USN-7920-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-7920-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7920-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-7920-1
Upstream
Related
Published
2025-12-10T22:00:29.644609Z
Modified
2025-12-11T10:49:56.277413Z
Summary
linux, linux-aws, linux-gcp, linux-realtime vulnerabilities
Details

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Tracing infrastructure; - Netfilter; (CVE-2025-40018, CVE-2025-40232)

References

Affected packages

Ubuntu:25.10 / linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux@6.17.0-8.8?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-8.8

Affected versions

6.*

6.14.0-15.15
6.15.0-3.3
6.15.0-4.4
6.16.0-13.13
6.16.0-16.16
6.17.0-3.3
6.17.0-4.4
6.17.0-5.5
6.17.0-6.6
6.17.0-7.7

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "bpftool",
            "binary_version": "7.7.0+6.17.0-8.8"
        },
        {
            "binary_name": "linux-bpf-dev",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-8-generic-64k",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-8",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-headers-6.17.0-8",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-headers-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-headers-6.17.0-8-generic-64k",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-image-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-8-generic-64k",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-lib-rust-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-libc-dev",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-6.17.0-8-generic-64k",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-ipu6-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-ipu7-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-usbio-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-modules-vision-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-perf",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-source-6.17.0",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-tools-6.17.0-8",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-tools-6.17.0-8-generic",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-tools-6.17.0-8-generic-64k",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-tools-common",
            "binary_version": "6.17.0-8.8"
        },
        {
            "binary_name": "linux-tools-host",
            "binary_version": "6.17.0-8.8"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7920-1.json"

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "id": "CVE-2025-40018",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        },
        {
            "id": "CVE-2025-40232",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        }
    ]
}

Ubuntu:25.10 / linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws@6.17.0-1005.5?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1005.5

Affected versions

6.*

6.14.0-1005.5
6.14.0-1007.7+25.10.2
6.16.0-1001.1
6.17.0-1001.1
6.17.0-1002.2
6.17.0-1003.3
6.17.0-1004.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-cloud-tools-6.17.0-1005",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-aws-headers-6.17.0-1005",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-aws-tools-6.17.0-1005",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1005-aws",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1005-aws-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1005-aws",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1005-aws-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-headers-6.17.0-1005-aws",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-headers-6.17.0-1005-aws-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1005-aws",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1005-aws-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-modules-6.17.0-1005-aws",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-modules-6.17.0-1005-aws-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-tools-6.17.0-1005-aws",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-tools-6.17.0-1005-aws-64k",
            "binary_version": "6.17.0-1005.5"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7920-1.json"

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "id": "CVE-2025-40018",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        },
        {
            "id": "CVE-2025-40232",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        }
    ]
}

Ubuntu:25.10 / linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp@6.17.0-1005.5?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1005.5

Affected versions

6.*

6.14.0-1006.6
6.14.0-1009.9+25.10.1
6.16.0-1001.1
6.17.0-1001.1
6.17.0-1002.2
6.17.0-1003.3
6.17.0-1004.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.17.0-1005-gcp",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1005-gcp-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-gcp-headers-6.17.0-1005",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-gcp-tools-6.17.0-1005",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-headers-6.17.0-1005-gcp",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-headers-6.17.0-1005-gcp-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1005-gcp",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1005-gcp-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-modules-6.17.0-1005-gcp",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-modules-6.17.0-1005-gcp-64k",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-tools-6.17.0-1005-gcp",
            "binary_version": "6.17.0-1005.5"
        },
        {
            "binary_name": "linux-tools-6.17.0-1005-gcp-64k",
            "binary_version": "6.17.0-1005.5"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7920-1.json"

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "id": "CVE-2025-40018",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        },
        {
            "id": "CVE-2025-40232",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        }
    ]
}

Ubuntu:25.10 / linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime@6.17.0-1004.5?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1004.5

Affected versions

6.*

6.14.0-1002.2
6.17.0-1001.2
6.17.0-1002.3
6.17.0-1003.4

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-headers-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-modules-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-6.17.0-1004",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-realtime-headers-6.17.0-1004",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-realtime-tools-6.17.0-1004",
            "binary_version": "6.17.0-1004.5"
        },
        {
            "binary_name": "linux-tools-6.17.0-1004-realtime",
            "binary_version": "6.17.0-1004.5"
        }
    ],
    "availability": "No subscription required"
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7920-1.json"

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "id": "CVE-2025-40018",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        },
        {
            "id": "CVE-2025-40232",
            "severity": [
                {
                    "type": "Ubuntu",
                    "score": "medium"
                }
            ]
        }
    ]
}