8.0-1028.32
6.8.0-1029.33
6.8.0-1030.34
6.8.0-1031.35
6.8.0-1032.36
6.8.0-1035.39
6.8.0-1036.40
6.8.0-1038.42
6.8.0-1039.43
6.8.0-1040.44
6.8.0-1041.45
6.8.0-1042.46
6.8.0-1043.47
6.8.0-1044.48
6.8.0-1045.49

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-image-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-raspi-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-raspi-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.51"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-raspi",
            "binary_version":  "6.8.0-1047.51"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-2019.20

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version":  "6.8.0-2019.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version":  "6.8.0-2019.20"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.1-1015.16

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-headers-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-realtime-tools-6.8.1-1015",
            "binary_version":  "6.8.1-1015.16"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1015-realtime",
            "binary_version":  "6.8.1-1015.16"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-9.9.1
6.8.0-20.20.1
6.8.0-28.28.1
6.8.0-31.31.1
6.8.0-35.35.1
6.8.0-36.36.1
6.8.0-38.38.1
6.8.0-39.39.1
6.8.0-40.40.1
6.8.0-41.41.1
6.8.0-44.44.1
6.8.0-47.47.1
6.8.0-48.48.1
6.8.0-49.49.1
6.8.0-50.51.1
6.8.0-51.52.1
6.8.0-52.53.1
6.8.0-53.55.1
6.8.0-55.57.1
6.8.0-56.58.1
6.8.0-57.59.1
6.8.0-58.60.1
6.8.0-59.61.1
6.8.0-60.63.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-image-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-riscv-headers-6.8.0-60",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-riscv-tools-6.8.0-60",
            "binary_version":  "6.8.0-60.63.1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-60-generic",
            "binary_version":  "6.8.0-60.63.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-6.14

Package

Name
linux-riscv-6.14
Purl
pkg:deb/ubuntu/linux-riscv-6.14?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-34.34.1~24.04.1

Affected versions

6.*
6.14.0-22.22.1~24.04.1
6.14.0-23.23.1~24.04.1
6.14.0-24.24.1~24.04.1
6.14.0-27.27.1~24.04.1
6.14.0-28.28.1~24.04.1
6.14.0-29.29.1~24.04.1
6.14.0-32.32.1~24.04.1
6.14.0-33.33.1~24.04.1

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-34-generic",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-34-generic",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name":  "linux-image-6.14.0-34-generic",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-34-generic",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.14-headers-6.14.0-34",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name":  "linux-riscv-6.14-tools-6.14.0-34",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-34-generic",
            "binary_version":  "6.14.0-34.34.1~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-xilinx

Package

Name
linux-xilinx
Purl
pkg:deb/ubuntu/linux-xilinx?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1023.24

Affected versions

6.*
6.8.0-1008.9
6.8.0-1009.10
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1017.18
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1020.21
6.8.0-1021.22
6.8.0-1022.23

Ecosystem specific

{
    "availability":  "No subscription required",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-image-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1023-xilinx",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-xilinx-headers-6.8.0-1023",
            "binary_version":  "6.8.0-1023.24"
        },
        {
            "binary_name":  "linux-xilinx-tools-6.8.0-1023",
            "binary_version":  "6.8.0-1023.24"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:25.10
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.17.0-1003.3
6.17.0-1004.4
6.17.0-1005.5
6.17.0-1007.7
6.17.0-1008.8
6.17.0-1010.10
6.17.0-1012.12
6.17.0-1014.14
6.17.0-1015.15
6.17.0-1017.17

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-cloud-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-azure-fde-headers-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-azure-fde-tools-6.17.0-1017",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-buildinfo-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-cloud-tools-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-headers-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-image-unsigned-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-modules-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        },
        {
            "binary_name":  "linux-tools-6.17.0-1017-azure-fde",
            "binary_version":  "6.17.0-1017.17"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Nvidia-BlueField:22.04:LTS
linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1011.13
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1017.19
5.15.0-1019.21
5.15.0-1021.23
5.15.0-1022.24
5.15.0-1023.25
5.15.0-1024.26
5.15.0-1027.29
5.15.0-1028.30
5.15.0-1031.33
5.15.0-1032.34
5.15.0-1033.35
5.15.0-1035.37
5.15.0-1036.38
5.15.0-1037.39
5.15.0-1038.40
5.15.0-1040.42
5.15.0-1042.44
5.15.0-1043.45
5.15.0-1044.46
5.15.0-1045.47
5.15.0-1047.49
5.15.0-1048.50
5.15.0-1050.52
5.15.0-1051.53
5.15.0-1052.54
5.15.0-1053.55
5.15.0-1054.56
5.15.0-1056.58
5.15.0-1057.59
5.15.0-1058.60
5.15.0-1059.61
5.15.0-1060.62
5.15.0-1061.63
5.15.0-1062.64
5.15.0-1063.65
5.15.0-1064.66
5.15.0-1065.67
5.15.0-1066.68
5.15.0-1067.69
5.15.0-1069.71
5.15.0-1070.72
5.15.0-1072.74
5.15.0-1074.76
5.15.0-1075.77
5.15.0-1076.78
5.15.0-1077.79
5.15.0-1079.81
5.15.0-1080.82
5.15.0-1081.83
5.15.0-1082.84
5.15.0-1083.85
5.15.0-1084.86
5.15.0-1085.87
5.15.0-1086.88
5.15.0-1087.89
5.15.0-1089.91
5.15.0-1090.92
5.15.0-1092.94
5.15.0-1093.95
5.15.0-1095.97
5.15.0-1096.98
5.15.0-1097.99
5.15.0-1098.100
5.15.0-1099.101
5.15.0-1100.102
5.15.0-1101.103

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-cloud-tools-common",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-bluefield-headers-5.15.0-1101",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-bluefield-tools-5.15.0-1101",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-bluefield-tools-host",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1101-bluefield",
            "binary_version":  "5.15.0-1101.103"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Nvidia-BlueField:24.04:LTS
linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1016.20

Affected versions

6.*
6.8.0-1011.15
6.8.0-1012.16
6.8.0-1013.17
6.8.0-1014.18

Ecosystem specific

{
    "availability":  "Available for NVIDIA BlueField platforms",
    "binaries":  [
        {
            "binary_name":  "linux-bluefield-headers-6.8.0-1016",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-bluefield-tools-6.8.0-1016",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1016-bluefield",
            "binary_version":  "6.8.0-1016.20"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1016-bluefield-64k",
            "binary_version":  "6.8.0-1016.20"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Pro:20.04:LTS
linux-aws-5.15

Package

Name
linux-aws-5.15
Purl
pkg:deb/ubuntu/linux-aws-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1014.18~20.04.1
5.15.0-1015.19~20.04.1
5.15.0-1017.21~20.04.1
5.15.0-1019.23~20.04.1
5.15.0-1020.24~20.04.1
5.15.0-1021.25~20.04.1
5.15.0-1022.26~20.04.1
5.15.0-1023.27~20.04.1
5.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
5.15.0-1028.32~20.04.1
5.15.0-1030.34~20.04.1
5.15.0-1031.35~20.04.1
5.15.0-1033.37~20.04.1
5.15.0-1034.38~20.04.1
5.15.0-1035.39~20.04.1
5.15.0-1036.40~20.04.1
5.15.0-1037.41~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1039.44~20.04.1
5.15.0-1040.45~20.04.1
5.15.0-1041.46~20.04.1
5.15.0-1043.48~20.04.1
5.15.0-1044.49~20.04.1
5.15.0-1045.50~20.04.1
5.15.0-1047.52~20.04.1
5.15.0-1048.53~20.04.1
5.15.0-1049.54~20.04.1
5.15.0-1050.55~20.04.1
5.15.0-1051.56~20.04.1
5.15.0-1052.57~20.04.1
5.15.0-1053.58~20.04.1
5.15.0-1055.60~20.04.1
5.15.0-1056.61~20.04.1
5.15.0-1057.63~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1068.74~20.04.1
5.15.0-1069.75~20.04.1
5.15.0-1070.76~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.1
5.15.0-1075.82~20.04.1
5.15.0-1077.84~20.04.1
5.15.0-1080.87~20.04.1
5.15.0-1081.88~20.04.1
5.15.0-1082.89~20.04.1
5.15.0-1083.90~20.04.1
5.15.0-1084.91~20.04.1
5.15.0-1086.93~20.04.1
5.15.0-1087.94~20.04.1
5.15.0-1088.95~20.04.1
5.15.0-1089.96~20.04.1
5.15.0-1090.97~20.04.1
5.15.0-1091.98~20.04.1
5.15.0-1092.99~20.04.1
5.15.0-1093.100~20.04.1
5.15.0-1095.102~20.04.1
5.15.0-1096.103~20.04.1
5.15.0-1097.104~20.04.1
5.15.0-1098.105~20.04.1
5.15.0-1099.106~20.04.1
5.15.0-1100.107~20.04.2
5.15.0-1101.108~20.04.1
5.15.0-1103.110~20.04.1
5.15.0-1104.111~20.04.1
5.15.0-1105.112~20.04.1
5.15.0-1106.113~20.04.1
5.15.0-1108.115~20.04.1
5.15.0-1109.116~20.04.1
5.15.0-1111.118~20.04.1
5.15.0-1112.119~20.04.1
5.15.0-1114.121~20.04.1
5.15.0-1115.122~20.04.1
5.15.0-1116.123~20.04.1
5.15.0-1117.124~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-5.15-cloud-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.15-headers-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-aws-5.15-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws",
            "binary_version":  "5.15.0-1117.124~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-5.15

Package

Name
linux-azure-5.15
Purl
pkg:deb/ubuntu/linux-azure-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1007.8~20.04.1
5.15.0-1008.9~20.04.1
5.15.0-1013.16~20.04.1
5.15.0-1014.17~20.04.1
5.15.0-1017.20~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1022.27~20.04.1
5.15.0-1023.29~20.04.1
5.15.0-1029.36~20.04.1
5.15.0-1030.37~20.04.1
5.15.0-1031.38~20.04.1
5.15.0-1033.40~20.04.1
5.15.0-1034.41~20.04.1
5.15.0-1035.42~20.04.1
5.15.0-1036.43~20.04.1
5.15.0-1037.44~20.04.1
5.15.0-1038.45~20.04.1
5.15.0-1039.46~20.04.1
5.15.0-1040.47~20.04.1
5.15.0-1041.48~20.04.1
5.15.0-1042.49~20.04.1
5.15.0-1043.50~20.04.1
5.15.0-1045.52~20.04.1
5.15.0-1046.53~20.04.1
5.15.0-1047.54~20.04.1
5.15.0-1049.56~20.04.1
5.15.0-1050.57~20.04.1
5.15.0-1051.59~20.04.1
5.15.0-1052.60~20.04.1
5.15.0-1053.61~20.04.1
5.15.0-1054.62~20.04.1
5.15.0-1056.64~20.04.1
5.15.0-1057.65~20.04.1
5.15.0-1058.66~20.04.2
5.15.0-1059.67~20.04.1
5.15.0-1060.69~20.04.1
5.15.0-1061.70~20.04.1
5.15.0-1063.72~20.04.1
5.15.0-1064.73~20.04.1
5.15.0-1065.74~20.04.1
5.15.0-1067.76~20.04.1
5.15.0-1068.77~20.04.1
5.15.0-1070.79~20.04.1
5.15.0-1071.80~20.04.1
5.15.0-1072.81~20.04.1
5.15.0-1073.82~20.04.1
5.15.0-1074.83~20.04.1
5.15.0-1075.84~20.04.1
5.15.0-1078.87~20.04.1
5.15.0-1079.88~20.04.1
5.15.0-1081.90~20.04.1
5.15.0-1082.91~20.04.1
5.15.0-1086.95~20.04.1
5.15.0-1087.96~20.04.1
5.15.0-1088.97~20.04.1
5.15.0-1089.98~20.04.1
5.15.0-1091.100~20.04.1
5.15.0-1094.103~20.04.1
5.15.0-1095.104~20.04.1
5.15.0-1096.105~20.04.1
5.15.0-1097.106~20.04.1
5.15.0-1098.107~20.04.1
5.15.0-1102.111~20.04.1
5.15.0-1103.112~20.04.1
5.15.0-1110.119~20.04.1
5.15.0-1111.120~20.04.1
5.15.0-1114.123~20.04.1
5.15.0-1116.125~20.04.1
5.15.0-1117.126~20.04.1
5.15.0-1119.128~20.04.1
5.15.0-1121.130~20.04.1
5.15.0-1122.131~20.04.1
5.15.0-1123.132~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-5.15-cloud-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.15-headers-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-azure-5.15-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1123-azure",
            "binary_version":  "5.15.0-1123.132~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fde-5.15

Package

Name
linux-azure-fde-5.15
Purl
pkg:deb/ubuntu/linux-azure-fde-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1019.24~20.04.1.1
5.15.0-1020.25~20.04.1.1
5.15.0-1021.26~20.04.1.1
5.15.0-1029.36~20.04.1.1
5.15.0-1030.37~20.04.1.1
5.15.0-1031.38~20.04.1.1
5.15.0-1033.40~20.04.1.1
5.15.0-1034.41~20.04.1.2
5.15.0-1035.42~20.04.1.1
5.15.0-1036.43~20.04.1.1
5.15.0-1037.44~20.04.1.1
5.15.0-1038.45~20.04.1.1
5.15.0-1039.46~20.04.1.1
5.15.0-1040.47~20.04.1.1
5.15.0-1041.48~20.04.1.1
5.15.0-1042.49~20.04.1.1
5.15.0-1043.50~20.04.1.1
5.15.0-1046.53~20.04.1.1
5.15.0-1047.54~20.04.1.1
5.15.0-1049.56~20.04.1.1
5.15.0-1050.57~20.04.1.1
5.15.0-1051.59~20.04.1.1
5.15.0-1052.60~20.04.1.1
5.15.0-1053.61~20.04.1.1
5.15.0-1054.62~20.04.1.1
5.15.0-1056.64~20.04.1.1
5.15.0-1057.65~20.04.1.1
5.15.0-1058.66~20.04.2.1
5.15.0-1059.67~20.04.1.1
5.15.0-1060.69~20.04.1.1
5.15.0-1061.70~20.04.1.1
5.15.0-1063.72~20.04.1.1
5.15.0-1064.73~20.04.1.1
5.15.0-1065.74~20.04.1.1
5.15.0-1067.76~20.04.1.1
5.15.0-1068.77~20.04.1.1
5.15.0-1070.79~20.04.1.1
5.15.0-1071.80~20.04.1.1
5.15.0-1072.81~20.04.1.1
5.15.0-1073.82~20.04.1.1
5.15.0-1074.83~20.04.1.1
5.15.0-1076.85~20.04.1.1
5.15.0-1078.87~20.04.1.1
5.15.0-1081.90~20.04.1.1
5.15.0-1082.91~20.04.1.1
5.15.0-1086.95~20.04.1.1
5.15.0-1087.96~20.04.1.1
5.15.0-1088.97~20.04.1.1
5.15.0-1089.98~20.04.1.1
5.15.0-1091.100~20.04.1.1
5.15.0-1094.103~20.04.1.1
5.15.0-1096.105~20.04.1.1
5.15.0-1097.106~20.04.1.1
5.15.0-1098.107~20.04.1.1
5.15.0-1102.111~20.04.1.1
5.15.0-1103.112~20.04.1.1
5.15.0-1111.120~20.04.1.1
5.15.0-1114.123~20.04.1
5.15.0-1116.125~20.04.1
5.15.0-1117.126~20.04.2
5.15.0-1118.127~20.04.1
5.15.0-1119.128~20.04.1
5.15.0-1120.129~20.04.1
5.15.0-1121.130~20.04.1
5.15.0-1122.131~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fde-5.15-cloud-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-5.15-headers-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-azure-fde-5.15-tools-5.15.0-1122",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1122-azure-fde",
            "binary_version":  "5.15.0-1122.131~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-5.15

Package

Name
linux-gcp-5.15
Purl
pkg:deb/ubuntu/linux-gcp-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1006.9~20.04.1
5.15.0-1012.17~20.04.1
5.15.0-1013.18~20.04.1
5.15.0-1016.21~20.04.1
5.15.0-1017.23~20.04.2
5.15.0-1018.24~20.04.1
5.15.0-1021.28~20.04.1
5.15.0-1022.29~20.04.1
5.15.0-1025.32~20.04.2
5.15.0-1026.33~20.04.1
5.15.0-1027.34~20.04.1
5.15.0-1029.36~20.04.1
5.15.0-1030.37~20.04.1
5.15.0-1031.38~20.04.1
5.15.0-1032.40~20.04.1
5.15.0-1033.41~20.04.1
5.15.0-1034.42~20.04.1
5.15.0-1035.43~20.04.1
5.15.0-1036.44~20.04.1
5.15.0-1037.45~20.04.1
5.15.0-1038.46~20.04.1
5.15.0-1039.47~20.04.1
5.15.0-1040.48~20.04.1
5.15.0-1041.49~20.04.1
5.15.0-1042.50~20.04.1
5.15.0-1044.52~20.04.1
5.15.0-1045.53~20.04.2
5.15.0-1046.54~20.04.1
5.15.0-1047.55~20.04.1
5.15.0-1048.56~20.04.1
5.15.0-1049.57~20.04.1
5.15.0-1051.59~20.04.1
5.15.0-1052.60~20.04.1
5.15.0-1053.61~20.04.1
5.15.0-1054.62~20.04.1
5.15.0-1055.63~20.04.1
5.15.0-1058.66~20.04.1
5.15.0-1059.67~20.04.1
5.15.0-1060.68~20.04.1
5.15.0-1062.70~20.04.1
5.15.0-1065.73~20.04.1
5.15.0-1066.74~20.04.1
5.15.0-1067.75~20.04.1
5.15.0-1068.76~20.04.1
5.15.0-1069.77~20.04.1
5.15.0-1070.78~20.04.1
5.15.0-1071.79~20.04.1
5.15.0-1072.80~20.04.1
5.15.0-1073.81~20.04.1
5.15.0-1074.83~20.04.1
5.15.0-1075.84~20.04.1
5.15.0-1077.86~20.04.1
5.15.0-1078.87~20.04.1
5.15.0-1081.90~20.04.1
5.15.0-1083.92~20.04.1
5.15.0-1085.94~20.04.1
5.15.0-1086.95~20.04.1
5.15.0-1087.96~20.04.2
5.15.0-1088.97~20.04.1
5.15.0-1090.99~20.04.1
5.15.0-1091.100~20.04.1
5.15.0-1092.101~20.04.1
5.15.0-1093.102~20.04.1
5.15.0-1095.104~20.04.1
5.15.0-1096.105~20.04.1
5.15.0-1097.106~20.04.1
5.15.0-1098.107~20.04.1
5.15.0-1099.108~20.04.1
5.15.0-1100.109~20.04.1
5.15.0-1101.110~20.04.1
5.15.0-1103.112~20.04.1
5.15.0-1104.113~20.04.1
5.15.0-1106.115~20.04.1
5.15.0-1108.117~20.04.1
5.15.0-1109.118~20.04.1
5.15.0-1111.121~20.04.1
5.15.0-1112.122~20.04.1
5.15.0-1114.124~20.04.1
5.15.0-1118.128~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.15-headers-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-gcp-5.15-tools-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1118-gcp",
            "binary_version":  "5.15.0-1118.128~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-hwe-5.15

Package

Name
linux-hwe-5.15
Purl
pkg:deb/ubuntu/linux-hwe-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-33.34~20.04.1
5.15.0-41.44~20.04.1
5.15.0-43.46~20.04.1
5.15.0-46.49~20.04.1
5.15.0-48.54~20.04.1
5.15.0-50.56~20.04.1
5.15.0-52.58~20.04.1
5.15.0-53.59~20.04.1
5.15.0-56.62~20.04.1
5.15.0-57.63~20.04.1
5.15.0-58.64~20.04.1
5.15.0-60.66~20.04.1
5.15.0-67.74~20.04.1
5.15.0-69.76~20.04.1
5.15.0-70.77~20.04.1
5.15.0-71.78~20.04.1
5.15.0-72.79~20.04.1
5.15.0-73.80~20.04.1
5.15.0-75.82~20.04.1
5.15.0-76.83~20.04.1
5.15.0-78.85~20.04.1
5.15.0-79.86~20.04.2
5.15.0-82.91~20.04.1
5.15.0-83.92~20.04.1
5.15.0-84.93~20.04.1
5.15.0-86.96~20.04.1
5.15.0-87.97~20.04.1
5.15.0-88.98~20.04.1
5.15.0-89.99~20.04.1
5.15.0-91.101~20.04.1
5.15.0-92.102~20.04.1
5.15.0-94.104~20.04.1
5.15.0-97.107~20.04.1
5.15.0-100.110~20.04.1
5.15.0-101.111~20.04.1
5.15.0-102.112~20.04.1
5.15.0-105.115~20.04.1
5.15.0-106.116~20.04.1
5.15.0-107.117~20.04.1
5.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
5.15.0-117.127~20.04.1
5.15.0-118.128~20.04.1
5.15.0-119.129~20.04.1
5.15.0-121.131~20.04.1
5.15.0-122.132~20.04.1
5.15.0-124.134~20.04.1
5.15.0-125.135~20.04.1
5.15.0-126.136~20.04.1
5.15.0-127.137~20.04.1
5.15.0-130.140~20.04.1
5.15.0-131.141~20.04.1
5.15.0-134.145~20.04.1
5.15.0-136.147~20.04.1
5.15.0-138.148~20.04.1
5.15.0-139.149~20.04.1
5.15.0-142.152~20.04.1
5.15.0-143.153~20.04.1
5.15.0-144.157~20.04.1
5.15.0-145.158~20.04.1
5.15.0-151.161~20.04.1
5.15.0-152.162~20.04.1
5.15.0-153.163~20.04.1
5.15.0-156.166~20.04.1
5.15.0-157.167~20.04.1
5.15.0-160.170~20.04.1
5.15.0-161.171~20.04.1
5.15.0-163.173~20.04.1
5.15.0-164.174~20.04.1
5.15.0-168.178~20.04.1
5.15.0-170.180~20.04.3
5.15.0-171.181~20.04.1
5.15.0-173.183~20.04.1
5.15.0-176.186~20.04.1
5.15.0-177.187~20.04.1
5.15.0-179.189~20.04.1
5.15.0-181.191~20.04.1
5.15.0-185.195~20.04.1
5.15.0-186.196~20.04.1
5.15.0-190.200~20.04.1
5.15.0-191.201~20.04.1
5.15.0-194.204~20.04.1
5.15.0-198.208~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-cloud-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-headers-5.15.0-198",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-hwe-5.15-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-64k",
            "binary_version":  "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-generic-lpae",
            "binary_version":  "5.15.0-198.208~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-ibm-5.15

Package

Name
linux-ibm-5.15
Purl
pkg:deb/ubuntu/linux-ibm-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1033.36~20.04.1
5.15.0-1034.37~20.04.1
5.15.0-1035.38~20.04.1
5.15.0-1036.39~20.04.1
5.15.0-1037.40~20.04.1
5.15.0-1038.41~20.04.1
5.15.0-1040.43~20.04.1
5.15.0-1041.44~20.04.1
5.15.0-1042.45~20.04.1
5.15.0-1043.46~20.04.1
5.15.0-1044.47~20.04.1
5.15.0-1045.48~20.04.1
5.15.0-1046.49~20.04.1
5.15.0-1047.50~20.04.1
5.15.0-1048.51~20.04.1
5.15.0-1049.52~20.04.1
5.15.0-1050.53~20.04.1
5.15.0-1053.56~20.04.1
5.15.0-1054.57~20.04.1
5.15.0-1055.58~20.04.1
5.15.0-1057.60~20.04.1
5.15.0-1058.61~20.04.1
5.15.0-1059.62~20.04.1
5.15.0-1060.63~20.04.1
5.15.0-1061.64~20.04.1
5.15.0-1062.65~20.04.1
5.15.0-1063.66~20.04.1
5.15.0-1064.67~20.04.1
5.15.0-1065.68~20.04.1
5.15.0-1066.69~20.04.1
5.15.0-1067.70~20.04.1
5.15.0-1068.71~20.04.1
5.15.0-1069.72~20.04.1
5.15.0-1074.77~20.04.1
5.15.0-1075.78~20.04.1
5.15.0-1076.79~20.04.1
5.15.0-1078.81~20.04.1
5.15.0-1079.82~20.04.1
5.15.0-1080.83~20.04.1
5.15.0-1081.84~20.04.1
5.15.0-1083.86~20.04.1
5.15.0-1085.88~20.04.1
5.15.0-1086.89~20.04.1
5.15.0-1087.90~20.04.1
5.15.0-1089.92~20.04.1
5.15.0-1090.93~20.04.1
5.15.0-1091.94~20.04.1
5.15.0-1092.95~20.04.1
5.15.0-1093.96~20.04.1
5.15.0-1094.97~20.04.1
5.15.0-1095.98~20.04.1
5.15.0-1097.100~20.04.1
5.15.0-1098.101~20.04.1
5.15.0-1099.102~20.04.1
5.15.0-1100.103~20.04.1
5.15.0-1102.105~20.04.1
5.15.0-1103.106~20.04.1
5.15.0-1105.109~20.04.1
5.15.0-1106.110~20.04.1
5.15.0-1107.111~20.04.1
5.15.0-1108.112~20.04.1
5.15.0-1109.113~20.04.1
5.15.0-1110.114~20.04.1
5.15.0-1111.115~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.15-headers-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.15-source-5.15.0",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-ibm-5.15-tools-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1111-ibm",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-intel-iotg-5.15

Package

Name
linux-intel-iotg-5.15
Purl
pkg:deb/ubuntu/linux-intel-iotg-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1003.5~20.04.1
5.15.0-1008.11~20.04.1
5.15.0-1010.14~20.04.1
5.15.0-1015.20~20.04.2
5.15.0-1016.21~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1023.28~20.04.1
5.15.0-1025.30~20.04.1
5.15.0-1026.31~20.04.1
5.15.0-1027.32~20.04.1
5.15.0-1030.35~20.04.1
5.15.0-1031.36~20.04.1
5.15.0-1033.38~20.04.1
5.15.0-1034.39~20.04.1
5.15.0-1036.41~20.04.1
5.15.0-1037.42~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1043.49~20.04.1
5.15.0-1045.51~20.04.1
5.15.0-1046.52~20.04.1
5.15.0-1048.54~20.04.1
5.15.0-1049.55~20.04.1
5.15.0-1050.56~20.04.1
5.15.0-1051.57~20.04.1
5.15.0-1052.58~20.04.1
5.15.0-1055.61~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1059.65~20.04.1
5.15.0-1060.66~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.2
5.15.0-1074.80~20.04.1
5.15.0-1077.83~20.04.1
5.15.0-1078.84~20.04.1
5.15.0-1079.85~20.04.1
5.15.0-1083.89~20.04.1
5.15.0-1084.90~20.04.1
5.15.0-1085.91~20.04.1
5.15.0-1086.92~20.04.1
5.15.0-1087.93~20.04.1
5.15.0-1088.94~20.04.1
5.15.0-1090.96~20.04.1
5.15.0-1091.97~20.04.1
5.15.0-1092.98~20.04.1
5.15.0-1093.99~20.04.1
5.15.0-1094.100~20.04.1
5.15.0-1095.101~20.04.1
5.15.0-1096.102~20.04.1
5.15.0-1098.104~20.04.1
5.15.0-1099.105~20.04.1
5.15.0-1100.106~20.04.1
5.15.0-1101.107~20.04.1
5.15.0-1103.109~20.04.1
5.15.0-1104.110~20.04.1
5.15.0-1106.112~20.04.1
5.15.0-1107.113~20.04.1
5.15.0-1108.114~20.04.1
5.15.0-1109.115~20.04.1
5.15.0-1110.116~20.04.1
5.15.0-1111.117~20.04.1
5.15.0-1112.118~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-cloud-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-cloud-tools-common",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-headers-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-5.15.0-1112",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-common",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-intel-iotg-5.15-tools-host",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version":  "5.15.0-1112.118~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-lowlatency-hwe-5.15

Package

Name
linux-lowlatency-hwe-5.15
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-33.34~20.04.1
5.15.0-42.45~20.04.1
5.15.0-43.46~20.04.1
5.15.0-46.49~20.04.1
5.15.0-48.54~20.04.1
5.15.0-50.56~20.04.1
5.15.0-52.58~20.04.1
5.15.0-53.59~20.04.1
5.15.0-56.62~20.04.1
5.15.0-58.64~20.04.1
5.15.0-60.66~20.04.1
5.15.0-67.74~20.04.1
5.15.0-69.76~20.04.1
5.15.0-70.77~20.04.1
5.15.0-71.78~20.04.1
5.15.0-72.79~20.04.1
5.15.0-73.80~20.04.1
5.15.0-75.82~20.04.1
5.15.0-76.83~20.04.1
5.15.0-78.85~20.04.1
5.15.0-79.88~20.04.1
5.15.0-82.91~20.04.1
5.15.0-83.92~20.04.1
5.15.0-84.93~20.04.1
5.15.0-86.95~20.04.1
5.15.0-87.96~20.04.1
5.15.0-88.98~20.04.1
5.15.0-89.99~20.04.1
5.15.0-91.101~20.04.1
5.15.0-92.102~20.04.1
5.15.0-94.104~20.04.1
5.15.0-97.107~20.04.1
5.15.0-100.110~20.04.1
5.15.0-101.111~20.04.1
5.15.0-102.112~20.04.1
5.15.0-105.115~20.04.1
5.15.0-106.116~20.04.1
5.15.0-107.117~20.04.1
5.15.0-110.120~20.04.1
5.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
5.15.0-117.127~20.04.1
5.15.0-118.128~20.04.1
5.15.0-119.129~20.04.1
5.15.0-121.131~20.04.1
5.15.0-122.132~20.04.1
5.15.0-124.134~20.04.1
5.15.0-125.135~20.04.1
5.15.0-126.136~20.04.1
5.15.0-127.137~20.04.1
5.15.0-128.138~20.04.1
5.15.0-129.139~20.04.1
5.15.0-131.141~20.04.1
5.15.0-133.143~20.04.1
5.15.0-134.145~20.04.1
5.15.0-135.146~20.04.1
5.15.0-136.147~20.04.1
5.15.0-138.148~20.04.1
5.15.0-139.149~20.04.1
5.15.0-140.150~20.04.1
5.15.0-142.152~20.04.1
5.15.0-143.153~20.04.1
5.15.0-144.157~20.04.1
5.15.0-145.158~20.04.1
5.15.0-152.162~20.04.1
5.15.0-153.163~20.04.1
5.15.0-156.166~20.04.1
5.15.0-157.167~20.04.1
5.15.0-160.170~20.04.1
5.15.0-161.171~20.04.1
5.15.0-163.173~20.04.1
5.15.0-164.174~20.04.1
5.15.0-168.178~20.04.1
5.15.0-170.180~20.04.1
5.15.0-171.181~20.04.1
5.15.0-173.183~20.04.1
5.15.0-174.184~20.04.1
5.15.0-175.185~20.04.1
5.15.0-177.187~20.04.1
5.15.0-178.188~20.04.1
5.15.0-179.189~20.04.1
5.15.0-181.191~20.04.1
5.15.0-183.193~20.04.1
5.15.0-184.194~20.04.1
5.15.0-190.200~20.04.1
5.15.0-191.201~20.04.1
5.15.0-194.204~20.04.1
5.15.0-195.205~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-headers-5.15.0-195",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-lowlatency-hwe-5.15-tools-5.15.0-195",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency",
            "binary_version":  "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version":  "5.15.0-195.205~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-nvidia-tegra-5.15

Package

Name
linux-nvidia-tegra-5.15
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1009.9~20.04.1
5.15.0-1010.10~20.04.1
5.15.0-1012.12~20.04.1
5.15.0-1014.14~20.04.1
5.15.0-1015.15~20.04.1
5.15.0-1016.16~20.04.1
5.15.0-1017.17~20.04.1
5.15.0-1018.18~20.04.1
5.15.0-1019.19~20.04.1
5.15.0-1020.20~20.04.1
5.15.0-1022.22~20.04.1
5.15.0-1025.25~20.04.1
5.15.0-1027.27~20.04.1
5.15.0-1030.30~20.04.1
5.15.0-1032.32~20.04.1
5.15.0-1039.39~20.04.1
5.15.0-1040.40~20.04.1
5.15.0-1041.41~20.04.1
5.15.0-1042.42~20.04.1
5.15.0-1043.43~20.04.1
5.15.0-1044.44~20.04.1
5.15.0-1045.45~20.04.1
5.15.0-1046.46~20.04.1
5.15.0-1047.47~20.04.1
5.15.0-1048.48~20.04.1
5.15.0-1049.49~20.04.1
5.15.0-1050.50~20.04.1
5.15.0-1051.51~20.04.1
5.15.0-1052.52~20.04.2
5.15.0-1053.53~20.04.1
5.15.0-1055.55~20.04.1
5.15.0-1057.57~20.04.1
5.15.0-1058.58~20.04.1
5.15.0-1060.60~20.04.1
5.15.0-1061.61~20.04.1
5.15.0-1063.63~20.04.1
5.15.0-1064.66~20.04.1
5.15.0-1065.67~20.04.1
5.15.0-1066.68~20.04.1
5.15.0-1067.69~20.04.1
5.15.0-1068.70~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-nvidia-tegra-5.15-headers-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-nvidia-tegra-5.15-tools-5.15.0-1068",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version":  "5.15.0-1068.70~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-oracle-5.15

Package

Name
linux-oracle-5.15
Purl
pkg:deb/ubuntu/linux-oracle-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1007.9~20.04.1
5.15.0-1013.17~20.04.1
5.15.0-1016.20~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1021.27~20.04.1
5.15.0-1022.28~20.04.1
5.15.0-1025.31~20.04.2
5.15.0-1027.33~20.04.1
5.15.0-1029.35~20.04.1
5.15.0-1030.36~20.04.1
5.15.0-1032.38~20.04.1
5.15.0-1033.39~20.04.1
5.15.0-1034.40~20.04.1
5.15.0-1035.41~20.04.1
5.15.0-1036.42~20.04.1
5.15.0-1037.43~20.04.1
5.15.0-1038.44~20.04.1
5.15.0-1039.45~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1041.47~20.04.1
5.15.0-1042.48~20.04.1
5.15.0-1044.50~20.04.1
5.15.0-1045.51~20.04.1
5.15.0-1046.52~20.04.1
5.15.0-1047.53~20.04.1
5.15.0-1048.54~20.04.1
5.15.0-1049.55~20.04.1
5.15.0-1050.56~20.04.1
5.15.0-1051.57~20.04.1
5.15.0-1052.58~20.04.1
5.15.0-1053.59~20.04.1
5.15.0-1054.60~20.04.1
5.15.0-1055.61~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1059.65~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1068.74~20.04.1
5.15.0-1069.75~20.04.1
5.15.0-1070.76~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.1
5.15.0-1074.80~20.04.1
5.15.0-1075.81~20.04.1
5.15.0-1076.82~20.04.1
5.15.0-1077.83~20.04.1
5.15.0-1078.84~20.04.1
5.15.0-1079.85~20.04.1
5.15.0-1080.86~20.04.1
5.15.0-1081.87~20.04.1
5.15.0-1083.89~20.04.1
5.15.0-1084.90~20.04.1
5.15.0-1085.91~20.04.3
5.15.0-1086.92~20.04.1
5.15.0-1088.94~20.04.1
5.15.0-1090.96~20.04.1
5.15.0-1091.97~20.04.1
5.15.0-1092.98~20.04.1
5.15.0-1093.99~20.04.1
5.15.0-1094.100~20.04.1
5.15.0-1095.101~20.04.1
5.15.0-1096.102~20.04.1
5.15.0-1097.103~20.04.1
5.15.0-1098.104~20.04.1
5.15.0-1100.106~20.04.1
5.15.0-1101.107~20.04.1
5.15.0-1102.108~20.04.1
5.15.0-1104.110~20.04.1
5.15.0-1106.112~20.04.1
5.15.0-1108.114~20.04.1
5.15.0-1109.115~20.04.1
5.15.0-1110.116~20.04.1
5.15.0-1111.117~20.04.1
5.15.0-1114.120~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.15-headers-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-oracle-5.15-tools-5.15.0-1114",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1114-oracle",
            "binary_version":  "5.15.0-1114.120~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-riscv-5.15

Package

Name
linux-riscv-5.15
Purl
pkg:deb/ubuntu/linux-riscv-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1015.17~20.04.1
5.15.0-1017.19~20.04.1
5.15.0-1018.21~20.04.1
5.15.0-1019.22~20.04.1
5.15.0-1022.26~20.04.1
5.15.0-1023.27~20.04.1
5.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
5.15.0-1028.32~20.04.1
5.15.0-1029.33~20.04.1
5.15.0-1030.34~20.04.1
5.15.0-1031.35~20.04.1
5.15.0-1032.36~20.04.1
5.15.0-1033.37~20.04.1
5.15.0-1034.38~20.04.1
5.15.0-1035.39~20.04.1
5.15.0-1036.40~20.04.2
5.15.0-1037.41~20.04.2
5.15.0-1038.42~20.04.2
5.15.0-1039.43~20.04.2
5.15.0-1040.44~20.04.3
5.15.0-1041.45~20.04.1
5.15.0-1043.47~20.04.1
5.15.0-1044.48~20.04.1
5.15.0-1045.49~20.04.1
5.15.0-1046.50~20.04.1
5.15.0-1047.51~20.04.1
5.15.0-1048.52~20.04.1
5.15.0-1049.53~20.04.2
5.15.0-1050.54~20.04.1
5.15.0-1051.55~20.04.1
5.15.0-1052.56~20.04.1
5.15.0-1053.57~20.04.1
5.15.0-1056.60~20.04.1
5.15.0-1057.61~20.04.1
5.15.0-1058.62~20.04.1
5.15.0-1059.63~20.04.1
5.15.0-1060.64~20.04.1
5.15.0-1061.65~20.04.1
5.15.0-1062.66~20.04.1
5.15.0-1063.67~20.04.1
5.15.0-1064.68~20.04.1
5.15.0-1065.69~20.04.1
5.15.0-1066.70~20.04.1
5.15.0-1067.71~20.04.1
5.15.0-1068.72~20.04.1
5.15.0-1069.73~20.04.1
5.15.0-1070.74~20.04.1
5.15.0-1071.75~20.04.1
5.15.0-1072.76~20.04.1
5.15.0-1073.77~20.04.1
5.15.0-1074.78~20.04.1
5.15.0-1075.79~20.04.1
5.15.0-1076.80~20.04.1
5.15.0-1077.81~20.04.1
5.15.0-1078.82~20.04.1
5.15.0-1079.83~20.04.1
5.15.0-1081.85~20.04.1
5.15.0-1082.86~20.04.1
5.15.0-1083.87~20.04.1
5.15.0-1084.88~20.04.1
5.15.0-1085.89~20.04.1
5.15.0-1086.90~20.04.1
5.15.0-1087.91~20.04.1
5.15.0-1088.92~20.04.1
5.15.0-1090.94~20.04.1
5.15.0-1091.95~20.04.1
5.15.0-1092.96~20.04.1
5.15.0-1093.97~20.04.2
5.15.0-1094.98~20.04.1
5.15.0-1095.99~20.04.1
5.15.0-1096.100~20.04.1
5.15.0-1097.101~20.04.1
5.15.0-1098.102~20.04.1
5.15.0-1099.103~20.04.1
5.15.0-1100.104~20.04.1
5.15.0-1102.106~20.04.1
5.15.0-1103.107~20.04.1
5.15.0-1105.109~20.04.1
5.15.0-1106.110~20.04.1
5.15.0-1107.111~20.04.1
5.15.0-1108.112~20.04.1
5.15.0-1109.113~20.04.1
5.15.0-1110.114~20.04.1
5.15.0-1111.115~20.04.1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-image-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.15-headers-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-riscv-5.15-tools-5.15.0-1111",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1111-generic",
            "binary_version":  "5.15.0-1111.115~20.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Pro:FIPS-preview:22.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1042.47+fips1
5.15.0-1051.56+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-5.15.0-1051",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-5.15.0-1051",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.15.0-1051",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1051-aws-fips",
            "binary_version":  "5.15.0-1051.56+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1053.61+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.15.0-1053",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.15.0-1053",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.15.0-1053",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1053-azure-fips",
            "binary_version":  "5.15.0-1053.61+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-73.80+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-fips-headers-5.15.0-73",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-5.15.0-73",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-host",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-73-fips",
            "binary_version":  "5.15.0-73.80+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1048.56+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.15.0-1048",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.15.0-1048",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1048-gcp-fips",
            "binary_version":  "5.15.0-1048.56+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Pro:FIPS-updates:22.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1051.56+fips1
5.15.0-1052.57+fips1
5.15.0-1053.58+fips1
5.15.0-1055.60+fips1
5.15.0-1056.61+fips1
5.15.0-1057.63+fips1
5.15.0-1060.66+fips1
5.15.0-1061.67+fips1
5.15.0-1062.68+fips1
5.15.0-1063.69+fips1
5.15.0-1064.70+fips1
5.15.0-1065.71+fips1
5.15.0-1066.72+fips1
5.15.0-1067.73+fips1
5.15.0-1068.74+fips1
5.15.0-1069.75+fips1
5.15.0-1070.76+fips1
5.15.0-1071.77+fips1
5.15.0-1072.78+fips1
5.15.0-1073.79+fips1
5.15.0-1076.83+fips1
5.15.0-1077.84+fips1
5.15.0-1078.85+fips1
5.15.0-1079.86+fips1
5.15.0-1080.87+fips1
5.15.0-1081.88+fips1
5.15.0-1082.89+fips1
5.15.0-1083.90+fips1
5.15.0-1084.91+fips1
5.15.0-1085.92+fips1
5.15.0-1086.93+fips1
5.15.0-1087.94+fips1
5.15.0-1088.95+fips1
5.15.0-1089.96+fips1
5.15.0-1090.97+fips1
5.15.0-1091.98+fips1
5.15.0-1092.99+fips1
5.15.0-1093.100+fips1
5.15.0-1095.102+fips1
5.15.0-1096.103+fips1
5.15.0-1097.104+fips1
5.15.0-1098.105+fips1
5.15.0-1099.106+fips1
5.15.0-1100.107+fips1
5.15.0-1101.108+fips1
5.15.0-1103.110+fips1
5.15.0-1104.111+fips1
5.15.0-1105.112+fips1
5.15.0-1106.113+fips1
5.15.0-1108.115+fips1
5.15.0-1109.116+fips1
5.15.0-1111.118+fips1
5.15.0-1112.119+fips1
5.15.0-1113.120+fips1
5.15.0-1114.121+fips1
5.15.0-1115.122+fips1
5.15.0-1116.123+fips1
5.15.0-1117.124+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-5.15.0-1117",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1117-aws-fips",
            "binary_version":  "5.15.0-1117.124+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1053.61+fips1
5.15.0-1058.66+fips1
5.15.0-1059.67+fips1
5.15.0-1060.69+fips1
5.15.0-1061.70+fips1
5.15.0-1063.72+fips1
5.15.0-1064.73+fips1
5.15.0-1065.74+fips1
5.15.0-1067.76+fips1
5.15.0-1068.77+fips1
5.15.0-1070.79+fips1
5.15.0-1071.80+fips1
5.15.0-1072.81+fips1
5.15.0-1073.82+fips1
5.15.0-1074.83+fips1
5.15.0-1075.84+fips1
5.15.0-1078.87+fips1
5.15.0-1079.88+fips1
5.15.0-1080.89+fips1
5.15.0-1082.91+fips1
5.15.0-1083.92+fips1
5.15.0-1085.94+fips1
5.15.0-1087.96+fips1
5.15.0-1088.97+fips1
5.15.0-1089.98+fips1
5.15.0-1090.99+fips1
5.15.0-1091.100+fips1
5.15.0-1094.103+fips1
5.15.0-1095.104+fips1
5.15.0-1096.105+fips1
5.15.0-1097.106+fips1
5.15.0-1098.107+fips1
5.15.0-1101.110+fips1
5.15.0-1102.111+fips1
5.15.0-1103.112+fips1
5.15.0-1109.118+fips1
5.15.0-1110.119+fips1
5.15.0-1111.120+fips1
5.15.0-1114.123+fips1
5.15.0-1116.125+fips1
5.15.0-1117.126+fips1
5.15.0-1118.127+fips1
5.15.0-1119.128+fips1
5.15.0-1121.130+fips1
5.15.0-1122.131+fips1
5.15.0-1123.132+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-5.15.0-1123",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-modules-involflt-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1123-azure-fips",
            "binary_version":  "5.15.0-1123.132+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-73.80+fips1
5.15.0-92.102+fips1
5.15.0-94.104+fips1
5.15.0-97.107+fips1
5.15.0-100.110+fips1
5.15.0-101.111+fips1
5.15.0-102.112+fips1
5.15.0-105.115+fips1
5.15.0-106.116+fips1
5.15.0-107.117+fips1
5.15.0-111.121+fips1
5.15.0-113.123+fips1
5.15.0-115.125+fips1
5.15.0-117.127+fips1
5.15.0-118.128+fips1
5.15.0-119.129+fips1
5.15.0-121.131+fips1
5.15.0-122.132+fips1
5.15.0-124.134+fips1
5.15.0-125.135+fips1
5.15.0-127.137+fips1
5.15.0-128.138+fips1
5.15.0-130.140+fips1
5.15.0-131.141+fips1
5.15.0-133.144+fips1
5.15.0-134.145+fips1
5.15.0-135.146+fips1
5.15.0-136.147+fips1
5.15.0-138.148+fips1
5.15.0-139.149+fips1
5.15.0-140.150+fips1
5.15.0-141.151+fips1
5.15.0-142.152+fips1
5.15.0-143.153+fips1
5.15.0-144.157+fips1
5.15.0-145.158+fips1
5.15.0-152.162+fips1
5.15.0-153.163+fips1
5.15.0-156.166+fips1
5.15.0-157.167+fips1
5.15.0-160.170+fips1
5.15.0-161.171+fips1
5.15.0-163.173+fips1
5.15.0-164.174+fips1
5.15.0-168.178+fips1
5.15.0-170.180+fips1
5.15.0-171.181+fips1
5.15.0-173.183+fips1
5.15.0-174.184+fips1
5.15.0-176.186+fips1
5.15.0-177.187+fips1
5.15.0-179.189+fips1
5.15.0-181.191+fips1
5.15.0-185.195+fips1
5.15.0-186.196+fips1
5.15.0-190.200+fips1
5.15.0-191.201+fips1
5.15.0-194.204+fips1
5.15.0-198.208+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-fips-cloud-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-fips-headers-5.15.0-198",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-5.15.0-198",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-198-fips",
            "binary_version":  "5.15.0-198.208+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1048.56+fips1
5.15.0-1055.63+fips2
5.15.0-1058.66+fips1
5.15.0-1059.67+fips1
5.15.0-1060.68+fips1
5.15.0-1062.70+fips1
5.15.0-1063.71+fips1
5.15.0-1064.72+fips1
5.15.0-1065.73+fips1
5.15.0-1066.74+fips1
5.15.0-1067.75+fips1
5.15.0-1068.76+fips1
5.15.0-1069.77+fips1
5.15.0-1070.78+fips1
5.15.0-1071.79+fips1
5.15.0-1072.80+fips1
5.15.0-1073.81+fips1
5.15.0-1074.83+fips1
5.15.0-1075.84+fips1
5.15.0-1077.86+fips1
5.15.0-1078.87+fips1
5.15.0-1079.88+fips1
5.15.0-1080.89+fips1
5.15.0-1081.90+fips1
5.15.0-1082.91+fips1
5.15.0-1083.92+fips1
5.15.0-1084.93+fips1
5.15.0-1085.94+fips1
5.15.0-1086.95+fips1
5.15.0-1087.96+fips1
5.15.0-1088.97+fips1
5.15.0-1090.99+fips1
5.15.0-1091.100+fips1
5.15.0-1092.101+fips1
5.15.0-1093.102+fips1
5.15.0-1095.104+fips1
5.15.0-1096.105+fips1
5.15.0-1097.106+fips1
5.15.0-1098.107+fips1
5.15.0-1099.108+fips1
5.15.0-1100.109+fips1
5.15.0-1101.110+fips1
5.15.0-1103.112+fips1
5.15.0-1104.113+fips1
5.15.0-1105.114+fips1
5.15.0-1106.115+fips1
5.15.0-1108.117+fips1
5.15.0-1109.118+fips1
5.15.0-1111.121+fips1
5.15.0-1112.122+fips1
5.15.0-1114.124+fips1
5.15.0-1115.125+fips1
5.15.0-1116.126+fips1
5.15.0-1118.128+fips1

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-5.15.0-1118",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1118-gcp-fips",
            "binary_version":  "5.15.0-1118.128+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Pro:FIPS-updates:24.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49+fips1

Affected versions

6.*
6.8.0-1035.37+fips1
6.8.0-1036.38+fips1
6.8.0-1038.40+fips1
6.8.0-1039.41+fips1
6.8.0-1040.42+fips1
6.8.0-1041.43+fips1
6.8.0-1042.44+fips1
6.8.0-1043.45+fips1
6.8.0-1044.46+fips1
6.8.0-1045.47+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-aws-fips-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-aws-fips-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-aws-fips",
            "binary_version":  "6.8.0-1046.49+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.52+fips1

Affected versions

6.*
6.8.0-1034.39+fips1
6.8.0-1040.46+fips1
6.8.0-1044.50+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-azure-fips-cloud-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-headers-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-azure-fips-tools-6.8.0-1046",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-buildinfo-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-involflt-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1046-azure-fips",
            "binary_version":  "6.8.0-1046.52+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100+fips1

Affected versions

6.*
6.8.0-38.38+fips4
6.8.0-78.78+fips1
6.8.0-79.79+fips1
6.8.0-83.83+fips1
6.8.0-84.84+fips1
6.8.0-85.85+fips1
6.8.0-86.87+fips1
6.8.0-87.88+fips1
6.8.0-88.89+fips1
6.8.0-90.91+fips1
6.8.0-94.96+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-cloud-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-headers-6.8.0-100",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-lib-rust-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-fips-tools-6.8.0-100",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-hmac-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-ipu6-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-modules-usbio-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-100-fips",
            "binary_version":  "6.8.0-100.100+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50+fips1

Affected versions

6.*
6.8.0-1036.38+fips1
6.8.0-1037.39+fips1
6.8.0-1039.41+fips1
6.8.0-1040.42+fips1
6.8.0-1041.43+fips1
6.8.0-1042.45+fips1
6.8.0-1043.46+fips1
6.8.0-1044.47+fips1
6.8.0-1045.48+fips1
6.8.0-1046.49+fips1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-headers-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-gcp-fips-tools-6.8.0-1047",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-headers-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-image-unsigned-hmac-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-modules-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        },
        {
            "binary_name":  "linux-tools-6.8.0-1047-gcp-fips",
            "binary_version":  "6.8.0-1047.50+fips1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Pro:Realtime:22.04:LTS
linux-intel-iot-realtime

Package

Name
linux-intel-iot-realtime
Purl
pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1021.26
5.15.0-1022.27
5.15.0-1023.28
5.15.0-1024.29
5.15.0-1028.33
5.15.0-1033.35
5.15.0-1034.36
5.15.0-1035.37
5.15.0-1036.38
5.15.0-1037.39
5.15.0-1038.40
5.15.0-1039.41
5.15.0-1040.42
5.15.0-1041.43
5.15.0-1042.44
5.15.0-1043.45
5.15.0-1044.46
5.15.0-1046.48
5.15.0-1047.49
5.15.0-1048.50
5.15.0-1049.51
5.15.0-1050.52
5.15.0-1053.55
5.15.0-1054.56
5.15.0-1055.57
5.15.0-1056.58
5.15.0-1057.59
5.15.0-1058.60
5.15.0-1059.61
5.15.0-1060.62
5.15.0-1061.63
5.15.0-1063.65
5.15.0-1064.66
5.15.0-1066.68
5.15.0-1071.73
5.15.0-1072.74
5.15.0-1073.75
5.15.0-1074.76
5.15.0-1075.77
5.15.0-1076.78
5.15.0-1077.79
5.15.0-1078.80
5.15.0-1079.81
5.15.0-1080.82
5.15.0-1081.83
5.15.0-1082.84
5.15.0-1083.85
5.15.0-1084.86
5.15.0-1085.87
5.15.0-1086.88
5.15.0-1087.89
5.15.0-1088.90
5.15.0-1089.91
5.15.0-1090.92
5.15.0-1091.93
5.15.0-1092.94
5.15.0-1093.95
5.15.0-1094.96
5.15.0-1096.98
5.15.0-1097.99
5.15.0-1098.100
5.15.0-1099.101
5.15.0-1100.102
5.15.0-1101.103
5.15.0-1103.105
5.15.0-1104.106
5.15.0-1105.107
5.15.0-1106.108
5.15.0-1107.109
5.15.0-1108.110
5.15.0-1109.111

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-5.15.0-1109",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-headers-5.15.0-1109",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-5.15.0-1109",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-common",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-intel-iot-realtime-tools-host",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version":  "5.15.0-1109.111"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1009.9
5.15.0-1011.11
5.15.0-1014.14
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1024.25
5.15.0-1025.28
5.15.0-1028.31
5.15.0-1029.32
5.15.0-1030.33
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1039.42
5.15.0-1040.45
5.15.0-1041.46
5.15.0-1042.47
5.15.0-1043.48
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1046.52
5.15.0-1048.54
5.15.0-1049.55
5.15.0-1050.56
5.15.0-1051.57
5.15.0-1052.58
5.15.0-1053.59
5.15.0-1054.60
5.15.0-1055.62
5.15.0-1056.63
5.15.0-1057.64
5.15.0-1058.66
5.15.0-1061.69
5.15.0-1062.70
5.15.0-1063.71
5.15.0-1064.72
5.15.0-1065.73
5.15.0-1066.74
5.15.0-1067.75
5.15.0-1068.76
5.15.0-1069.77
5.15.0-1070.78
5.15.0-1071.79
5.15.0-1072.80
5.15.0-1073.81
5.15.0-1074.82
5.15.0-1075.83
5.15.0-1076.84
5.15.0-1077.85
5.15.0-1078.86
5.15.0-1079.87
5.15.0-1080.88
5.15.0-1081.89
5.15.0-1082.91
5.15.0-1083.92
5.15.0-1084.93
5.15.0-1085.94
5.15.0-1086.95
5.15.0-1087.96
5.15.0-1088.97
5.15.0-1089.98
5.15.0-1090.99
5.15.0-1091.100
5.15.0-1092.101
5.15.0-1093.102
5.15.0-1094.103
5.15.0-1095.104
5.15.0-1096.105
5.15.0-1097.106
5.15.0-1098.107
5.15.0-1099.108
5.15.0-1100.109
5.15.0-1102.111
5.15.0-1103.112
5.15.0-1104.113
5.15.0-1105.114
5.15.0-1107.116
5.15.0-1108.117
5.15.0-1110.119
5.15.0-1111.120
5.15.0-1112.121
5.15.0-1113.122
5.15.0-1114.123
5.15.0-1115.124
5.15.0-1116.125

Ecosystem specific

{
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-cloud-tools-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-headers-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-image-unsigned-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-modules-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-modules-extra-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-5.15.0-1116",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-common",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-headers-5.15.0-1116",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-tools-5.15.0-1116",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-tools-common",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-realtime-tools-host",
            "binary_version":  "5.15.0-1116.125"
        },
        {
            "binary_name":  "linux-tools-5.15.0-1116-realtime",
            "binary_version":  "5.15.0-1116.125"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-realtime-6.8

Package

Name
linux-realtime-6.8
Purl
pkg:deb/ubuntu/linux-realtime-6.8?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.1-1041.42~22.04.1

Affected versions

6.*
6.8.1-1004.4~22.04.1
6.8.1-1005.5~22.04.2
6.8.1-1006.6~22.04.1
6.8.1-1007.7~22.04.1
6.8.1-1008.8~22.04.1
6.8.1-1009.9~22.04.1
6.8.1-1010.10~22.04.1
6.8.1-1011.11~22.04.1
6.8.1-1012.12~22.04.1
6.8.1-1013.14~22.04.1
6.8.1-1014.15~22.04.1
6.8.1-1015.16~22.04.1
6.8.1-1016.17~22.04.1
6.8.1-1017.18~22.04.1
6.8.1-1018.19~22.04.1
6.8.1-1019.20~22.04.1
6.8.1-1020.21~22.04.1
6.8.1-1021.22~22.04.1
6.8.1-1022.23~22.04.1
6.8.1-1023.24~22.04.1
6.8.1-1024.25~22.04.1
6.8.1-1025.26~22.04.1
6.8.1-1026.27~22.04.1
6.8.1-1030.31~22.04.1
6.8.1-1031.32~22.04.1
6.8.1-1034.35~22.04.1
6.8.1-1035.36~22.04.1
6.8.1-1036.37~22.04.1
6.8.1-1037.38~22.04.1
6.8.1-1038.39~22.04.1
6.8.1-1039.40~22.04.1
6.8.1-1040.41~22.04.1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.8-cloud-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.8-headers-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.8-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42~22.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
Ubuntu:Pro:Realtime:24.04:LTS
linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-2037.38

Affected versions

6.*
6.7.0-2001.1
6.8.0-2001.1
6.8.0-2002.2
6.8.0-2004.4
6.8.0-2005.5
6.8.0-2006.6
6.8.0-2007.7
6.8.0-2008.8
6.8.0-2009.9
6.8.0-2010.10
6.8.0-2011.11
6.8.0-2012.12
6.8.0-2013.14
6.8.0-2014.15
6.8.0-2015.16
6.8.0-2016.17
6.8.0-2017.18
6.8.0-2018.19
6.8.0-2019.20
6.8.0-2022.23
6.8.0-2023.24
6.8.0-2024.25
6.8.0-2025.26
6.8.0-2026.27
6.8.0-2028.29
6.8.0-2029.30
6.8.0-2030.31
6.8.0-2031.32
6.8.0-2032.33
6.8.0-2033.34
6.8.0-2034.35
6.8.0-2035.36
6.8.0-2036.37

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-headers-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-image-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-modules-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-raspi-realtime-headers-6.8.0-2037",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-raspi-realtime-tools-6.8.0-2037",
            "binary_version":  "6.8.0-2037.38"
        },
        {
            "binary_name":  "linux-tools-6.8.0-2037-raspi-realtime",
            "binary_version":  "6.8.0-2037.38"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.1-1041.42

Affected versions

6.*
6.8.0-1008.19
6.8.1-1001.1
6.8.1-1002.2
6.8.1-1003.3
6.8.1-1004.4
6.8.1-1005.5
6.8.1-1006.6
6.8.1-1007.7
6.8.1-1008.8
6.8.1-1009.9
6.8.1-1010.10
6.8.1-1011.11
6.8.1-1012.12
6.8.1-1013.14
6.8.1-1014.15
6.8.1-1015.16
6.8.1-1016.17
6.8.1-1017.18
6.8.1-1018.19
6.8.1-1019.20
6.8.1-1020.21
6.8.1-1021.22
6.8.1-1022.23
6.8.1-1023.24
6.8.1-1024.25
6.8.1-1025.26
6.8.1-1026.27
6.8.1-1030.31
6.8.1-1031.32
6.8.1-1033.34
6.8.1-1034.35
6.8.1-1035.36
6.8.1-1036.37
6.8.1-1037.38
6.8.1-1038.39
6.8.1-1039.40
6.8.1-1040.41

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-headers-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-modules-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-realtime-cloud-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-realtime-headers-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-realtime-tools-6.8.1-1041",
            "binary_version":  "6.8.1-1041.42"
        },
        {
            "binary_name":  "linux-tools-6.8.1-1041-realtime",
            "binary_version":  "6.8.1-1041.42"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"
linux-realtime-6.14

Package

Name
linux-realtime-6.14
Purl
pkg:deb/ubuntu/linux-realtime-6.14?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.14.0-1014.14~24.04.1

Affected versions

6.*
6.14.0-1003.3~24.04.3
6.14.0-1010.10~24.04.1
6.14.0-1011.11~24.04.1
6.14.0-1012.12~24.04.1
6.14.0-1013.13~24.04.1

Ecosystem specific

{
    "availability":  "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries":  [
        {
            "binary_name":  "linux-buildinfo-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-cloud-tools-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-headers-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-image-unsigned-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-modules-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-modules-extra-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-modules-iwlwifi-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-cloud-tools-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-headers-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-realtime-6.14-tools-6.14.0-1014",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name":  "linux-tools-6.14.0-1014-realtime",
            "binary_version":  "6.14.0-1014.14~24.04.1"
        }
    ],
    "priority_reason":  "The vulnerability depends on a hardware memory error (MCE) occurring on an SGX EPC page, which is a prerequisite event the attacker can neither invoke nor influence. The only userspace injection path (MADV_HWPOISON) requires CAP_SYS_ADMIN in the init user namespace."
}

Database specific

source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38334.json"