UBUNTU-CVE-2025-38388

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2025-38388

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json

JSON Data

https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2025-38388

Upstream

CVE-2025-38388

Downstream

USN (22)

Related

USN (22)

Published

2025-07-25T13:15:00Z

Modified

2026-11-11T09:45:13Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Ubuntu - low

Summary

[none]

Details

In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Replace mutex with rwlock to avoid sleep in atomic context The current use of a mutex to protect the notifier hashtable accesses can lead to issues in the atomic context. It results in the below kernel warnings: | BUG: sleeping function called from invalid context at kernel/locking/mutex.c:258 | in_atomic(): 1, irqs_disabled(): 1, non_block: 0, pid: 9, name: kworker/0:0 | preempt_count: 1, expected: 0 | RCU nest depth: 0, expected: 0 | CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.14.0 #4 | Workqueue: ffa_pcpu_irq_notification notif_pcpu_irq_work_fn | Call trace: | show_stack+0x18/0x24 (C) | dump_stack_lvl+0x78/0x90 | dump_stack+0x18/0x24 | __might_resched+0x114/0x170 | __might_sleep+0x48/0x98 | mutex_lock+0x24/0x80 | handle_notif_callbacks+0x54/0xe0 | notif_get_and_handle+0x40/0x88 | generic_exec_single+0x80/0xc0 | smp_call_function_single+0xfc/0x1a0 | notif_pcpu_irq_work_fn+0x2c/0x38 | process_one_work+0x14c/0x2b4 | worker_thread+0x2e4/0x3e0 | kthread+0x13c/0x210 | ret_from_fork+0x10/0x20 To address this, replace the mutex with an rwlock to protect the notifier hashtable accesses. This ensures that read-side locking does not sleep and multiple readers can acquire the lock concurrently, avoiding unnecessary contention and potential deadlocks. Writer access remains exclusive, preserving correctness. This change resolves warnings from lockdep about potential sleep in atomic context.

References

Affected packages

Ubuntu:16.04:LTS

linux-hwe-edge

Package

Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.8.0-28.30~16.04.1

4.8.0-30.32~16.04.1

4.8.0-32.34~16.04.1

4.8.0-34.36~16.04.1

4.10.0-14.16~16.04.1

4.10.0-19.21~16.04.1

4.10.0-20.22~16.04.1

4.10.0-21.23~16.04.1

4.10.0-22.24~16.04.1

4.10.0-24.28~16.04.1

4.10.0-26.30~16.04.1

4.11.0-13.19~16.04.1

4.11.0-14.20~16.04.1

4.13.0-16.19~16.04.3

4.13.0-17.20~16.04.1

4.13.0-19.22~16.04.1

4.13.0-21.24~16.04.1

4.13.0-25.29~16.04.2

4.15.0-13.14~16.04.1

4.15.0-15.16~16.04.1

4.15.0-20.21~16.04.1

4.15.0-22.24~16.04.1

4.15.0-23.25~16.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "crypto-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "dasd-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fat-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "floppy-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "input-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ipmi-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "irda-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "kernel-image-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-tools-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-extra-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-source-4.15.0",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "md-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "message-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "mouse-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "multipath-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nfs-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "parport-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "pata-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "plip-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ppp-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "sata-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "scsi-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "serial-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "storage-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "usb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "virtio-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "vlan-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:18.04:LTS

linux-aws-5.0

Package

Name: linux-aws-5.0
Purl: pkg:deb/ubuntu/linux-aws-5.0?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-1021.24~18.04.1

5.0.0-1022.25~18.04.1

5.0.0-1023.26~18.04.1

5.0.0-1024.27~18.04.1

5.0.0-1025.28

5.0.0-1027.30

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-aws-headers-5.0.0-1027",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-buildinfo-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-headers-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-image-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-modules-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-tools-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-5.3

Package

Name: linux-aws-5.3
Purl: pkg:deb/ubuntu/linux-aws-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1016.17~18.04.1

5.3.0-1017.18~18.04.1

5.3.0-1019.21~18.04.1

5.3.0-1023.25~18.04.1

5.3.0-1028.30~18.04.1

5.3.0-1030.32~18.04.1

5.3.0-1032.34~18.04.2

5.3.0-1033.35

5.3.0-1034.36

5.3.0-1035.37

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-headers-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-image-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-modules-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-tools-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.2

4.15.0-1003.3

4.15.0-1004.4

4.15.0-1008.8

4.15.0-1009.9

4.15.0-1012.12

4.15.0-1013.13

4.15.0-1014.14

4.15.0-1018.18

4.15.0-1019.19

4.15.0-1021.21

4.15.0-1022.23

4.15.0-1023.24

4.15.0-1025.26

4.15.0-1028.29

4.15.0-1030.31

4.15.0-1031.32

4.15.0-1032.33

4.15.0-1035.36

4.15.0-1036.38

4.15.0-1037.39

4.18.0-1011.11~18.04.1

4.18.0-1013.13~18.04.1

4.18.0-1014.14~18.04.1

4.18.0-1018.18~18.04.1

4.18.0-1019.19~18.04.1

4.18.0-1020.20~18.04.1

4.18.0-1023.24~18.04.1

4.18.0-1024.25~18.04.1

4.18.0-1025.27~18.04.1

5.*

5.0.0-1014.14~18.04.1

5.0.0-1016.17~18.04.1

5.0.0-1018.19~18.04.1

5.0.0-1020.21~18.04.1

5.0.0-1022.23~18.04.1

5.0.0-1023.24~18.04.1

5.0.0-1025.27~18.04.1

5.0.0-1027.29~18.04.1

5.0.0-1028.30~18.04.1

5.0.0-1029.31~18.04.1

5.0.0-1031.33

5.0.0-1032.34

5.0.0-1035.37

5.0.0-1036.38

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-azure-headers-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-azure-tools-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-buildinfo-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-headers-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-modules-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-tools-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-5.3

Package

Name: linux-azure-5.3
Purl: pkg:deb/ubuntu/linux-azure-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8~18.04.1

5.3.0-1008.9~18.04.1

5.3.0-1009.10~18.04.1

5.3.0-1010.11~18.04.1

5.3.0-1012.13~18.04.1

5.3.0-1013.14~18.04.1

5.3.0-1016.17~18.04.1

5.3.0-1018.19~18.04.1

5.3.0-1019.20~18.04.1

5.3.0-1020.21~18.04.1

5.3.0-1022.23~18.04.1

5.3.0-1028.29~18.04.1

5.3.0-1031.32~18.04.1

5.3.0-1032.33~18.04.1

5.3.0-1034.35~18.04.1

5.3.0-1035.36

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-headers-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-modules-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-tools-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-edge

Package

Name: linux-azure-edge
Purl: pkg:deb/ubuntu/linux-azure-edge?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.18.0-1006.6~18.04.1

4.18.0-1007.7~18.04.1

4.18.0-1008.8~18.04.1

5.*

5.0.0-1012.12~18.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-azure-edge-tools-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-azure-headers-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1001.1

4.15.0-1003.3

4.15.0-1005.5

4.15.0-1006.6

4.15.0-1008.8

4.15.0-1009.9

4.15.0-1010.10

4.15.0-1014.14

4.15.0-1015.15

4.15.0-1017.18

4.15.0-1018.19

4.15.0-1019.20

4.15.0-1021.22

4.15.0-1023.24

4.15.0-1024.25

4.15.0-1025.26

4.15.0-1026.27

4.15.0-1027.28

4.15.0-1028.29

4.15.0-1029.31

4.15.0-1030.32

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1036.38

4.15.0-1037.39

4.15.0-1040.42

4.15.0-1042.45

4.15.0-1044.70

5.*

5.0.0-1020.20~18.04.1

5.0.0-1021.21~18.04.1

5.0.0-1025.26~18.04.1

5.0.0-1026.27~18.04.1

5.0.0-1028.29~18.04.1

5.0.0-1029.30~18.04.1

5.0.0-1031.32

5.0.0-1033.34

5.0.0-1034.35

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-gcp-headers-5.0.0-1034",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-gcp-tools-5.0.0-1034",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-headers-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-modules-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-tools-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-5.3

Package

Name: linux-gcp-5.3
Purl: pkg:deb/ubuntu/linux-gcp-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1008.9~18.04.1

5.3.0-1009.10~18.04.1

5.3.0-1010.11~18.04.1

5.3.0-1012.13~18.04.1

5.3.0-1014.15~18.04.1

5.3.0-1016.17~18.04.1

5.3.0-1017.18~18.04.1

5.3.0-1018.19~18.04.1

5.3.0-1020.22~18.04.1

5.3.0-1026.28~18.04.1

5.3.0-1029.31~18.04.1

5.3.0-1030.32~18.04.1

5.3.0-1032.34~18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gke-4.15

Package

Name: linux-gke-4.15
Purl: pkg:deb/ubuntu/linux-gke-4.15?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1030.32

4.15.0-1032.34

4.15.0-1033.35

4.15.0-1034.36

4.15.0-1036.38

4.15.0-1037.39

4.15.0-1040.42

4.15.0-1041.43

4.15.0-1042.44

4.15.0-1044.46

4.15.0-1045.48

4.15.0-1046.49

4.15.0-1048.51

4.15.0-1049.52

4.15.0-1050.53

4.15.0-1052.55

4.15.0-1055.58

4.15.0-1057.60

4.15.0-1058.61

4.15.0-1059.62

4.15.0-1063.66

4.15.0-1064.67

4.15.0-1066.69

4.15.0-1067.70

4.15.0-1069.72

4.15.0-1070.73

4.15.0-1072.76

4.15.0-1073.78

4.15.0-1074.79

4.15.0-1076.81

4.15.0-1077.82

4.15.0-1078.83

4.15.0-1079.84

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-headers-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-modules-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-modules-extra-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-tools-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gke-5.4

Package

Name: linux-gke-5.4
Purl: pkg:deb/ubuntu/linux-gke-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1025.25~18.04.1

5.4.0-1027.28~18.04.1

5.4.0-1029.31~18.04.1

5.4.0-1030.32~18.04.1

5.4.0-1032.34~18.04.1

5.4.0-1033.35~18.04.1

5.4.0-1035.37~18.04.1

5.4.0-1036.38~18.04.1

5.4.0-1037.39~18.04.1

5.4.0-1039.41~18.04.1

5.4.0-1040.42~18.04.1

5.4.0-1042.44~18.04.1

5.4.0-1043.45~18.04.1

5.4.0-1044.46~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1049.52~18.04.1

5.4.0-1051.54~18.04.1

5.4.0-1052.55~18.04.1

5.4.0-1053.56~18.04.1

5.4.0-1054.57~18.04.1

5.4.0-1055.58~18.04.1

5.4.0-1056.59~18.04.1

5.4.0-1057.60~18.04.1

5.4.0-1059.62~18.04.1

5.4.0-1061.64~18.04.1

5.4.0-1062.65~18.04.1

5.4.0-1063.66~18.04.1

5.4.0-1065.68~18.04.1

5.4.0-1066.69~18.04.1

5.4.0-1067.70~18.04.1

5.4.0-1068.71~18.04.1

5.4.0-1071.76~18.04.3

5.4.0-1072.77~18.04.1

5.4.0-1074.79~18.04.1

5.4.0-1076.82~18.04.1

5.4.0-1078.84~18.04.1

5.4.0-1080.86~18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gkeop-5.4

Package

Name: linux-gkeop-5.4
Purl: pkg:deb/ubuntu/linux-gkeop-5.4?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1001.1

5.4.0-1003.3

5.4.0-1004.5

5.4.0-1005.6

5.4.0-1007.8~18.04.1

5.4.0-1008.9~18.04.1

5.4.0-1009.10~18.04.1

5.4.0-1010.11~18.04.1

5.4.0-1011.12~18.04.2

5.4.0-1012.13~18.04.1

5.4.0-1013.14~18.04.1

5.4.0-1014.15~18.04.1

5.4.0-1015.16~18.04.1

5.4.0-1016.17~18.04.1

5.4.0-1018.19~18.04.1

5.4.0-1021.22~18.04.1

5.4.0-1022.23~18.04.1

5.4.0-1023.24~18.04.1

5.4.0-1024.25~18.04.1

5.4.0-1025.26~18.04.1

5.4.0-1026.27~18.04.1

5.4.0-1027.28~18.04.1

5.4.0-1029.30~18.04.2

5.4.0-1031.32~18.04.1

5.4.0-1032.33~18.04.1

5.4.0-1033.34~18.04.1

5.4.0-1034.35~18.04.1

5.4.0-1036.37~18.04.1

5.4.0-1037.38~18.04.1

5.4.0-1038.39~18.04.1

5.4.0-1039.40~18.04.1

5.4.0-1040.41~18.04.1

5.4.0-1043.44~18.04.1

5.4.0-1046.48~18.04.1

5.4.0-1048.51~18.04.1

5.4.0-1049.52~18.04.1

5.4.0-1051.54~18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-source-5.4.0",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe

Package

Name: linux-hwe
Purl: pkg:deb/ubuntu/linux-hwe?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.18.0-13.14~18.04.1

4.18.0-14.15~18.04.1

4.18.0-15.16~18.04.1

4.18.0-16.17~18.04.1

4.18.0-17.18~18.04.1

4.18.0-18.19~18.04.1

4.18.0-20.21~18.04.1

4.18.0-21.22~18.04.1

4.18.0-22.23~18.04.1

4.18.0-24.25~18.04.1

4.18.0-25.26~18.04.1

5.*

5.0.0-23.24~18.04.1

5.0.0-25.26~18.04.1

5.0.0-27.28~18.04.1

5.0.0-29.31~18.04.1

5.0.0-31.33~18.04.1

5.0.0-32.34~18.04.2

5.0.0-35.38~18.04.1

5.0.0-36.39~18.04.1

5.0.0-37.40~18.04.1

5.3.0-26.28~18.04.1

5.3.0-28.30~18.04.1

5.3.0-40.32~18.04.1

5.3.0-42.34~18.04.1

5.3.0-45.37~18.04.1

5.3.0-46.38~18.04.1

5.3.0-51.44~18.04.2

5.3.0-53.47~18.04.1

5.3.0-59.53~18.04.1

5.3.0-61.55~18.04.1

5.3.0-62.56~18.04.1

5.3.0-64.58~18.04.1

5.3.0-65.59

5.3.0-66.60

5.3.0-67.61

5.3.0-68.63

5.3.0-69.65

5.3.0-70.66

5.3.0-72.68

5.3.0-73.69

5.3.0-74.70

5.3.0-75.71

5.3.0-76.72

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "crypto-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fat-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "floppy-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fs-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "input-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "ipmi-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "kernel-image-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-headers-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-headers-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-headers-5.3.0-76",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-tools-5.3.0-76",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-udebs-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-modules-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-modules-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-source-5.3.0",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-tools-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-tools-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "md-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "message-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "mouse-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "multipath-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nfs-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "parport-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "pata-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "plip-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "ppp-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "sata-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "scsi-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "serial-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "storage-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "usb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "virtio-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "vlan-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-edge

Package

Name: linux-hwe-edge
Purl: pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-15.16~18.04.1

5.0.0-16.17~18.04.1

5.0.0-17.18~18.04.1

5.0.0-19.20~18.04.1

5.0.0-20.21~18.04.1

5.3.0-19.20~18.04.2

5.3.0-22.24~18.04.1

5.3.0-23.25~18.04.1

5.3.0-23.25~18.04.2

5.3.0-24.26~18.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "crypto-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "dasd-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fat-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "floppy-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "input-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ipmi-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "kernel-image-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-tools-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-source-5.3.0",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "md-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "message-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "mouse-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "multipath-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nfs-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "parport-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "pata-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "plip-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ppp-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "sata-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "scsi-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "serial-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "storage-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "usb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "virtio-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "vlan-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem

Package

Name: linux-oem
Purl: pkg:deb/ubuntu/linux-oem?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

4.*

4.15.0-1002.3

4.15.0-1004.5

4.15.0-1006.9

4.15.0-1008.11

4.15.0-1009.12

4.15.0-1012.15

4.15.0-1013.16

4.15.0-1015.18

4.15.0-1017.20

4.15.0-1018.21

4.15.0-1021.24

4.15.0-1024.29

4.15.0-1026.31

4.15.0-1028.33

4.15.0-1030.35

4.15.0-1033.38

4.15.0-1034.39

4.15.0-1035.40

4.15.0-1036.41

4.15.0-1038.43

4.15.0-1039.44

4.15.0-1043.48

4.15.0-1045.50

4.15.0-1050.57

4.15.0-1056.65

4.15.0-1057.66

4.15.0-1059.68

4.15.0-1063.72

4.15.0-1064.73

4.15.0-1065.75

4.15.0-1066.76

4.15.0-1067.77

4.15.0-1069.79

4.15.0-1073.83

4.15.0-1076.86

4.15.0-1079.89

4.15.0-1080.90

4.15.0-1081.91

4.15.0-1087.97

4.15.0-1090.100

4.15.0-1091.101

4.15.0-1093.103

4.15.0-1094.104

4.15.0-1096.106

4.15.0-1097.107

4.15.0-1099.109

4.15.0-1100.110

4.15.0-1101.112

4.15.0-1102.113

4.15.0-1103.114

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "crypto-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fat-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "floppy-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "input-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "irda-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "kernel-image-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-buildinfo-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-headers-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-modules-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-oem-headers-4.15.0-1103",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-oem-tools-4.15.0-1103",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-tools-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-udebs-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "md-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "message-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "mouse-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "multipath-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nfs-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "parport-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "pata-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "plip-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "ppp-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "sata-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "scsi-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "serial-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "usb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "virtio-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "vlan-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-5.0

Package

Name: linux-oracle-5.0
Purl: pkg:deb/ubuntu/linux-oracle-5.0?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.0.0-1007.12~18.04.1

5.0.0-1008.13~18.04.1

5.0.0-1009.14~18.04.1

5.0.0-1010.15~18.04.1

5.0.0-1011.16

5.0.0-1013.18

5.0.0-1014.19

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-headers-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-modules-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-tools-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-5.3

Package

Name: linux-oracle-5.3
Purl: pkg:deb/ubuntu/linux-oracle-5.3?arch=source&distro=bionic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1011.12~18.04.1

5.3.0-1013.14~18.04.1

5.3.0-1014.15~18.04.1

5.3.0-1016.18~18.04.1

5.3.0-1018.20~18.04.1

5.3.0-1024.26~18.04.1

5.3.0-1027.29~18.04.1

5.3.0-1028.30~18.04.1

5.3.0-1030.32~18.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:20.04:LTS

linux-aws-5.11

Package

Name: linux-aws-5.11
Purl: pkg:deb/ubuntu/linux-aws-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1009.9~20.04.2

5.11.0-1014.15~20.04.1

5.11.0-1016.17~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.2

5.11.0-1021.22~20.04.2

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-5.13

Package

Name: linux-aws-5.13
Purl: pkg:deb/ubuntu/linux-aws-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9~20.04.2

5.13.0-1011.12~20.04.1

5.13.0-1012.13~20.04.1

5.13.0-1014.15~20.04.1

5.13.0-1017.19~20.04.1

5.13.0-1019.21~20.04.1

5.13.0-1021.23~20.04.2

5.13.0-1022.24~20.04.1

5.13.0-1023.25~20.04.1

5.13.0-1025.27~20.04.1

5.13.0-1028.31~20.04.1

5.13.0-1029.32~20.04.1

5.13.0-1031.35~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-5.8

Package

Name: linux-aws-5.8
Purl: pkg:deb/ubuntu/linux-aws-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1035.37~20.04.1

5.8.0-1038.40~20.04.1

5.8.0-1041.43~20.04.1

5.8.0-1042.44~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-5.11

Package

Name: linux-azure-5.11
Purl: pkg:deb/ubuntu/linux-azure-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1007.7~20.04.2

5.11.0-1012.13~20.04.1

5.11.0-1013.14~20.04.1

5.11.0-1015.16~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-headers-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-modules-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-tools-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-5.13

Package

Name: linux-azure-5.13
Purl: pkg:deb/ubuntu/linux-azure-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1009.10~20.04.2

5.13.0-1012.14~20.04.1

5.13.0-1013.15~20.04.1

5.13.0-1014.16~20.04.1

5.13.0-1017.19~20.04.1

5.13.0-1021.24~20.04.1

5.13.0-1022.26~20.04.1

5.13.0-1023.27~20.04.1

5.13.0-1025.29~20.04.1

5.13.0-1028.33~20.04.1

5.13.0-1029.34~20.04.1

5.13.0-1031.37~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-5.8

Package

Name: linux-azure-5.8
Purl: pkg:deb/ubuntu/linux-azure-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1033.35~20.04.1

5.8.0-1036.38~20.04.1

5.8.0-1039.42~20.04.1

5.8.0-1040.43~20.04.1

5.8.0-1041.44~20.04.1

5.8.0-1042.45~20.04.1

5.8.0-1043.46~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1063.66+cvm2.2

5.4.0-1063.66+cvm3.2

5.4.0-1064.67+cvm1.1

5.4.0-1065.68+cvm2.1

5.4.0-1067.70+cvm1.1

5.4.0-1068.71+cvm1.1

5.4.0-1069.72+cvm1.1

5.4.0-1070.73+cvm1.1

5.4.0-1072.75+cvm1.1

5.4.0-1073.76+cvm1.1

5.4.0-1074.77+cvm1.1

5.4.0-1076.79+cvm1.1

5.4.0-1078.81+cvm1.1

5.4.0-1080.83+cvm1.1

5.4.0-1083.87+cvm1.1

5.4.0-1085.90+cvm1.1

5.4.0-1085.90+cvm2.1

5.4.0-1086.91+cvm1.1

5.4.0-1089.94+cvm1.2

5.4.0-1090.95+cvm1.1

5.4.0-1091.96+cvm1.1

5.4.0-1092.97+cvm1.1

5.4.0-1095.101+cvm1.1

5.4.0-1098.104+cvm1.1

5.4.0-1100.106+cvm1.1

5.4.0-1103.109+cvm1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-image-unsigned-5.4.0-1103-azure-fde",
            "binary_version": "5.4.0-1103.109+cvm1.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-5.11

Package

Name: linux-gcp-5.11
Purl: pkg:deb/ubuntu/linux-gcp-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1009.10~20.04.1

5.11.0-1014.16~20.04.1

5.11.0-1017.19~20.04.1

5.11.0-1018.20~20.04.2

5.11.0-1020.22~20.04.1

5.11.0-1021.23~20.04.1

5.11.0-1022.24~20.04.1

5.11.0-1023.25~20.04.1

5.11.0-1024.26~20.04.1

5.11.0-1026.29~20.04.1

5.11.0-1028.32~20.04.1

5.11.0-1029.33~20.04.3

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-headers-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-modules-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-tools-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-5.13

Package

Name: linux-gcp-5.13
Purl: pkg:deb/ubuntu/linux-gcp-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1008.9~20.04.3

5.13.0-1012.15~20.04.1

5.13.0-1013.16~20.04.1

5.13.0-1015.18~20.04.1

5.13.0-1019.23~20.04.1

5.13.0-1021.25~20.04.1

5.13.0-1023.28~20.04.1

5.13.0-1024.29~20.04.1

5.13.0-1025.30~20.04.1

5.13.0-1027.32~20.04.1

5.13.0-1030.36~20.04.1

5.13.0-1031.37~20.04.1

5.13.0-1033.40~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-5.8

Package

Name: linux-gcp-5.8
Purl: pkg:deb/ubuntu/linux-gcp-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1032.34~20.04.1

5.8.0-1035.37~20.04.1

5.8.0-1038.40~20.04.1

5.8.0-1039.41

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-headers-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-modules-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-tools-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1033.35

5.4.0-1035.37

5.4.0-1036.38

5.4.0-1037.39

5.4.0-1039.41

5.4.0-1041.43

5.4.0-1042.44

5.4.0-1043.45

5.4.0-1044.46

5.4.0-1046.48

5.4.0-1049.52

5.4.0-1051.54

5.4.0-1052.55

5.4.0-1053.56

5.4.0-1054.57

5.4.0-1055.58

5.4.0-1056.59

5.4.0-1057.60

5.4.0-1059.62

5.4.0-1061.64

5.4.0-1062.65

5.4.0-1063.66

5.4.0-1065.68

5.4.0-1066.69

5.4.0-1067.70

5.4.0-1068.71

5.4.0-1071.76

5.4.0-1072.77

5.4.0-1074.79

5.4.0-1076.82

5.4.0-1078.84

5.4.0-1080.86

5.4.0-1081.87

5.4.0-1083.89

5.4.0-1084.90

5.4.0-1086.93

5.4.0-1087.94

5.4.0-1090.97

5.4.0-1091.98

5.4.0-1094.101

5.4.0-1095.102

5.4.0-1096.103

5.4.0-1097.104

5.4.0-1098.105

5.4.0-1099.106

5.4.0-1100.107

5.4.0-1101.108

5.4.0-1102.109

5.4.0-1103.110

5.4.0-1104.111

5.4.0-1105.112

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-gke-headers-5.4.0-1105",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-gke-tools-5.4.0-1105",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-headers-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-modules-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-tools-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gke-5.15

Package

Name: linux-gke-5.15
Purl: pkg:deb/ubuntu/linux-gke-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1011.14~20.04.1

5.15.0-1014.17~20.04.1

5.15.0-1015.18~20.04.1

5.15.0-1016.19~20.04.1

5.15.0-1019.23~20.04.1

5.15.0-1020.25~20.04.1

5.15.0-1023.28~20.04.2

5.15.0-1027.32~20.04.1

5.15.0-1028.33~20.04.1

5.15.0-1029.34~20.04.1

5.15.0-1031.36~20.04.1

5.15.0-1032.37~20.04.1

5.15.0-1033.38~20.04.1

5.15.0-1034.39~20.04.1

5.15.0-1036.41~20.04.1

5.15.0-1037.42~20.04.1

5.15.0-1038.43~20.04.1

5.15.0-1039.44~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-gke-5.15-headers-5.15.0-1039",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-gke-5.15-tools-5.15.0-1039",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-1008.9

5.4.0-1009.10

5.4.0-1010.11

5.4.0-1011.12

5.4.0-1012.13

5.4.0-1013.14

5.4.0-1014.15

5.4.0-1015.16

5.4.0-1016.17

5.4.0-1018.19

5.4.0-1021.22

5.4.0-1022.23

5.4.0-1023.24

5.4.0-1024.25

5.4.0-1025.26

5.4.0-1026.27

5.4.0-1027.28

5.4.0-1029.30

5.4.0-1031.32

5.4.0-1032.33

5.4.0-1033.34

5.4.0-1034.35

5.4.0-1036.37

5.4.0-1037.38

5.4.0-1038.39

5.4.0-1039.40

5.4.0-1040.41

5.4.0-1043.44

5.4.0-1046.48

5.4.0-1048.51

5.4.0-1049.52

5.4.0-1051.54

5.4.0-1052.55

5.4.0-1053.56

5.4.0-1054.57

5.4.0-1056.60

5.4.0-1057.61

5.4.0-1060.64

5.4.0-1061.65

5.4.0-1062.66

5.4.0-1064.68

5.4.0-1065.69

5.4.0-1066.70

5.4.0-1067.71

5.4.0-1068.72

5.4.0-1069.73

5.4.0-1070.74

5.4.0-1071.75

5.4.0-1072.76

5.4.0-1073.77

5.4.0-1074.78

5.4.0-1075.79

5.4.0-1076.80

5.4.0-1077.81

5.4.0-1078.82

5.4.0-1079.83

5.4.0-1080.84

5.4.0-1081.85

5.4.0-1083.87

5.4.0-1084.88

5.4.0-1085.89

5.4.0-1086.90

5.4.0-1087.91

5.4.0-1088.92

5.4.0-1089.93

5.4.0-1090.94

5.4.0-1091.95

5.4.0-1092.96

5.4.0-1093.97

5.4.0-1094.98

5.4.0-1095.99

5.4.0-1096.100

5.4.0-1097.101

5.4.0-1098.102

5.4.0-1099.103

5.4.0-1100.104

5.4.0-1101.105

5.4.0-1102.106

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-cloud-tools-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-cloud-tools-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-headers-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-source-5.4.0",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-tools-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-headers-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-modules-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-tools-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gkeop-5.15

Package

Name: linux-gkeop-5.15
Purl: pkg:deb/ubuntu/linux-gkeop-5.15?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1003.5~20.04.2

5.15.0-1005.7~20.04.1

5.15.0-1007.10~20.04.1

5.15.0-1008.12~20.04.1

5.15.0-1011.15~20.04.2

5.15.0-1012.16~20.04.1

5.15.0-1013.17~20.04.1

5.15.0-1015.19~20.04.1

5.15.0-1016.21~20.04.1

5.15.0-1017.22~20.04.1

5.15.0-1018.23~20.04.1

5.15.0-1019.24~20.04.1

5.15.0-1020.25~20.04.1

5.15.0-1021.26~20.04.1

5.15.0-1022.27~20.04.1

5.15.0-1023.28~20.04.1

5.15.0-1024.29~20.04.1

5.15.0-1025.30~20.04.1

5.15.0-1026.31~20.04.1

5.15.0-1027.32~20.04.1

5.15.0-1028.33~20.04.1

5.15.0-1030.35~20.04.1

5.15.0-1031.37~20.04.1

5.15.0-1032.38~20.04.1

5.15.0-1033.39~20.04.1

5.15.0-1034.40~20.04.1

5.15.0-1035.41~20.04.1

5.15.0-1036.42~20.04.1

5.15.0-1037.43~20.04.1

5.15.0-1038.44~20.04.1

5.15.0-1039.45~20.04.1

5.15.0-1040.46~20.04.1

5.15.0-1043.50~20.04.1

5.15.0-1044.51~20.04.1

5.15.0-1045.52~20.04.1

5.15.0-1046.53~20.04.1

5.15.0-1047.54~20.04.1

5.15.0-1048.55~20.04.1

5.15.0-1049.56~20.04.1

5.15.0-1050.57~20.04.1

5.15.0-1051.58~20.04.1

5.15.0-1052.59~20.04.1

5.15.0-1053.60~20.04.1

5.15.0-1054.61~20.04.1

5.15.0-1055.62~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.15-headers-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.15-tools-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-5.11

Package

Name: linux-hwe-5.11
Purl: pkg:deb/ubuntu/linux-hwe-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-22.23~20.04.1

5.11.0-25.27~20.04.1

5.11.0-27.29~20.04.1

5.11.0-34.36~20.04.1

5.11.0-36.40~20.04.1

5.11.0-37.41~20.04.2

5.11.0-38.42~20.04.1

5.11.0-40.44~20.04.2

5.11.0-41.45~20.04.1

5.11.0-43.47~20.04.2

5.11.0-44.48~20.04.2

5.11.0-46.51~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "block-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "dasd-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "floppy-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "input-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "input-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-cloud-tools-common",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-source-5.11.0",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-tools-common",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-tools-host",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-udebs-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-udebs-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "md-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "md-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "message-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "message-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "serial-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-5.13

Package

Name: linux-hwe-5.13
Purl: pkg:deb/ubuntu/linux-hwe-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-21.21~20.04.1

5.13.0-22.22~20.04.1

5.13.0-23.23~20.04.2

5.13.0-25.26~20.04.1

5.13.0-27.29~20.04.1

5.13.0-28.31~20.04.1

5.13.0-30.33~20.04.1

5.13.0-35.40~20.04.1

5.13.0-37.42~20.04.1

5.13.0-39.44~20.04.1

5.13.0-40.45~20.04.1

5.13.0-41.46~20.04.1

5.13.0-44.49~20.04.1

5.13.0-48.54~20.04.1

5.13.0-51.58~20.04.1

5.13.0-52.59~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "block-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "dasd-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "floppy-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "input-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "input-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-cloud-tools-common",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-source-5.13.0",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-tools-common",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-tools-host",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-udebs-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-udebs-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "md-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "md-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "message-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "message-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "serial-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-5.8

Package

Name: linux-hwe-5.8
Purl: pkg:deb/ubuntu/linux-hwe-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-23.24~20.04.1

5.8.0-25.26~20.04.1

5.8.0-28.30~20.04.1

5.8.0-29.31~20.04.1

5.8.0-31.33~20.04.1

5.8.0-33.36~20.04.1

5.8.0-34.37~20.04.2

5.8.0-36.40~20.04.1

5.8.0-38.43~20.04.1

5.8.0-40.45~20.04.1

5.8.0-41.46~20.04.1

5.8.0-43.49~20.04.1

5.8.0-44.50~20.04.1

5.8.0-45.51~20.04.1

5.8.0-48.54~20.04.1

5.8.0-49.55~20.04.1

5.8.0-50.56~20.04.1

5.8.0-53.60~20.04.1

5.8.0-55.62~20.04.1

5.8.0-59.66~20.04.1

5.8.0-63.71~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "block-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "dasd-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "floppy-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-cloud-tools-common",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-source-5.8.0",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-tools-common",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-tools-host",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-udebs-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-udebs-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "message-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "message-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "serial-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-intel-5.13

Package

Name: linux-intel-5.13
Purl: pkg:deb/ubuntu/linux-intel-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1007.7

5.13.0-1008.8

5.13.0-1009.9

5.13.0-1010.10

5.13.0-1011.11

5.13.0-1014.15

5.13.0-1017.19

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-headers-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-cloud-tools-common",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-source-5.13.0",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-tools-common",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-tools-host",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-modules-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-tools-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-5.10

Package

Name: linux-oem-5.10
Purl: pkg:deb/ubuntu/linux-oem-5.10?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.10.0-1008.9

5.10.0-1011.12

5.10.0-1013.14

5.10.0-1014.15

5.10.0-1016.17

5.10.0-1017.18

5.10.0-1019.20

5.10.0-1021.22

5.10.0-1022.23

5.10.0-1023.24

5.10.0-1025.26

5.10.0-1026.27

5.10.0-1029.30

5.10.0-1032.33

5.10.0-1033.34

5.10.0-1034.35

5.10.0-1038.40

5.10.0-1044.46

5.10.0-1045.47

5.10.0-1049.51

5.10.0-1050.52

5.10.0-1051.53

5.10.0-1052.54

5.10.0-1053.55

5.10.0-1055.58

5.10.0-1057.61

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-headers-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-modules-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-oem-5.10-tools-host",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-tools-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-5.13

Package

Name: linux-oem-5.13
Purl: pkg:deb/ubuntu/linux-oem-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1009.10

5.13.0-1010.11

5.13.0-1012.16

5.13.0-1014.18

5.13.0-1017.21

5.13.0-1019.23

5.13.0-1020.24

5.13.0-1021.25

5.13.0-1022.26

5.13.0-1026.32

5.13.0-1028.35

5.13.0-1029.36

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-headers-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-modules-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-oem-5.13-tools-host",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-tools-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-5.14

Package

Name: linux-oem-5.14
Purl: pkg:deb/ubuntu/linux-oem-5.14?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.14.0-1004.4

5.14.0-1005.5

5.14.0-1007.7

5.14.0-1008.8

5.14.0-1010.10

5.14.0-1011.11

5.14.0-1013.13

5.14.0-1018.19

5.14.0-1020.22

5.14.0-1022.24

5.14.0-1024.26

5.14.0-1027.30

5.14.0-1029.32

5.14.0-1031.34

5.14.0-1032.35

5.14.0-1033.36

5.14.0-1034.37

5.14.0-1036.40

5.14.0-1038.42

5.14.0-1042.47

5.14.0-1044.49

5.14.0-1045.51

5.14.0-1046.53

5.14.0-1047.54

5.14.0-1048.55

5.14.0-1049.56

5.14.0-1050.57

5.14.0-1051.58

5.14.0-1052.59

5.14.0-1054.61

5.14.0-1055.62

5.14.0-1056.63

5.14.0-1057.64

5.14.0-1058.66

5.14.0-1059.67

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-headers-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-image-unsigned-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-modules-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-oem-5.14-headers-5.14.0-1059",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-oem-5.14-tools-5.14.0-1059",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-oem-5.14-tools-host",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-tools-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-5.6

Package

Name: linux-oem-5.6
Purl: pkg:deb/ubuntu/linux-oem-5.6?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.6.0-1007.7

5.6.0-1008.8

5.6.0-1010.10

5.6.0-1011.11

5.6.0-1013.13

5.6.0-1017.17

5.6.0-1018.18

5.6.0-1020.20

5.6.0-1021.21

5.6.0-1023.23

5.6.0-1026.26

5.6.0-1027.27

5.6.0-1028.28

5.6.0-1031.32

5.6.0-1032.33

5.6.0-1033.35

5.6.0-1034.36

5.6.0-1035.37

5.6.0-1036.39

5.6.0-1039.43

5.6.0-1042.46

5.6.0-1047.51

5.6.0-1048.52

5.6.0-1050.54

5.6.0-1052.56

5.6.0-1053.57

5.6.0-1054.58

5.6.0-1055.59

5.6.0-1056.60

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-headers-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-modules-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-oem-5.6-tools-host",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-tools-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-5.11

Package

Name: linux-oracle-5.11
Purl: pkg:deb/ubuntu/linux-oracle-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1008.8~20.04.1

5.11.0-1013.14~20.04.1

5.11.0-1016.17~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1019.20~20.04.1

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1025.27~20.04.1

5.11.0-1027.30~20.04.1

5.11.0-1028.31~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-5.13

Package

Name: linux-oracle-5.13
Purl: pkg:deb/ubuntu/linux-oracle-5.13?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1011.13~20.04.2

5.13.0-1015.19~20.04.1

5.13.0-1016.20~20.04.1

5.13.0-1018.22~20.04.1

5.13.0-1021.26~20.04.1

5.13.0-1025.30~20.04.1

5.13.0-1027.32~20.04.1

5.13.0-1028.33~20.04.1

5.13.0-1030.35~20.04.1

5.13.0-1033.39~20.04.1

5.13.0-1034.40~20.04.1

5.13.0-1036.43~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-5.8

Package

Name: linux-oracle-5.8
Purl: pkg:deb/ubuntu/linux-oracle-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-1031.32~20.04.2

5.8.0-1033.34~20.04.1

5.8.0-1034.35~20.04.2

5.8.0-1037.38~20.04.1

5.8.0-1038.39~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-raspi2

Package

Name: linux-raspi2
Purl: pkg:deb/ubuntu/linux-raspi2?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.3.0-1007.8

5.3.0-1014.16

5.3.0-1015.17

5.3.0-1017.19

5.4.0-1004.4

5.4.0-1006.6

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-headers-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-image-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-modules-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-raspi2-headers-5.4.0-1006",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-raspi2-tools-5.4.0-1006",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-tools-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.4.0-24.28

5.4.0-26.30

5.4.0-27.31

5.4.0-28.32

5.4.0-30.34

5.4.0-31.35

5.4.0-33.37

5.4.0-34.38

5.4.0-36.41

5.4.0-37.42

5.4.0-39.44

5.4.0-40.45

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "crypto-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "fat-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "fs-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "input-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "ipmi-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "kernel-image-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-buildinfo-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-headers-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-image-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-modules-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-riscv-headers-5.4.0-40",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-riscv-tools-5.4.0-40",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-tools-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-udebs-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "md-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "message-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "mouse-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "multipath-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nfs-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nic-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "parport-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "pata-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "plip-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "ppp-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "sata-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "scsi-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "storage-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "usb-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "virtio-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "vlan-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv-5.11

Package

Name: linux-riscv-5.11
Purl: pkg:deb/ubuntu/linux-riscv-5.11?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.11.0-1015.16~20.04.1

5.11.0-1017.18~20.04.1

5.11.0-1018.19~20.04.2

5.11.0-1020.21~20.04.1

5.11.0-1021.22~20.04.1

5.11.0-1022.23~20.04.1

5.11.0-1023.24~20.04.1

5.11.0-1024.25~20.04.1

5.11.0-1026.28~20.04.1

5.11.0-1028.31~20.04.1

5.11.0-1029.32~20.04.1

5.11.0-1030.34

5.11.0-1031.35

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-headers-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-image-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-modules-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-tools-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv-5.8

Package

Name: linux-riscv-5.8
Purl: pkg:deb/ubuntu/linux-riscv-5.8?arch=source&distro=focal

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.8.0-14.16~20.04.1

5.8.0-14.16~20.04.3

5.8.0-16.18~20.04.1

5.8.0-17.19~20.04.1

5.8.0-18.20~20.04.1

5.8.0-20.22~20.04.1

5.8.0-22.24~20.04.1

5.8.0-25.27~20.04.1

5.8.0-26.28~20.04.1

5.8.0-29.31~20.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "block-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-udebs-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "message-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:22.04:LTS

linux-allwinner-5.19

Package

Name: linux-allwinner-5.19
Purl: pkg:deb/ubuntu/linux-allwinner-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1007.7~22.04.1

5.19.0-1009.9~22.04.1

5.19.0-1010.10~22.04.1

5.19.0-1011.11~22.04.1

5.19.0-1012.12~22.04.1

5.19.0-1013.13~22.04.1

5.19.0-1014.14~22.04.1

5.19.0-1015.15~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-allwinner-5.19-headers-5.19.0-1015",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-allwinner-5.19-tools-5.19.0-1015",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-image-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-5.19

Package

Name: linux-aws-5.19
Purl: pkg:deb/ubuntu/linux-aws-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1019.20~22.04.1

5.19.0-1020.21~22.04.1

5.19.0-1022.23~22.04.1

5.19.0-1023.24~22.04.1

5.19.0-1024.25~22.04.1

5.19.0-1025.26~22.04.1

5.19.0-1026.27~22.04.1

5.19.0-1027.28~22.04.1

5.19.0-1028.29~22.04.1

5.19.0-1029.30~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.19-cloud-tools-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-aws-5.19-headers-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-aws-5.19-tools-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-6.2

Package

Name: linux-aws-6.2
Purl: pkg:deb/ubuntu/linux-aws-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1005.5~22.04.1

6.2.0-1006.6~22.04.1

6.2.0-1007.7~22.04.1

6.2.0-1008.8~22.04.1

6.2.0-1009.9~22.04.3

6.2.0-1010.10~22.04.1

6.2.0-1011.11~22.04.1

6.2.0-1012.12~22.04.1

6.2.0-1013.13~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1015.15~22.04.1

6.2.0-1016.16~22.04.1

6.2.0-1017.17~22.04.1

6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.2-headers-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.2-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-6.5

Package

Name: linux-aws-6.5
Purl: pkg:deb/ubuntu/linux-aws-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1008.8~22.04.1

6.5.0-1010.10~22.04.1

6.5.0-1011.11~22.04.1

6.5.0-1012.12~22.04.1

6.5.0-1014.14~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1017.17~22.04.2

6.5.0-1018.18~22.04.1

6.5.0-1020.20~22.04.1

6.5.0-1021.21~22.04.1

6.5.0-1022.22~22.04.1

6.5.0-1023.23~22.04.1

6.5.0-1024.24~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-aws-6.5-cloud-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.5-headers-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.5-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-6.8

Package

Name: linux-aws-6.8
Purl: pkg:deb/ubuntu/linux-aws-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.49~22.04.1

Affected versions

6.*

6.8.0-1009.9~22.04.2

6.8.0-1010.10~22.04.2

6.8.0-1011.12~22.04.1

6.8.0-1013.14~22.04.1

6.8.0-1014.15~22.04.1

6.8.0-1015.16~22.04.1

6.8.0-1016.17~22.04.2

6.8.0-1017.18~22.04.1

6.8.0-1018.19~22.04.1

6.8.0-1019.21~22.04.1

6.8.0-1020.22~22.04.1

6.8.0-1021.23~22.04.1

6.8.0-1023.25~22.04.1

6.8.0-1024.26~22.04.1

6.8.0-1027.29~22.04.1

6.8.0-1028.30~22.04.1

6.8.0-1029.31~22.04.1

6.8.0-1030.32~22.04.1

6.8.0-1031.33~22.04.1

6.8.0-1032.34~22.04.1

6.8.0-1033.35~22.04.1

6.8.0-1035.37~22.04.1

6.8.0-1036.38~22.04.1

6.8.0-1039.41~22.04.1

6.8.0-1040.42~22.04.1

6.8.0-1041.43~22.04.1

6.8.0-1042.44~22.04.1

6.8.0-1043.45~22.04.1

6.8.0-1044.46~22.04.1

6.8.0-1045.47~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-6.8-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.8-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.8-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-5.19

Package

Name: linux-azure-5.19
Purl: pkg:deb/ubuntu/linux-azure-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1020.21~22.04.1

5.19.0-1021.22~22.04.1

5.19.0-1022.23~22.04.1

5.19.0-1023.24~22.04.1

5.19.0-1025.28~22.04.1

5.19.0-1026.29~22.04.1

5.19.0-1027.30~22.04.2

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.19-cloud-tools-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-azure-5.19-headers-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-azure-5.19-tools-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-headers-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-modules-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-tools-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-6.2

Package

Name: linux-azure-6.2
Purl: pkg:deb/ubuntu/linux-azure-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1005.5~22.04.1

6.2.0-1006.6~22.04.1

6.2.0-1007.7~22.04.1

6.2.0-1008.8~22.04.1

6.2.0-1009.9~22.04.3

6.2.0-1011.11~22.04.1

6.2.0-1012.12~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1015.15~22.04.1

6.2.0-1016.16~22.04.1

6.2.0-1017.17~22.04.1

6.2.0-1018.18~22.04.1

6.2.0-1019.19~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.2-headers-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.2-tools-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-6.5

Package

Name: linux-azure-6.5
Purl: pkg:deb/ubuntu/linux-azure-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1007.7~22.04.1

6.5.0-1009.9~22.04.1

6.5.0-1010.10~22.04.1

6.5.0-1011.11~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1017.17~22.04.1

6.5.0-1018.19~22.04.2

6.5.0-1019.20~22.04.1

6.5.0-1021.22~22.04.1

6.5.0-1022.23~22.04.1

6.5.0-1023.24~22.04.1

6.5.0-1024.25~22.04.1

6.5.0-1025.26~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-6.5-cloud-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.5-headers-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.5-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-6.8

Package

Name: linux-azure-6.8
Purl: pkg:deb/ubuntu/linux-azure-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1051.57~22.04.1

Affected versions

6.*

6.8.0-1008.8~22.04.1

6.8.0-1009.9~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1012.14~22.04.1

6.8.0-1013.15~22.04.1

6.8.0-1014.16~22.04.1

6.8.0-1015.17~22.04.2

6.8.0-1017.20~22.04.1

6.8.0-1018.21~22.04.1

6.8.0-1020.23~22.04.1

6.8.0-1021.25~22.04.1

6.8.0-1025.30~22.04.1

6.8.0-1026.31~22.04.1

6.8.0-1027.32~22.04.1

6.8.0-1028.33~22.04.1

6.8.0-1029.34~22.04.1

6.8.0-1030.35~22.04.1

6.8.0-1031.36~22.04.1

6.8.0-1034.39~22.04.1

6.8.0-1036.42~22.04.1

6.8.0-1040.46~22.04.1

6.8.0-1041.47~22.04.1

6.8.0-1044.50~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-6.8-cloud-tools-6.8.0-1051",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.8-headers-6.8.0-1051",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.8-tools-6.8.0-1051",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-fde-5.19

Package

Name: linux-azure-fde-5.19
Purl: pkg:deb/ubuntu/linux-azure-fde-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1025.28~22.04.1.1

5.19.0-1026.29~22.04.1.1

5.19.0-1027.30~22.04.2.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-image-unsigned-5.19.0-1027-azure-fde",
            "binary_version": "5.19.0-1027.30~22.04.2.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-fde-6.2

Package

Name: linux-azure-fde-6.2
Purl: pkg:deb/ubuntu/linux-azure-fde-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1008.8~22.04.1.1

6.2.0-1009.9~22.04.3.1

6.2.0-1011.11~22.04.1.1

6.2.0-1012.12~22.04.1.1

6.2.0-1014.14~22.04.1.1

6.2.0-1015.15~22.04.1.1

6.2.0-1016.16~22.04.1.1

6.2.0-1017.17~22.04.1.1

6.2.0-1018.18~22.04.1.1

6.2.0-1019.19~22.04.1.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-image-unsigned-6.2.0-1019-azure-fde",
            "binary_version": "6.2.0-1019.19~22.04.1.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-fde-6.8

Package

Name: linux-azure-fde-6.8
Purl: pkg:deb/ubuntu/linux-azure-fde-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.53~22.04.1

Affected versions

6.*

6.8.0-1041.48~22.04.1

6.8.0-1042.49~22.04.1

6.8.0-1044.51~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-fde-6.8-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-azure-fde-6.8-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-azure-fde-6.8-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-5.19

Package

Name: linux-gcp-5.19
Purl: pkg:deb/ubuntu/linux-gcp-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1020.22~22.04.2

5.19.0-1021.23~22.04.1

5.19.0-1022.24~22.04.1

5.19.0-1024.26~22.04.1

5.19.0-1025.27~22.04.1

5.19.0-1026.28~22.04.1

5.19.0-1027.29~22.04.1

5.19.0-1030.32~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-gcp-5.19-headers-5.19.0-1030",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-gcp-5.19-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-6.2

Package

Name: linux-gcp-6.2
Purl: pkg:deb/ubuntu/linux-gcp-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1009.9~22.04.3

6.2.0-1010.10~22.04.1

6.2.0-1011.11~22.04.1

6.2.0-1011.11~22.04.3

6.2.0-1012.12~22.04.1

6.2.0-1013.13~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1016.18~22.04.1

6.2.0-1017.19~22.04.1

6.2.0-1018.20~22.04.1

6.2.0-1019.21~22.04.1

6.2.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.2-headers-6.2.0-1021",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.2-tools-6.2.0-1021",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-6.5

Package

Name: linux-gcp-6.5
Purl: pkg:deb/ubuntu/linux-gcp-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1010.10~22.04.3

6.5.0-1011.11~22.04.1

6.5.0-1013.13~22.04.1

6.5.0-1014.14~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1017.17~22.04.1

6.5.0-1018.18~22.04.1

6.5.0-1020.20~22.04.1

6.5.0-1022.24~22.04.1

6.5.0-1023.25~22.04.1

6.5.0-1024.26~22.04.1

6.5.0-1025.27~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.5-headers-6.5.0-1025",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.5-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-6.8

Package

Name: linux-gcp-6.8
Purl: pkg:deb/ubuntu/linux-gcp-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1047.50~22.04.2

Affected versions

6.*

6.8.0-1010.11~22.04.1

6.8.0-1011.12~22.04.1

6.8.0-1012.13~22.04.1

6.8.0-1013.14~22.04.1

6.8.0-1014.16~22.04.1

6.8.0-1015.17~22.04.1

6.8.0-1016.18~22.04.1

6.8.0-1017.19~22.04.1

6.8.0-1018.20~22.04.1

6.8.0-1019.21~22.04.1

6.8.0-1020.22~22.04.1

6.8.0-1021.23~22.04.1

6.8.0-1024.26~22.04.1

6.8.0-1025.27~22.04.1

6.8.0-1026.28~22.04.1

6.8.0-1027.29~22.04.1

6.8.0-1028.30~22.04.1

6.8.0-1029.31~22.04.1

6.8.0-1030.32~22.04.1

6.8.0-1031.33~22.04.1

6.8.0-1032.34~22.04.1

6.8.0-1033.35~22.04.1

6.8.0-1034.36~22.04.2

6.8.0-1036.38~22.04.1

6.8.0-1037.39~22.04.1

6.8.0-1040.42~22.04.1

6.8.0-1041.43~22.04.1

6.8.0-1042.45~22.04.1

6.8.0-1043.46~22.04.1

6.8.0-1044.47~22.04.1

6.8.0-1045.48~22.04.1

6.8.0-1046.49~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-gcp-6.8-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-gcp-6.8-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-5.19

Package

Name: linux-hwe-5.19
Purl: pkg:deb/ubuntu/linux-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-28.29~22.04.1

5.19.0-32.33~22.04.1

5.19.0-35.36~22.04.1

5.19.0-38.39~22.04.1

5.19.0-40.41~22.04.1

5.19.0-41.42~22.04.1

5.19.0-42.43~22.04.1

5.19.0-43.44~22.04.1

5.19.0-45.46~22.04.1

5.19.0-46.47~22.04.1

5.19.0-50.50

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-headers-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-headers-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-headers-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-cloud-tools-5.19.0-50",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-cloud-tools-common",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-headers-5.19.0-50",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-tools-5.19.0-50",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-tools-common",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-tools-host",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-ipu6-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-ivsc-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-source-5.19.0",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-tools-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-tools-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-tools-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-6.2

Package

Name: linux-hwe-6.2
Purl: pkg:deb/ubuntu/linux-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-25.25~22.04.2

6.2.0-26.26~22.04.1

6.2.0-31.31~22.04.1

6.2.0-32.32~22.04.1

6.2.0-33.33~22.04.1

6.2.0-34.34~22.04.1

6.2.0-35.35~22.04.1

6.2.0-36.37~22.04.1

6.2.0-37.38~22.04.1

6.2.0-39.40~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-cloud-tools-common",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-headers-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-tools-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-tools-common",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-tools-host",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-ivsc-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-source-6.2.0",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-6.5

Package

Name: linux-hwe-6.5
Purl: pkg:deb/ubuntu/linux-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-14.14~22.04.1

6.5.0-15.15~22.04.1

6.5.0-17.17~22.04.1

6.5.0-18.18~22.04.1

6.5.0-21.21~22.04.1

6.5.0-25.25~22.04.1

6.5.0-26.26~22.04.1

6.5.0-27.28~22.04.1

6.5.0-28.29~22.04.1

6.5.0-35.35~22.04.1

6.5.0-41.41~22.04.2

6.5.0-44.44~22.04.1

6.5.0-45.45~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-cloud-tools-common",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-tools-common",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-tools-host",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-image-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-ivsc-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-source-6.5.0",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-6.8

Package

Name: linux-hwe-6.8
Purl: pkg:deb/ubuntu/linux-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-100.100~22.04.1

Affected versions

6.*

6.8.0-38.38~22.04.1

6.8.0-39.39~22.04.1

6.8.0-40.40~22.04.3

6.8.0-45.45~22.04.1

6.8.0-47.47~22.04.1

6.8.0-48.48~22.04.1

6.8.0-49.49~22.04.1

6.8.0-50.51~22.04.1

6.8.0-51.52~22.04.1

6.8.0-52.53~22.04.1

6.8.0-57.59~22.04.1

6.8.0-58.60~22.04.1

6.8.0-59.61~22.04.1

6.8.0-60.63~22.04.1

6.8.0-64.67~22.04.1

6.8.0-65.68~22.04.1

6.8.0-78.78~22.04.1

6.8.0-79.79~22.04.1

6.8.0-83.83~22.04.1

6.8.0-84.84~22.04.1

6.8.0-85.85~22.04.1

6.8.0-86.87~22.04.1

6.8.0-87.88~22.04.1

6.8.0-88.89~22.04.2

6.8.0-90.91~22.04.1

6.8.0-94.96~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.8-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.8-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-ibm-6.8

Package

Name: linux-ibm-6.8
Purl: pkg:deb/ubuntu/linux-ibm-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1044.44~22.04.1

Affected versions

6.*

6.8.0-1008.8~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1011.11~22.04.1

6.8.0-1012.12~22.04.1

6.8.0-1013.13~22.04.1

6.8.0-1014.14~22.04.1

6.8.0-1015.15~22.04.1

6.8.0-1016.16~22.04.1

6.8.0-1017.17~22.04.1

6.8.0-1018.18~22.04.1

6.8.0-1019.19~22.04.1

6.8.0-1023.23~22.04.1

6.8.0-1024.24~22.04.1

6.8.0-1025.25~22.04.1

6.8.0-1026.26~22.04.1

6.8.0-1027.27~22.04.1

6.8.0-1028.28~22.04.1

6.8.0-1029.29~22.04.1

6.8.0-1030.30~22.04.1

6.8.0-1033.33~22.04.1

6.8.0-1036.36~22.04.1

6.8.0-1037.37~22.04.1

6.8.0-1038.38~22.04.1

6.8.0-1039.39~22.04.1

6.8.0-1040.40~22.04.1

6.8.0-1041.41~22.04.1

6.8.0-1042.42~22.04.1

6.8.0-1043.43~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-ibm-6.8-headers-6.8.0-1044",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-ibm-6.8-tools-6.8.0-1044",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-intel-iot-realtime

Package

Name: linux-intel-iot-realtime
Purl: pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1073.75

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-common",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-host",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-lowlatency-hwe-5.19

Package

Name: linux-lowlatency-hwe-5.19
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1017.18~22.04.1

5.19.0-1018.19~22.04.1

5.19.0-1021.22~22.04.1

5.19.0-1022.23~22.04.1

5.19.0-1023.24~22.04.1

5.19.0-1024.25~22.04.1

5.19.0-1025.26~22.04.1

5.19.0-1027.28~22.04.1

5.19.0-1028.29~22.04.1

5.19.0-1030.30

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-headers-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-headers-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-common",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-common",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-host",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-ipu6-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-ivsc-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-tools-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-tools-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-lowlatency-hwe-6.2

Package

Name: linux-lowlatency-hwe-6.2
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1008.8~22.04.1

6.2.0-1009.9~22.04.1

6.2.0-1011.11~22.04.1

6.2.0-1012.12~22.04.1

6.2.0-1013.13~22.04.1

6.2.0-1014.14~22.04.1

6.2.0-1015.15~22.04.1

6.2.0-1016.16~22.04.1

6.2.0-1017.17~22.04.1

6.2.0-1018.18~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-common",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-host",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-ivsc-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-lowlatency-hwe-6.5

Package

Name: linux-lowlatency-hwe-6.5
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-14.14.1~22.04.1

6.5.0-15.15.1.1~22.04.1

6.5.0-17.17.1.1.1~22.04.1

6.5.0-21.21.1~22.04.1

6.5.0-25.25.1~22.04.1

6.5.0-26.26.1~22.04.1

6.5.0-27.28.1~22.04.1

6.5.0-28.29.1~22.04.1

6.5.0-35.35.1~22.04.1

6.5.0-41.41.1~22.04.1

6.5.0-42.42.1~22.04.1

6.5.0-44.44.1~22.04.1

6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-common",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-host",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-lowlatency-hwe-6.8

Package

Name: linux-lowlatency-hwe-6.8
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-100.100.1~22.04.1

Affected versions

6.*

6.8.0-38.38.1~22.04.2

6.8.0-40.40.1~22.04.1

6.8.0-44.44.1~22.04.1

6.8.0-45.45.1~22.04.1

6.8.0-47.47.1~22.04.1

6.8.0-48.48.3~22.04.1

6.8.0-49.49.1~22.04.1

6.8.0-50.51.1~22.04.1

6.8.0-51.52.1~22.04.1

6.8.0-52.53.1~22.04.1

6.8.0-54.56.1~22.04.1

6.8.0-55.57.1~22.04.1

6.8.0-56.58.1~22.04.1

6.8.0-57.59.1~22.04.1

6.8.0-58.60.1~22.04.1

6.8.0-59.61.1~22.04.1

6.8.0-60.63.1~22.04.1

6.8.0-62.65.1~22.04.1

6.8.0-63.66.1~22.04.1

6.8.0-64.67.1~22.04.1

6.8.0-65.68.1~22.04.1

6.8.0-78.78.1~22.04.1

6.8.0-79.79.1~22.04.1

6.8.0-83.83.1~22.04.1

6.8.0-84.84.1~22.04.1

6.8.0-85.85.1~22.04.1

6.8.0-86.87.1~22.04.1

6.8.0-87.88.1~22.04.1

6.8.0-88.89.1~22.04.1

6.8.0-90.91.1~22.04.1

6.8.0-94.96.1~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia-6.2

Package

Name: linux-nvidia-6.2
Purl: pkg:deb/ubuntu/linux-nvidia-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1003.3~22.04.1

6.2.0-1009.9

6.2.0-1010.10

6.2.0-1011.11

6.2.0-1012.12

6.2.0-1013.13

6.2.0-1015.15

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-headers-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-headers-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-nvidia-6.2-headers-6.2.0-1015",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-nvidia-6.2-tools-6.2.0-1015",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-nvidia-6.2-tools-host",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-tools-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-tools-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia-6.5

Package

Name: linux-nvidia-6.5
Purl: pkg:deb/ubuntu/linux-nvidia-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1004.4

6.5.0-1007.7

6.5.0-1013.13

6.5.0-1014.14

6.5.0-1015.15

6.5.0-1018.18

6.5.0-1019.19

6.5.0-1021.22

6.5.0-1022.23

6.5.0-1023.24

6.5.0-1024.25

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-headers-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-headers-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-nvidia-6.5-headers-6.5.0-1024",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-nvidia-6.5-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-nvidia-6.5-tools-host",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-tools-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-tools-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia-6.8

Package

Name: linux-nvidia-6.8
Purl: pkg:deb/ubuntu/linux-nvidia-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.49~22.04.1

Affected versions

6.*

6.8.0-1008.8~22.04.1

6.8.0-1009.9~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1011.11~22.04.1

6.8.0-1012.12~22.04.1

6.8.0-1013.14~22.04.1

6.8.0-1014.15~22.04.1

6.8.0-1015.16~22.04.1

6.8.0-1017.19~22.04.1

6.8.0-1018.20~22.04.1

6.8.0-1019.21~22.04.1

6.8.0-1020.22~22.04.1

6.8.0-1021.23~22.04.1

6.8.0-1022.25~22.04.2

6.8.0-1023.26~22.04.1

6.8.0-1024.27~22.04.1

6.8.0-1025.28~22.04.1

6.8.0-1026.29~22.04.1

6.8.0-1027.30~22.04.1

6.8.0-1028.31~22.04.1

6.8.0-1029.32~22.04.1

6.8.0-1030.33~22.04.1

6.8.0-1031.34~22.04.1

6.8.0-1032.35~22.04.1

6.8.0-1035.38~22.04.1

6.8.0-1036.39~22.04.1

6.8.0-1038.41~22.04.1

6.8.0-1039.42~22.04.1

6.8.0-1040.43~22.04.1

6.8.0-1041.44~22.04.2

6.8.0-1042.45~22.04.1

6.8.0-1043.46~22.04.1

6.8.0-1044.47~22.04.1

6.8.0-1045.48~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-nvidia-6.8-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-nvidia-6.8-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-5.17

Package

Name: linux-oem-5.17
Purl: pkg:deb/ubuntu/linux-oem-5.17?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.17.0-1003.3

5.17.0-1004.4

5.17.0-1006.6

5.17.0-1011.12

5.17.0-1012.13

5.17.0-1013.14

5.17.0-1014.15

5.17.0-1015.16

5.17.0-1016.17

5.17.0-1017.18

5.17.0-1018.19

5.17.0-1019.20

5.17.0-1020.21

5.17.0-1021.22

5.17.0-1024.25

5.17.0-1025.26

5.17.0-1026.27

5.17.0-1027.28

5.17.0-1028.29

5.17.0-1029.30

5.17.0-1030.31

5.17.0-1031.32

5.17.0-1032.33

5.17.0-1033.34

5.17.0-1034.35

5.17.0-1035.36

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-headers-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-image-unsigned-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-ipu6-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-ivsc-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-oem-5.17-headers-5.17.0-1035",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-oem-5.17-tools-5.17.0-1035",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-oem-5.17-tools-host",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-tools-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-6.0

Package

Name: linux-oem-6.0
Purl: pkg:deb/ubuntu/linux-oem-6.0?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.0.0-1006.6

6.0.0-1007.7

6.0.0-1008.8

6.0.0-1009.9

6.0.0-1010.10

6.0.0-1011.11

6.0.0-1012.12

6.0.0-1013.13

6.0.0-1014.14

6.0.0-1015.15

6.0.0-1016.16

6.0.0-1017.17

6.0.0-1018.18

6.0.0-1019.19

6.0.0-1020.20

6.0.0-1021.21

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-headers-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-image-unsigned-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-ipu6-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-ivsc-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-oem-6.0-headers-6.0.0-1021",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-oem-6.0-tools-6.0.0-1021",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-oem-6.0-tools-host",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-tools-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-6.1

Package

Name: linux-oem-6.1
Purl: pkg:deb/ubuntu/linux-oem-6.1?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.1.0-1004.4

6.1.0-1006.6

6.1.0-1007.7

6.1.0-1008.8

6.1.0-1009.9

6.1.0-1010.10

6.1.0-1012.12

6.1.0-1013.13

6.1.0-1014.14

6.1.0-1015.15

6.1.0-1016.16

6.1.0-1017.17

6.1.0-1019.19

6.1.0-1020.20

6.1.0-1021.21

6.1.0-1022.22

6.1.0-1023.23

6.1.0-1024.24

6.1.0-1025.25

6.1.0-1026.26

6.1.0-1027.27

6.1.0-1028.28

6.1.0-1029.29

6.1.0-1033.33

6.1.0-1034.34

6.1.0-1035.35

6.1.0-1036.36

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-headers-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-image-unsigned-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-ipu6-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-ivsc-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-oem-6.1-headers-6.1.0-1036",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-oem-6.1-tools-6.1.0-1036",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-oem-6.1-tools-host",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-tools-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-6.5

Package

Name: linux-oem-6.5
Purl: pkg:deb/ubuntu/linux-oem-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1003.3

6.5.0-1004.4

6.5.0-1006.6

6.5.0-1007.7

6.5.0-1008.8

6.5.0-1009.10

6.5.0-1011.12

6.5.0-1013.14

6.5.0-1014.15

6.5.0-1015.16

6.5.0-1016.17

6.5.0-1018.19

6.5.0-1019.20

6.5.0-1020.21

6.5.0-1022.23

6.5.0-1023.24

6.5.0-1024.25

6.5.0-1025.26

6.5.0-1027.28

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-headers-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-ipu6-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-ivsc-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-usbio-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-headers-6.5.0-1027",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-tools-6.5.0-1027",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-tools-host",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-tools-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-6.5

Package

Name: linux-oracle-6.5
Purl: pkg:deb/ubuntu/linux-oracle-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1013.13~22.04.4

6.5.0-1014.14~22.04.1

6.5.0-1015.15~22.04.1

6.5.0-1016.16~22.04.1

6.5.0-1018.18~22.04.1

6.5.0-1019.19~22.04.1

6.5.0-1020.20~22.04.1

6.5.0-1021.21~22.04.1

6.5.0-1023.23~22.04.1

6.5.0-1024.24~22.04.1

6.5.0-1025.25~22.04.1

6.5.0-1026.26~22.04.1

6.5.0-1027.27~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.5-headers-6.5.0-1027",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.5-tools-6.5.0-1027",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-6.8

Package

Name: linux-oracle-6.8
Purl: pkg:deb/ubuntu/linux-oracle-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1043.44~22.04.1

Affected versions

6.*

6.8.0-1006.6~22.04.3

6.8.0-1008.8~22.04.1

6.8.0-1010.10~22.04.1

6.8.0-1011.11~22.04.1

6.8.0-1012.12~22.04.1

6.8.0-1013.13~22.04.1

6.8.0-1014.14~22.04.1

6.8.0-1015.15~22.04.1

6.8.0-1016.17~22.04.1

6.8.0-1017.18~22.04.1

6.8.0-1018.19~22.04.1

6.8.0-1019.20~22.04.1

6.8.0-1020.21~22.04.1

6.8.0-1021.22~22.04.1

6.8.0-1022.23~22.04.1

6.8.0-1023.24~22.04.1

6.8.0-1024.25~22.04.1

6.8.0-1025.26~22.04.1

6.8.0-1026.27~22.04.1

6.8.0-1027.28~22.04.1

6.8.0-1028.29~22.04.1

6.8.0-1029.30~22.04.1

6.8.0-1030.31~22.04.1

6.8.0-1032.33~22.04.1

6.8.0-1033.34~22.04.1

6.8.0-1035.36~22.04.1

6.8.0-1037.38~22.04.1

6.8.0-1038.39~22.04.1

6.8.0-1039.40~22.04.1

6.8.0-1040.41~22.04.1

6.8.0-1041.42~22.04.1

6.8.0-1042.43~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.8-headers-6.8.0-1043",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.8-tools-6.8.0-1043",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.15.0-1032.35

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-headers-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-modules-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-headers-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-tools-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-tools-common",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-tools-host",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-tools-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.13.0-1004.4

5.13.0-1006.6+22.04.1

5.13.0-1007.7+22.04.1

5.13.0-1010.11+22.04.1

5.15.0-1004.4

5.15.0-1005.5

5.15.0-1006.6

5.15.0-1007.7

5.15.0-1008.8

5.15.0-1011.12

5.15.0-1012.13

5.15.0-1014.16

5.15.0-1015.17

5.15.0-1016.18

5.15.0-1017.19

5.15.0-1018.21

5.15.0-1019.22

5.15.0-1020.23

5.15.0-1022.26

5.15.0-1023.27

5.15.0-1026.30

5.15.0-1027.31

5.15.0-1028.32

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-headers-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-image-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-modules-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-riscv-headers-5.15.0-1028",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-riscv-tools-5.15.0-1028",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-tools-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv-5.19

Package

Name: linux-riscv-5.19
Purl: pkg:deb/ubuntu/linux-riscv-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1012.13~22.04.1

5.19.0-1015.16~22.04.1

5.19.0-1016.17~22.04.1

5.19.0-1017.18~22.04.1

5.19.0-1018.19~22.04.1

5.19.0-1019.21~22.04.1

5.19.0-1020.22~22.04.1

5.19.0-1021.23~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-image-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-riscv-5.19-headers-5.19.0-1021",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-riscv-5.19-tools-5.19.0-1021",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv-6.5

Package

Name: linux-riscv-6.5
Purl: pkg:deb/ubuntu/linux-riscv-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-17.17.1.1~22.04.1

6.5.0-21.21.1~22.04.1

6.5.0-25.25.1~22.04.1

6.5.0-26.26.1~22.04.1

6.5.0-27.28.1~22.04.1

6.5.0-28.29.1~22.04.1

6.5.0-35.35.1~22.04.1

6.5.0-40.40.1~22.04.1

6.5.0-42.42.1~22.04.1

6.5.0-45.45.1~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-image-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv-6.8

Package

Name: linux-riscv-6.8
Purl: pkg:deb/ubuntu/linux-riscv-6.8?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-100.100~22.04.1

Affected versions

6.*

6.8.0-38.38.1~22.04.1

6.8.0-39.39.1~22.04.1

6.8.0-40.40.1~22.04.1

6.8.0-41.41.1~22.04.1

6.8.0-44.44.1~22.04.1

6.8.0-47.47.1~22.04.1

6.8.0-48.48.1~22.04.2

6.8.0-49.49.1~22.04.1

6.8.0-50.51.1~22.04.1

6.8.0-51.52.1~22.04.1

6.8.0-52.53.1~22.04.1

6.8.0-53.55.1~22.04.1

6.8.0-55.57.1~22.04.1

6.8.0-56.58.1~22.04.1

6.8.0-57.59.1~22.04.1

6.8.0-58.60.1~22.04.1

6.8.0-59.61.1~22.04.1

6.8.0-62.65~22.04.1

6.8.0-63.66~22.04.1

6.8.0-64.67~22.04.1

6.8.0-71.71~22.04.1

6.8.0-78.78~22.04.1

6.8.0-79.79~22.04.1

6.8.0-83.83~22.04.1

6.8.0-84.84~22.04.1

6.8.0-86.87~22.04.1

6.8.0-87.88~22.04.1

6.8.0-88.89~22.04.1

6.8.0-90.91~22.04.1

6.8.0-94.96~22.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.8-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.8-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-starfive-5.19

Package

Name: linux-starfive-5.19
Purl: pkg:deb/ubuntu/linux-starfive-5.19?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

5.*

5.19.0-1014.16~22.04.1

5.19.0-1015.17~22.04.1

5.19.0-1016.18~22.04.1

5.19.0-1017.19~22.04.1

5.19.0-1018.20~22.04.1

5.19.0-1019.21~22.04.1

5.19.0-1020.22~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-image-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-starfive-5.19-headers-5.19.0-1020",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-starfive-5.19-tools-5.19.0-1020",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-starfive-6.2

Package

Name: linux-starfive-6.2
Purl: pkg:deb/ubuntu/linux-starfive-6.2?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.2.0-1006.7~22.04.1

6.2.0-1007.8~22.04.1

6.2.0-1009.10~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-image-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.2-headers-6.2.0-1009",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.2-tools-6.2.0-1009",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-starfive-6.5

Package

Name: linux-starfive-6.5
Purl: pkg:deb/ubuntu/linux-starfive-6.5?arch=source&distro=jammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-1007.8~22.04.1

6.5.0-1008.9~22.04.1

6.5.0-1009.10~22.04.1

6.5.0-1010.11~22.04.1

6.5.0-1011.12~22.04.1

6.5.0-1012.13~22.04.1

6.5.0-1014.15~22.04.1

6.5.0-1015.16~22.04.1

6.5.0-1016.17~22.04.1

6.5.0-1017.18~22.04.1

6.5.0-1018.19~22.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-image-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.5-headers-6.5.0-1018",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.5-tools-6.5.0-1018",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:24.04:LTS

linux

Package

Name: linux
Purl: pkg:deb/ubuntu/linux?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-100.100

Affected versions

6.*

6.5.0-9.9

6.6.0-14.14

6.8.0-11.11

6.8.0-20.20

6.8.0-22.22

6.8.0-28.28

6.8.0-31.31

6.8.0-35.35

6.8.0-36.36

6.8.0-38.38

6.8.0-39.39

6.8.0-40.40

6.8.0-41.41

6.8.0-44.44

6.8.0-45.45

6.8.0-47.47

6.8.0-48.48

6.8.0-49.49

6.8.0-50.51

6.8.0-51.52

6.8.0-52.53

6.8.0-53.55

6.8.0-54.56

6.8.0-55.57

6.8.0-56.58

6.8.0-57.59

6.8.0-58.60

6.8.0-59.61

6.8.0-60.63

6.8.0-62.65

6.8.0-63.66

6.8.0-64.67

6.8.0-71.71

6.8.0-78.78

6.8.0-79.79

6.8.0-83.83

6.8.0-84.84

6.8.0-85.85

6.8.0-86.87

6.8.0-87.88

6.8.0-88.89

6.8.0-90.91

6.8.0-94.96

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-image-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-lib-rust-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-source-6.8.0",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-common",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-host",
            "binary_version": "6.8.0-100.100"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws

Package

Name: linux-aws
Purl: pkg:deb/ubuntu/linux-aws?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.49

Affected versions

6.*

6.5.0-1008.8

6.6.0-1001.1

6.8.0-1001.1

6.8.0-1006.6

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1016.17

6.8.0-1017.18

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1023.25

6.8.0-1024.26

6.8.0-1025.27

6.8.0-1026.28

6.8.0-1027.29

6.8.0-1028.30

6.8.0-1029.31

6.8.0-1030.32

6.8.0-1031.33

6.8.0-1032.34

6.8.0-1033.35

6.8.0-1035.37

6.8.0-1036.38

6.8.0-1038.40

6.8.0-1039.41

6.8.0-1040.42

6.8.0-1041.43

6.8.0-1042.44

6.8.0-1043.45

6.8.0-1044.46

6.8.0-1045.47

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-aws-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-aws-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-aws-6.14

Package

Name: linux-aws-6.14
Purl: pkg:deb/ubuntu/linux-aws-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1015.15~24.04.1

Affected versions

6.*

6.14.0-1007.7~24.04.1

6.14.0-1009.9~24.04.1

6.14.0-1010.10~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-6.14-cloud-tools-6.14.0-1015",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-aws-6.14-headers-6.14.0-1015",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-aws-6.14-tools-6.14.0-1015",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1015-aws",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1015-aws-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure

Package

Name: linux-azure
Purl: pkg:deb/ubuntu/linux-azure?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.52

Affected versions

6.*

6.5.0-1007.7

6.6.0-1001.1

6.8.0-1001.1

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1012.14

6.8.0-1013.15

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1017.20

6.8.0-1018.21

6.8.0-1020.23

6.8.0-1021.25

6.8.0-1025.30

6.8.0-1026.31

6.8.0-1027.32

6.8.0-1028.33

6.8.0-1029.34

6.8.0-1030.35

6.8.0-1031.36

6.8.0-1034.39

6.8.0-1038.44

6.8.0-1040.46

6.8.0-1041.47

6.8.0-1042.48

6.8.0-1044.50

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-azure-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-azure-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-6.11

Package

Name: linux-azure-6.11
Purl: pkg:deb/ubuntu/linux-azure-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1008.8~24.04.1

6.11.0-1012.12~24.04.1

6.11.0-1013.13~24.04.1

6.11.0-1014.14~24.04.1

6.11.0-1015.15~24.04.1

6.11.0-1017.17~24.04.1

6.11.0-1018.18~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-azure-6.11-headers-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-azure-6.11-tools-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-6.14

Package

Name: linux-azure-6.14
Purl: pkg:deb/ubuntu/linux-azure-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1014.14~24.04.1

Affected versions

6.*

6.14.0-1010.10~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-6.14-cloud-tools-6.14.0-1014",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-azure-6.14-headers-6.14.0-1014",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-azure-6.14-tools-6.14.0-1014",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1014-azure",
            "binary_version": "6.14.0-1014.14~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.53

Affected versions

6.*

6.8.0-1041.48

6.8.0-1044.51

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-fde-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-azure-fde-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-azure-fde-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-nvidia

Package

Name: linux-azure-nvidia
Purl: pkg:deb/ubuntu/linux-azure-nvidia?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1039.42

Affected versions

6.*

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1016.17

6.8.0-1018.19

6.8.0-1019.20

6.8.0-1022.23

6.8.0-1025.27

6.8.0-1027.30

6.8.0-1029.32

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-nvidia-cloud-tools-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-azure-nvidia-headers-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-azure-nvidia-tools-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-headers-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-modules-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-tools-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-nvidia-6.14

Package

Name: linux-azure-nvidia-6.14
Purl: pkg:deb/ubuntu/linux-azure-nvidia-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1007.7

Affected versions

6.*

6.14.0-1003.3

6.14.0-1006.6

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-nvidia-6.14-cloud-tools-6.14.0-1007",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-azure-nvidia-6.14-headers-6.14.0-1007",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-azure-nvidia-6.14-tools-6.14.0-1007",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-buildinfo-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-cloud-tools-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-headers-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-modules-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        },
        {
            "binary_name": "linux-tools-6.14.0-1007-azure-nvidia",
            "binary_version": "6.14.0-1007.7"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp

Package

Name: linux-gcp
Purl: pkg:deb/ubuntu/linux-gcp?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1047.50

Affected versions

6.*

6.5.0-1007.7

6.6.0-1001.1

6.8.0-1002.2

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.9

6.8.0-1009.10

6.8.0-1010.11

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1024.26

6.8.0-1025.27

6.8.0-1026.28

6.8.0-1027.29

6.8.0-1028.30

6.8.0-1029.31

6.8.0-1030.32

6.8.0-1031.33

6.8.0-1032.34

6.8.0-1033.35

6.8.0-1034.36

6.8.0-1036.38

6.8.0-1037.39

6.8.0-1039.41

6.8.0-1040.42

6.8.0-1041.43

6.8.0-1042.45

6.8.0-1043.46

6.8.0-1044.47

6.8.0-1045.48

6.8.0-1046.49

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-gcp-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-gcp-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-6.11

Package

Name: linux-gcp-6.11
Purl: pkg:deb/ubuntu/linux-gcp-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1006.6~24.04.2

6.11.0-1011.11~24.04.1

6.11.0-1013.13~24.04.1

6.11.0-1014.14~24.04.1

6.11.0-1015.15~24.04.1

6.11.0-1016.16~24.04.1

6.11.0-1017.17~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.11-headers-6.11.0-1017",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.11-tools-6.11.0-1017",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1017-gcp",
            "binary_version": "6.11.0-1017.17~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1017-gcp-64k",
            "binary_version": "6.11.0-1017.17~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-6.14

Package

Name: linux-gcp-6.14
Purl: pkg:deb/ubuntu/linux-gcp-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1018.19~24.04.1

Affected versions

6.*

6.14.0-1007.7~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1014.15~24.04.1

6.14.0-1015.16~24.04.1

6.14.0-1016.17~24.04.1

6.14.0-1017.18~24.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.14.0-1018-gcp-64k",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.14-headers-6.14.0-1018",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.14-tools-6.14.0-1018",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1018-gcp-64k",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1018-gcp-64k",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-lib-rust-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1018-gcp-64k",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1018-gcp-64k",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1018-gcp",
            "binary_version": "6.14.0-1018.19~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1018-gcp-64k",
            "binary_version": "6.14.0-1018.19~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gke

Package

Name: linux-gke
Purl: pkg:deb/ubuntu/linux-gke?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1043.48

Affected versions

6.*

6.8.0-1003.5

6.8.0-1004.7

6.8.0-1005.8

6.8.0-1006.9

6.8.0-1007.10

6.8.0-1008.11

6.8.0-1009.12

6.8.0-1010.13

6.8.0-1011.14

6.8.0-1012.15

6.8.0-1013.17

6.8.0-1014.18

6.8.0-1015.19

6.8.0-1016.20

6.8.0-1017.21

6.8.0-1019.23

6.8.0-1020.24

6.8.0-1021.25

6.8.0-1022.26

6.8.0-1023.27

6.8.0-1024.28

6.8.0-1025.29

6.8.0-1026.30

6.8.0-1027.31

6.8.0-1028.32

6.8.0-1029.33

6.8.0-1032.36

6.8.0-1033.37

6.8.0-1035.39

6.8.0-1036.40

6.8.0-1037.41

6.8.0-1038.43

6.8.0-1039.44

6.8.0-1040.45

6.8.0-1041.46

6.8.0-1042.47

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-gke-headers-6.8.0-1043",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-gke-tools-6.8.0-1043",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gkeop

Package

Name: linux-gkeop
Purl: pkg:deb/ubuntu/linux-gkeop?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1030.33

Affected versions

6.*

6.8.0-1001.3

6.8.0-1002.4

6.8.0-1003.5

6.8.0-1004.6

6.8.0-1006.8

6.8.0-1007.9

6.8.0-1008.10

6.8.0-1009.11

6.8.0-1010.12

6.8.0-1011.13

6.8.0-1012.14

6.8.0-1013.15

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1022.24

6.8.0-1023.25

6.8.0-1024.26

6.8.0-1025.28

6.8.0-1026.29

6.8.0-1027.30

6.8.0-1028.31

6.8.0-1029.32

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-gkeop-cloud-tools-6.8.0-1030",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-gkeop-headers-6.8.0-1030",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-gkeop-tools-6.8.0-1030",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-headers-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-modules-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-tools-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-hwe-6.11

Package

Name: linux-hwe-6.11
Purl: pkg:deb/ubuntu/linux-hwe-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-17.17~24.04.2

6.11.0-19.19~24.04.1

6.11.0-21.21~24.04.1

6.11.0-24.24~24.04.1

6.11.0-25.25~24.04.1

6.11.0-26.26~24.04.1

6.11.0-28.28~24.04.1

6.11.0-29.29~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-29",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-headers-6.11.0-29",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-tools-6.11.0-29",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-image-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-ipu7-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-usbio-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-modules-vision-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-29-generic",
            "binary_version": "6.11.0-29.29~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-29-generic-64k",
            "binary_version": "6.11.0-29.29~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-ibm

Package

Name: linux-ibm
Purl: pkg:deb/ubuntu/linux-ibm?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1044.44

Affected versions

6.*

6.5.0-1009.9

6.8.0-1001.1

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1014.14

6.8.0-1015.15

6.8.0-1016.16

6.8.0-1017.17

6.8.0-1018.18

6.8.0-1019.19

6.8.0-1022.22

6.8.0-1023.23

6.8.0-1024.24

6.8.0-1025.25

6.8.0-1026.26

6.8.0-1027.27

6.8.0-1028.28

6.8.0-1029.29

6.8.0-1030.30

6.8.0-1033.33

6.8.0-1036.36

6.8.0-1037.37

6.8.0-1038.38

6.8.0-1039.39

6.8.0-1040.40

6.8.0-1041.41

6.8.0-1042.42

6.8.0-1043.43

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-headers-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-ibm-headers-6.8.0-1044",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-ibm-tools-6.8.0-1044",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-modules-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-tools-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-intel

Package

Name: linux-intel
Purl: pkg:deb/ubuntu/linux-intel?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-1005.12

6.8.0-1006.13

6.8.0-1007.14

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-headers-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-intel-cloud-tools-6.8.0-1007",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-intel-headers-6.8.0-1007",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-intel-tools-6.8.0-1007",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-modules-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-tools-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-lowlatency

Package

Name: linux-lowlatency
Purl: pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-100.100.1

Affected versions

6.*

6.5.0-9.9.1

6.6.0-14.14.1

6.8.0-7.7.1

6.8.0-25.25.3

6.8.0-28.28.1

6.8.0-31.31.1

6.8.0-35.35.1

6.8.0-36.36.1

6.8.0-38.38.1

6.8.0-39.39.1

6.8.0-40.40.1

6.8.0-41.41.1

6.8.0-44.44.1

6.8.0-45.45.1

6.8.0-47.47.1

6.8.0-48.48.3

6.8.0-49.49.1

6.8.0-50.51.1

6.8.0-51.52.1

6.8.0-52.53.1

6.8.0-53.55.2

6.8.0-54.56.1

6.8.0-55.57.1

6.8.0-56.58.1

6.8.0-57.59.1

6.8.0-58.60.1

6.8.0-59.61.1

6.8.0-60.63.1

6.8.0-62.65.1

6.8.0-63.66.1

6.8.0-64.67.1

6.8.0-65.68.1

6.8.0-78.78.1

6.8.0-79.79.1

6.8.0-83.83.1

6.8.0-84.84.1

6.8.0-85.85.1

6.8.0-86.87.1

6.8.0-87.88.1

6.8.0-88.89.1

6.8.0-90.91.1

6.8.0-94.96.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-lib-rust-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-lowlatency-hwe-6.11

Package

Name: linux-lowlatency-hwe-6.11
Purl: pkg:deb/ubuntu/linux-lowlatency-hwe-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1009.10~24.04.1

6.11.0-1011.12~24.04.1

6.11.0-1012.13~24.04.1

6.11.0-1013.14~24.04.1

6.11.0-1014.15~24.04.1

6.11.0-1015.16~24.04.2

6.11.0-1016.17~24.04.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1016",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1016-lowlatency",
            "binary_version": "6.11.0-1016.17~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1016-lowlatency-64k",
            "binary_version": "6.11.0-1016.17~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia

Package

Name: linux-nvidia
Purl: pkg:deb/ubuntu/linux-nvidia?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.49

Affected versions

6.*

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.21

6.8.0-1020.22

6.8.0-1021.23

6.8.0-1022.25

6.8.0-1023.26

6.8.0-1024.27

6.8.0-1025.28

6.8.0-1026.29

6.8.0-1027.30

6.8.0-1028.31

6.8.0-1029.32

6.8.0-1030.33

6.8.0-1031.34

6.8.0-1032.35

6.8.0-1035.38

6.8.0-1036.39

6.8.0-1038.41

6.8.0-1039.42

6.8.0-1040.43

6.8.0-1041.44

6.8.0-1042.45

6.8.0-1043.46

6.8.0-1044.47

6.8.0-1045.48

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-nvidia-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-nvidia-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia-6.11

Package

Name: linux-nvidia-6.11
Purl: pkg:deb/ubuntu/linux-nvidia-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1002.2

6.11.0-1003.3

6.11.0-1007.7

6.11.0-1010.10

6.11.0-1011.11

6.11.0-1012.12

6.11.0-1013.13

6.11.0-1016.16

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-headers-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-headers-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-modules-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-modules-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-nvidia-6.11-headers-6.11.0-1016",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-nvidia-6.11-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-tools-6.11.0-1016-nvidia",
            "binary_version": "6.11.0-1016.16"
        },
        {
            "binary_name": "linux-tools-6.11.0-1016-nvidia-64k",
            "binary_version": "6.11.0-1016.16"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia-lowlatency

Package

Name: linux-nvidia-lowlatency
Purl: pkg:deb/ubuntu/linux-nvidia-lowlatency?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.49.1

Affected versions

6.*

6.8.0-1009.9.1

6.8.0-1011.11.1

6.8.0-1012.12.1

6.8.0-1013.14.1

6.8.0-1014.15.1

6.8.0-1015.16.1

6.8.0-1017.19.1

6.8.0-1018.20.1

6.8.0-1019.21.1

6.8.0-1020.22.1

6.8.0-1021.23.1

6.8.0-1022.25.2

6.8.0-1023.26.1

6.8.0-1024.27.1

6.8.0-1025.28.1

6.8.0-1026.29.1

6.8.0-1027.30.1

6.8.0-1028.31.1

6.8.0-1029.32.1

6.8.0-1030.33.1

6.8.0-1031.34.1

6.8.0-1032.35.1

6.8.0-1035.38.1

6.8.0-1036.39.1

6.8.0-1038.41.1

6.8.0-1039.42.1

6.8.0-1040.43.1

6.8.0-1041.44.1

6.8.0-1042.45.1

6.8.0-1043.46.1

6.8.0-1044.47.1

6.8.0-1045.48.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-nvidia-lowlatency-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-nvidia-lowlatency-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-nvidia-tegra

Package

Name: linux-nvidia-tegra
Purl: pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1020.20

Affected versions

6.*

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1016.16

6.8.0-1019.19

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-nvidia-tegra-headers-6.8.0-1020",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-nvidia-tegra-tools-6.8.0-1020",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-6.11

Package

Name: linux-oem-6.11
Purl: pkg:deb/ubuntu/linux-oem-6.11?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.11.0-1007.7

6.11.0-1008.8

6.11.0-1009.9

6.11.0-1010.10

6.11.0-1011.11

6.11.0-1012.12

6.11.0-1013.13

6.11.0-1015.15

6.11.0-1016.16

6.11.0-1017.17

6.11.0-1018.18

6.11.0-1020.20

6.11.0-1021.21

6.11.0-1022.22

6.11.0-1023.23

6.11.0-1024.24

6.11.0-1025.25

6.11.0-1027.27

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-headers-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-modules-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-modules-ipu6-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-modules-ipu7-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-modules-usbio-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-modules-vision-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-oem-6.11-headers-6.11.0-1027",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-oem-6.11-tools-6.11.0-1027",
            "binary_version": "6.11.0-1027.27"
        },
        {
            "binary_name": "linux-tools-6.11.0-1027-oem",
            "binary_version": "6.11.0-1027.27"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-6.14

Package

Name: linux-oem-6.14
Purl: pkg:deb/ubuntu/linux-oem-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1014.14

Affected versions

6.*

6.14.0-1004.4

6.14.0-1005.5

6.14.0-1006.6

6.14.0-1007.7

6.14.0-1008.8

6.14.0-1010.10

6.14.0-1011.11

6.14.0-1012.12

6.14.0-1013.13

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-headers-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-modules-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-modules-ipu6-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-modules-ipu7-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-modules-usbio-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-modules-vision-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-oem-6.14-headers-6.14.0-1014",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-oem-6.14-tools-6.14.0-1014",
            "binary_version": "6.14.0-1014.14"
        },
        {
            "binary_name": "linux-tools-6.14.0-1014-oem",
            "binary_version": "6.14.0-1014.14"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oem-6.8

Package

Name: linux-oem-6.8
Purl: pkg:deb/ubuntu/linux-oem-6.8?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.9

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1014.14

6.8.0-1016.16

6.8.0-1017.17

6.8.0-1018.18

6.8.0-1019.19

6.8.0-1020.20

6.8.0-1024.24

6.8.0-1025.25

6.8.0-1026.26

6.8.0-1027.27

6.8.0-1028.28

6.8.0-1029.29

6.8.0-1030.30

6.8.0-1031.31

6.8.0-1032.32

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-headers-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-oem-6.8-headers-6.8.0-1032",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-oem-6.8-tools-6.8.0-1032",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-tools-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle

Package

Name: linux-oracle
Purl: pkg:deb/ubuntu/linux-oracle?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1043.44

Affected versions

6.*

6.5.0-1010.10

6.6.0-1001.1

6.8.0-1001.1

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1008.8

6.8.0-1010.10

6.8.0-1011.11

6.8.0-1012.12

6.8.0-1013.13

6.8.0-1014.14

6.8.0-1015.16

6.8.0-1016.17

6.8.0-1017.18

6.8.0-1018.19

6.8.0-1019.20

6.8.0-1020.21

6.8.0-1021.22

6.8.0-1022.23

6.8.0-1023.24

6.8.0-1024.25

6.8.0-1025.26

6.8.0-1026.27

6.8.0-1027.28

6.8.0-1028.29

6.8.0-1029.30

6.8.0-1030.31

6.8.0-1032.33

6.8.0-1033.34

6.8.0-1035.36

6.8.0-1037.38

6.8.0-1038.39

6.8.0-1039.40

6.8.0-1040.41

6.8.0-1041.42

6.8.0-1042.43

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-oracle-headers-6.8.0-1043",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-oracle-tools-6.8.0-1043",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-oracle-6.14

Package

Name: linux-oracle-6.14
Purl: pkg:deb/ubuntu/linux-oracle-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1015.15~24.04.1

Affected versions

6.*

6.14.0-1007.7~24.04.1

6.14.0-1009.9~24.04.1

6.14.0-1010.10~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

6.14.0-1014.14~24.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.14.0-1015-oracle",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.14.0-1015-oracle-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1015-oracle",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1015-oracle-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1015-oracle",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1015-oracle-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1015-oracle",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1015-oracle-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1015-oracle",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1015-oracle-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-oracle-6.14-headers-6.14.0-1015",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-oracle-6.14-tools-6.14.0-1015",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1015-oracle",
            "binary_version": "6.14.0-1015.15~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1015-oracle-64k",
            "binary_version": "6.14.0-1015.15~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-raspi

Package

Name: linux-raspi
Purl: pkg:deb/ubuntu/linux-raspi?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1047.51

Affected versions

6.*

6.5.0-1005.7

6.7.0-1001.1

6.8.0-1001.1

6.8.0-1002.2

6.8.0-1003.3

6.8.0-1004.4

6.8.0-1005.5

6.8.0-1006.6

6.8.0-1007.7

6.8.0-1008.8

6.8.0-1009.10

6.8.0-1010.11

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.16

6.8.0-1015.17

6.8.0-1016.18

6.8.0-1017.19

6.8.0-1018.20

6.8.0-1019.23

6.8.0-1020.24

6.8.0-1024.28

6.8.0-1028.32

6.8.0-1029.33

6.8.0-1030.34

6.8.0-1031.35

6.8.0-1032.36

6.8.0-1035.39

6.8.0-1036.40

6.8.0-1038.42

6.8.0-1039.43

6.8.0-1040.44

6.8.0-1041.45

6.8.0-1042.46

6.8.0-1043.47

6.8.0-1044.48

6.8.0-1045.49

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-image-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-raspi-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-raspi-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-raspi-realtime

Package

Name: linux-raspi-realtime
Purl: pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.0-2019.20

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.8.1-1015.16

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-headers-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-modules-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-modules-extra-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-realtime-headers-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-realtime-tools-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-tools-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv

Package

Name: linux-riscv
Purl: pkg:deb/ubuntu/linux-riscv?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.5.0-9.9.1

6.8.0-20.20.1

6.8.0-28.28.1

6.8.0-31.31.1

6.8.0-35.35.1

6.8.0-36.36.1

6.8.0-38.38.1

6.8.0-39.39.1

6.8.0-40.40.1

6.8.0-41.41.1

6.8.0-44.44.1

6.8.0-47.47.1

6.8.0-48.48.1

6.8.0-49.49.1

6.8.0-50.51.1

6.8.0-51.52.1

6.8.0-52.53.1

6.8.0-53.55.1

6.8.0-55.57.1

6.8.0-56.58.1

6.8.0-57.59.1

6.8.0-58.60.1

6.8.0-59.61.1

6.8.0-60.63.1

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-image-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-riscv-headers-6.8.0-60",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-riscv-tools-6.8.0-60",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-riscv-6.14

Package

Name: linux-riscv-6.14
Purl: pkg:deb/ubuntu/linux-riscv-6.14?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-34.34.1~24.04.1

Affected versions

6.*

6.14.0-22.22.1~24.04.1

6.14.0-23.23.1~24.04.1

6.14.0-24.24.1~24.04.1

6.14.0-27.27.1~24.04.1

6.14.0-28.28.1~24.04.1

6.14.0-29.29.1~24.04.1

6.14.0-32.32.1~24.04.1

6.14.0-33.33.1~24.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.14.0-34-generic",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-34-generic",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name": "linux-image-6.14.0-34-generic",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-34-generic",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name": "linux-riscv-6.14-headers-6.14.0-34",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name": "linux-riscv-6.14-tools-6.14.0-34",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-34-generic",
            "binary_version": "6.14.0-34.34.1~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-xilinx

Package

Name: linux-xilinx
Purl: pkg:deb/ubuntu/linux-xilinx?arch=source&distro=noble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1023.24

Affected versions

6.*

6.8.0-1008.9

6.8.0-1009.10

6.8.0-1011.12

6.8.0-1012.13

6.8.0-1013.14

6.8.0-1014.15

6.8.0-1015.16

6.8.0-1017.18

6.8.0-1018.19

6.8.0-1019.20

6.8.0-1020.21

6.8.0-1021.22

6.8.0-1022.23

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-headers-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-image-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-modules-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-tools-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-xilinx-headers-6.8.0-1023",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-xilinx-tools-6.8.0-1023",
            "binary_version": "6.8.0-1023.24"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:25.10

linux-azure-fde

Package

Name: linux-azure-fde
Purl: pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=questing

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

6.*

6.17.0-1003.3

6.17.0-1004.4

6.17.0-1005.5

6.17.0-1007.7

6.17.0-1008.8

6.17.0-1010.10

6.17.0-1012.12

6.17.0-1014.14

6.17.0-1015.15

6.17.0-1017.17

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-azure-fde-cloud-tools-6.17.0-1017",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-azure-fde-headers-6.17.0-1017",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-azure-fde-tools-6.17.0-1017",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-headers-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-modules-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-tools-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:26.04:LTS

linux-vmware

Package

Name: linux-vmware
Purl: pkg:deb/ubuntu/linux-vmware?arch=source&distro=resolute

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Affected versions

7.*

7.0.0-1006.6

Ecosystem specific

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-7.0.0-1006-vmware",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-cloud-tools-7.0.0-1006-vmware",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-headers-7.0.0-1006-vmware",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-image-unsigned-7.0.0-1006-vmware",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-modules-7.0.0-1006-vmware",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-tools-7.0.0-1006-vmware",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-vmware-cloud-tools-7.0.0-1006",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-vmware-headers-7.0.0-1006",
            "binary_version": "7.0.0-1006.6"
        },
        {
            "binary_name": "linux-vmware-tools-7.0.0-1006",
            "binary_version": "7.0.0-1006.6"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:Nvidia-BlueField:24.04:LTS

linux-bluefield

Package

Name: linux-bluefield
Purl: pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1016.20

Affected versions

6.*

6.8.0-1011.15

6.8.0-1012.16

6.8.0-1013.17

6.8.0-1014.18

Ecosystem specific

{
    "availability": "Available for NVIDIA BlueField platforms",
    "binaries": [
        {
            "binary_name": "linux-bluefield-headers-6.8.0-1016",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-bluefield-tools-6.8.0-1016",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:Pro:FIPS-updates:24.04:LTS

linux-aws-fips

Package

Name: linux-aws-fips
Purl: pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.49+fips1

Affected versions

6.*

6.8.0-1035.37+fips1

6.8.0-1036.38+fips1

6.8.0-1038.40+fips1

6.8.0-1039.41+fips1

6.8.0-1040.42+fips1

6.8.0-1041.43+fips1

6.8.0-1042.44+fips1

6.8.0-1043.45+fips1

6.8.0-1044.46+fips1

6.8.0-1045.47+fips1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-aws-fips-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-aws-fips-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-aws-fips-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-azure-fips

Package

Name: linux-azure-fips
Purl: pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1046.52+fips1

Affected versions

6.*

6.8.0-1034.39+fips1

6.8.0-1040.46+fips1

6.8.0-1044.50+fips1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-azure-fips-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-azure-fips-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-azure-fips-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-fips

Package

Name: linux-fips
Purl: pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-100.100+fips1

Affected versions

6.*

6.8.0-38.38+fips4

6.8.0-78.78+fips1

6.8.0-79.79+fips1

6.8.0-83.83+fips1

6.8.0-84.84+fips1

6.8.0-85.85+fips1

6.8.0-86.87+fips1

6.8.0-87.88+fips1

6.8.0-88.89+fips1

6.8.0-90.91+fips1

6.8.0-94.96+fips1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-lib-rust-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-hmac-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-gcp-fips

Package

Name: linux-gcp-fips
Purl: pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-1047.50+fips1

Affected versions

6.*

6.8.0-1036.38+fips1

6.8.0-1037.39+fips1

6.8.0-1039.41+fips1

6.8.0-1040.42+fips1

6.8.0-1041.43+fips1

6.8.0-1042.45+fips1

6.8.0-1043.46+fips1

6.8.0-1044.47+fips1

6.8.0-1045.48+fips1

6.8.0-1046.49+fips1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:Pro:Realtime:22.04:LTS

linux-realtime-6.8

Package

Name: linux-realtime-6.8
Purl: pkg:deb/ubuntu/linux-realtime-6.8?arch=source&distro=realtime%2Fjammy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.1-1041.42~22.04.1

Affected versions

6.*

6.8.1-1004.4~22.04.1

6.8.1-1005.5~22.04.2

6.8.1-1006.6~22.04.1

6.8.1-1007.7~22.04.1

6.8.1-1008.8~22.04.1

6.8.1-1009.9~22.04.1

6.8.1-1010.10~22.04.1

6.8.1-1011.11~22.04.1

6.8.1-1012.12~22.04.1

6.8.1-1013.14~22.04.1

6.8.1-1014.15~22.04.1

6.8.1-1015.16~22.04.1

6.8.1-1016.17~22.04.1

6.8.1-1017.18~22.04.1

6.8.1-1018.19~22.04.1

6.8.1-1019.20~22.04.1

6.8.1-1020.21~22.04.1

6.8.1-1021.22~22.04.1

6.8.1-1022.23~22.04.1

6.8.1-1023.24~22.04.1

6.8.1-1024.25~22.04.1

6.8.1-1025.26~22.04.1

6.8.1-1026.27~22.04.1

6.8.1-1030.31~22.04.1

6.8.1-1031.32~22.04.1

6.8.1-1034.35~22.04.1

6.8.1-1035.36~22.04.1

6.8.1-1036.37~22.04.1

6.8.1-1037.38~22.04.1

6.8.1-1038.39~22.04.1

6.8.1-1039.40~22.04.1

6.8.1-1040.41~22.04.1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-realtime-6.8-cloud-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-realtime-6.8-headers-6.8.1-1041",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-realtime-6.8-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

Ubuntu:Pro:Realtime:24.04:LTS

linux-raspi-realtime

Package

Name: linux-raspi-realtime
Purl: pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.0-2037.38

Affected versions

6.*

6.7.0-2001.1

6.8.0-2001.1

6.8.0-2002.2

6.8.0-2004.4

6.8.0-2005.5

6.8.0-2006.6

6.8.0-2007.7

6.8.0-2008.8

6.8.0-2009.9

6.8.0-2010.10

6.8.0-2011.11

6.8.0-2012.12

6.8.0-2013.14

6.8.0-2014.15

6.8.0-2015.16

6.8.0-2016.17

6.8.0-2017.18

6.8.0-2018.19

6.8.0-2019.20

6.8.0-2022.23

6.8.0-2023.24

6.8.0-2024.25

6.8.0-2025.26

6.8.0-2026.27

6.8.0-2028.29

6.8.0-2029.30

6.8.0-2030.31

6.8.0-2031.32

6.8.0-2032.33

6.8.0-2033.34

6.8.0-2034.35

6.8.0-2035.36

6.8.0-2036.37

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-headers-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-image-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-modules-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-raspi-realtime-headers-6.8.0-2037",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-raspi-realtime-tools-6.8.0-2037",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-tools-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-realtime

Package

Name: linux-realtime
Purl: pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.8.1-1041.42

Affected versions

6.*

6.8.0-1008.19

6.8.1-1001.1

6.8.1-1002.2

6.8.1-1003.3

6.8.1-1004.4

6.8.1-1005.5

6.8.1-1006.6

6.8.1-1007.7

6.8.1-1008.8

6.8.1-1009.9

6.8.1-1010.10

6.8.1-1011.11

6.8.1-1012.12

6.8.1-1013.14

6.8.1-1014.15

6.8.1-1015.16

6.8.1-1016.17

6.8.1-1017.18

6.8.1-1018.19

6.8.1-1019.20

6.8.1-1020.21

6.8.1-1021.22

6.8.1-1022.23

6.8.1-1023.24

6.8.1-1024.25

6.8.1-1025.26

6.8.1-1026.27

6.8.1-1030.31

6.8.1-1031.32

6.8.1-1033.34

6.8.1-1034.35

6.8.1-1035.36

6.8.1-1036.37

6.8.1-1037.38

6.8.1-1038.39

6.8.1-1039.40

6.8.1-1040.41

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-headers-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-modules-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-realtime-headers-6.8.1-1041",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-realtime-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"

linux-realtime-6.14

Package

Name: linux-realtime-6.14
Purl: pkg:deb/ubuntu/linux-realtime-6.14?arch=source&distro=realtime%2Fnoble

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.14.0-1014.14~24.04.1

Affected versions

6.*

6.14.0-1003.3~24.04.3

6.14.0-1010.10~24.04.1

6.14.0-1011.11~24.04.1

6.14.0-1012.12~24.04.1

6.14.0-1013.13~24.04.1

Ecosystem specific

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-realtime-6.14-cloud-tools-6.14.0-1014",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-realtime-6.14-headers-6.14.0-1014",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-realtime-6.14-tools-6.14.0-1014",
            "binary_version": "6.14.0-1014.14~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.14.0-1014-realtime",
            "binary_version": "6.14.0-1014.14~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a notification pending interrupt from ARM FF-A secure world firmware, which is a hardware/firmware event the attacker can neither invoke nor influence from userspace. The vulnerability is not reliably triggerable."
}

Database specific

source

"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-38388.json"