UBUNTU-CVE-2025-39989

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2025-39989
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json
JSON Data
https://api.test.osv.dev/v1/vulns/UBUNTU-CVE-2025-39989
Upstream
Downstream
USN (23)
Related
USN (23)
Published
2025-04-18T07:15:00Z
Modified
2026-10-12T14:20:04Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
  • Ubuntu - low
Summary
[none]
Details

In the Linux kernel, the following vulnerability has been resolved: x86/mce: use is_copy_from_user() to determine copy-from-user context Patch series "mm/hwpoison: Fix regressions in memory failure handling", v4. ## 1. What am I trying to do: This patchset resolves two critical regressions related to memory failure handling that have appeared in the upstream kernel since version 5.17, as compared to 5.10 LTS. - copyin case: poison found in user page while kernel copying from user space - instr case: poison found while instruction fetching in user space ## 2. What is the expected outcome and why - For copyin case: Kernel can recover from poison found where kernel is doing get_user() or copy_from_user() if those places get an error return and the kernel return -EFAULT to the process instead of crashing. More specifily, MCE handler checks the fixup handler type to decide whether an in kernel #MC can be recovered. When EX_TYPE_UACCESS is found, the PC jumps to recovery code specified in _ASM_EXTABLE_FAULT() and return a -EFAULT to user space. - For instr case: If a poison found while instruction fetching in user space, full recovery is possible. User process takes #PF, Linux allocates a new page and fills by reading from storage. ## 3. What actually happens and why - For copyin case: kernel panic since v5.17 Commit 4c132d1d844a ("x86/futex: Remove .fixup usage") introduced a new extable fixup type, EX_TYPE_EFAULT_REG, and later patches updated the extable fixup type for copy-from-user operations, changing it from EX_TYPE_UACCESS to EX_TYPE_EFAULT_REG. It breaks previous EX_TYPE_UACCESS handling when posion found in get_user() or copy_from_user(). - For instr case: user process is killed by a SIGBUS signal due to #CMCI and #MCE race When an uncorrected memory error is consumed there is a race between the CMCI from the memory controller reporting an uncorrected error with a UCNA signature, and the core reporting and SRAR signature machine check when the data is about to be consumed. ### Background: why UNcorrected errors tied to CMCI in Intel platform [1] Prior to Icelake memory controllers reported patrol scrub events that detected a previously unseen uncorrected error in memory by signaling a broadcast machine check with an SRAO (Software Recoverable Action Optional) signature in the machine check bank. This was overkill because it's not an urgent problem that no core is on the verge of consuming that bad data. It's also found that multi SRAO UCE may cause nested MCE interrupts and finally become an IERR. Hence, Intel downgrades the machine check bank signature of patrol scrub from SRAO to UCNA (Uncorrected, No Action required), and signal changed to #CMCI. Just to add to the confusion, Linux does take an action (in uc_decode_notifier()) to try to offline the page despite the UCNA signature name. ### Background: why #CMCI and #MCE race when poison is consuming in Intel platform [1] Having decided that CMCI/UCNA is the best action for patrol scrub errors, the memory controller uses it for reads too. But the memory controller is executing asynchronously from the core, and can't tell the difference between a "real" read and a speculative read. So it will do CMCI/UCNA if an error is found in any read. Thus: 1) Core is clever and thinks address A is needed soon, issues a speculative read. 2) Core finds it is going to use address A soon after sending the read request 3) The CMCI from the memory controller is in a race with MCE from the core that will soon try to retire the load from address A. Quite often (because speculation has got better) the CMCI from the memory controller is delivered before the core is committed to the instruction reading address A, so the interrupt is taken, and Linux offlines the page (marking it as poison). ## Why user process is killed for instr case Commit 046545a661af ("mm/hwpoison: fix error page recovered but reported "not ---truncated---

References

Affected packages

Ubuntu:16.04:LTS
linux-hwe-edge

Package

Name
linux-hwe-edge
Purl
pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.8.0-28.30~16.04.1
4.8.0-30.32~16.04.1
4.8.0-32.34~16.04.1
4.8.0-34.36~16.04.1
4.10.0-14.16~16.04.1
4.10.0-19.21~16.04.1
4.10.0-20.22~16.04.1
4.10.0-21.23~16.04.1
4.10.0-22.24~16.04.1
4.10.0-24.28~16.04.1
4.10.0-26.30~16.04.1
4.11.0-13.19~16.04.1
4.11.0-14.20~16.04.1
4.13.0-16.19~16.04.3
4.13.0-17.20~16.04.1
4.13.0-19.22~16.04.1
4.13.0-21.24~16.04.1
4.13.0-25.29~16.04.2
4.15.0-13.14~16.04.1
4.15.0-15.16~16.04.1
4.15.0-20.21~16.04.1
4.15.0-22.24~16.04.1
4.15.0-23.25~16.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "block-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "crypto-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "crypto-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "dasd-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fat-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fat-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "firewire-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "floppy-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "input-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "input-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ipmi-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ipmi-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "irda-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "irda-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "kernel-image-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "kernel-image-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-headers-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-cloud-tools-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-tools-4.15.0-23",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-modules-extra-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-source-4.15.0",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-23-generic",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-23-generic-lpae",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "linux-tools-4.15.0-23-lowlatency",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "md-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "md-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "message-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "mouse-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "mouse-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "multipath-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "multipath-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nfs-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nfs-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-shared-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-shared-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-usb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "nic-usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "parport-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "parport-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "pata-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "pcmcia-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "plip-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "plip-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ppp-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "ppp-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "sata-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "sata-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "scsi-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "scsi-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "serial-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "storage-core-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "storage-core-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "usb-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "usb-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "virtio-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "vlan-modules-4.15.0-23-generic-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        },
        {
            "binary_name": "vlan-modules-4.15.0-23-generic-lpae-di",
            "binary_version": "4.15.0-23.25~16.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:18.04:LTS
linux-aws-5.0

Package

Name
linux-aws-5.0
Purl
pkg:deb/ubuntu/linux-aws-5.0?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1021.24~18.04.1
5.0.0-1022.25~18.04.1
5.0.0-1023.26~18.04.1
5.0.0-1024.27~18.04.1
5.0.0-1025.28
5.0.0-1027.30

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.0-tools-5.0.0-1027",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-aws-headers-5.0.0-1027",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-buildinfo-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-cloud-tools-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-headers-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-image-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-modules-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        },
        {
            "binary_name": "linux-tools-5.0.0-1027-aws",
            "binary_version": "5.0.0-1027.30"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-5.3

Package

Name
linux-aws-5.3
Purl
pkg:deb/ubuntu/linux-aws-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1016.17~18.04.1
5.3.0-1017.18~18.04.1
5.3.0-1019.21~18.04.1
5.3.0-1023.25~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.2
5.3.0-1033.35
5.3.0-1034.36
5.3.0-1035.37

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.3-cloud-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-aws-5.3-headers-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-aws-5.3-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-headers-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-image-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-modules-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        },
        {
            "binary_name": "linux-tools-5.3.0-1035-aws",
            "binary_version": "5.3.0-1035.37"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1002.2
4.15.0-1003.3
4.15.0-1004.4
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1012.12
4.15.0-1013.13
4.15.0-1014.14
4.15.0-1018.18
4.15.0-1019.19
4.15.0-1021.21
4.15.0-1022.23
4.15.0-1023.24
4.15.0-1025.26
4.15.0-1028.29
4.15.0-1030.31
4.15.0-1031.32
4.15.0-1032.33
4.15.0-1035.36
4.15.0-1036.38
4.15.0-1037.39
4.18.0-1011.11~18.04.1
4.18.0-1013.13~18.04.1
4.18.0-1014.14~18.04.1
4.18.0-1018.18~18.04.1
4.18.0-1019.19~18.04.1
4.18.0-1020.20~18.04.1
4.18.0-1023.24~18.04.1
4.18.0-1024.25~18.04.1
4.18.0-1025.27~18.04.1
5.*
5.0.0-1014.14~18.04.1
5.0.0-1016.17~18.04.1
5.0.0-1018.19~18.04.1
5.0.0-1020.21~18.04.1
5.0.0-1022.23~18.04.1
5.0.0-1023.24~18.04.1
5.0.0-1025.27~18.04.1
5.0.0-1027.29~18.04.1
5.0.0-1028.30~18.04.1
5.0.0-1029.31~18.04.1
5.0.0-1031.33
5.0.0-1032.34
5.0.0-1035.37
5.0.0-1036.38

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-cloud-tools-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-azure-headers-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-azure-tools-5.0.0-1036",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-buildinfo-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-cloud-tools-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-headers-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-modules-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        },
        {
            "binary_name": "linux-tools-5.0.0-1036-azure",
            "binary_version": "5.0.0-1036.38"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-5.3

Package

Name
linux-azure-5.3
Purl
pkg:deb/ubuntu/linux-azure-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1007.8~18.04.1
5.3.0-1008.9~18.04.1
5.3.0-1009.10~18.04.1
5.3.0-1010.11~18.04.1
5.3.0-1012.13~18.04.1
5.3.0-1013.14~18.04.1
5.3.0-1016.17~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1019.20~18.04.1
5.3.0-1020.21~18.04.1
5.3.0-1022.23~18.04.1
5.3.0-1028.29~18.04.1
5.3.0-1031.32~18.04.1
5.3.0-1032.33~18.04.1
5.3.0-1034.35~18.04.1
5.3.0-1035.36

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.3-cloud-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-azure-5.3-headers-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-azure-5.3-tools-5.3.0-1035",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-headers-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-modules-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        },
        {
            "binary_name": "linux-tools-5.3.0-1035-azure",
            "binary_version": "5.3.0-1035.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-edge

Package

Name
linux-azure-edge
Purl
pkg:deb/ubuntu/linux-azure-edge?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.18.0-1006.6~18.04.1
4.18.0-1007.7~18.04.1
4.18.0-1008.8~18.04.1
5.*
5.0.0-1012.12~18.04.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-edge-cloud-tools-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-azure-edge-tools-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-azure-headers-5.0.0-1012",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.0.0-1012-azure",
            "binary_version": "5.0.0-1012.12~18.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1001.1
4.15.0-1003.3
4.15.0-1005.5
4.15.0-1006.6
4.15.0-1008.8
4.15.0-1009.9
4.15.0-1010.10
4.15.0-1014.14
4.15.0-1015.15
4.15.0-1017.18
4.15.0-1018.19
4.15.0-1019.20
4.15.0-1021.22
4.15.0-1023.24
4.15.0-1024.25
4.15.0-1025.26
4.15.0-1026.27
4.15.0-1027.28
4.15.0-1028.29
4.15.0-1029.31
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1042.45
4.15.0-1044.70
5.*
5.0.0-1020.20~18.04.1
5.0.0-1021.21~18.04.1
5.0.0-1025.26~18.04.1
5.0.0-1026.27~18.04.1
5.0.0-1028.29~18.04.1
5.0.0-1029.30~18.04.1
5.0.0-1031.32
5.0.0-1033.34
5.0.0-1034.35

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-gcp-headers-5.0.0-1034",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-gcp-tools-5.0.0-1034",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-headers-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-modules-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        },
        {
            "binary_name": "linux-tools-5.0.0-1034-gcp",
            "binary_version": "5.0.0-1034.35"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-5.3

Package

Name
linux-gcp-5.3
Purl
pkg:deb/ubuntu/linux-gcp-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1008.9~18.04.1
5.3.0-1009.10~18.04.1
5.3.0-1010.11~18.04.1
5.3.0-1012.13~18.04.1
5.3.0-1014.15~18.04.1
5.3.0-1016.17~18.04.1
5.3.0-1017.18~18.04.1
5.3.0-1018.19~18.04.1
5.3.0-1020.22~18.04.1
5.3.0-1026.28~18.04.1
5.3.0-1029.31~18.04.1
5.3.0-1030.32~18.04.1
5.3.0-1032.34~18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-gcp-5.3-headers-5.3.0-1032",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-gcp-5.3-tools-5.3.0-1032",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.3.0-1032-gcp",
            "binary_version": "5.3.0-1032.34~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gke-4.15

Package

Name
linux-gke-4.15
Purl
pkg:deb/ubuntu/linux-gke-4.15?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1030.32
4.15.0-1032.34
4.15.0-1033.35
4.15.0-1034.36
4.15.0-1036.38
4.15.0-1037.39
4.15.0-1040.42
4.15.0-1041.43
4.15.0-1042.44
4.15.0-1044.46
4.15.0-1045.48
4.15.0-1046.49
4.15.0-1048.51
4.15.0-1049.52
4.15.0-1050.53
4.15.0-1052.55
4.15.0-1055.58
4.15.0-1057.60
4.15.0-1058.61
4.15.0-1059.62
4.15.0-1063.66
4.15.0-1064.67
4.15.0-1066.69
4.15.0-1067.70
4.15.0-1069.72
4.15.0-1070.73
4.15.0-1072.76
4.15.0-1073.78
4.15.0-1074.79
4.15.0-1076.81
4.15.0-1077.82
4.15.0-1078.83
4.15.0-1079.84

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-gke-4.15-headers-4.15.0-1079",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-gke-4.15-tools-4.15.0-1079",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-headers-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-modules-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-modules-extra-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        },
        {
            "binary_name": "linux-tools-4.15.0-1079-gke",
            "binary_version": "4.15.0-1079.84"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gke-5.4

Package

Name
linux-gke-5.4
Purl
pkg:deb/ubuntu/linux-gke-5.4?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1025.25~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.31~18.04.1
5.4.0-1030.32~18.04.1
5.4.0-1032.34~18.04.1
5.4.0-1033.35~18.04.1
5.4.0-1035.37~18.04.1
5.4.0-1036.38~18.04.1
5.4.0-1037.39~18.04.1
5.4.0-1039.41~18.04.1
5.4.0-1040.42~18.04.1
5.4.0-1042.44~18.04.1
5.4.0-1043.45~18.04.1
5.4.0-1044.46~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1
5.4.0-1052.55~18.04.1
5.4.0-1053.56~18.04.1
5.4.0-1054.57~18.04.1
5.4.0-1055.58~18.04.1
5.4.0-1056.59~18.04.1
5.4.0-1057.60~18.04.1
5.4.0-1059.62~18.04.1
5.4.0-1061.64~18.04.1
5.4.0-1062.65~18.04.1
5.4.0-1063.66~18.04.1
5.4.0-1065.68~18.04.1
5.4.0-1066.69~18.04.1
5.4.0-1067.70~18.04.1
5.4.0-1068.71~18.04.1
5.4.0-1071.76~18.04.3
5.4.0-1072.77~18.04.1
5.4.0-1074.79~18.04.1
5.4.0-1076.82~18.04.1
5.4.0-1078.84~18.04.1
5.4.0-1080.86~18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-gke-5.4-headers-5.4.0-1080",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-gke-5.4-tools-5.4.0-1080",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.4.0-1080-gke",
            "binary_version": "5.4.0-1080.86~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gkeop-5.4

Package

Name
linux-gkeop-5.4
Purl
pkg:deb/ubuntu/linux-gkeop-5.4?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1001.1
5.4.0-1003.3
5.4.0-1004.5
5.4.0-1005.6
5.4.0-1007.8~18.04.1
5.4.0-1008.9~18.04.1
5.4.0-1009.10~18.04.1
5.4.0-1010.11~18.04.1
5.4.0-1011.12~18.04.2
5.4.0-1012.13~18.04.1
5.4.0-1013.14~18.04.1
5.4.0-1014.15~18.04.1
5.4.0-1015.16~18.04.1
5.4.0-1016.17~18.04.1
5.4.0-1018.19~18.04.1
5.4.0-1021.22~18.04.1
5.4.0-1022.23~18.04.1
5.4.0-1023.24~18.04.1
5.4.0-1024.25~18.04.1
5.4.0-1025.26~18.04.1
5.4.0-1026.27~18.04.1
5.4.0-1027.28~18.04.1
5.4.0-1029.30~18.04.2
5.4.0-1031.32~18.04.1
5.4.0-1032.33~18.04.1
5.4.0-1033.34~18.04.1
5.4.0-1034.35~18.04.1
5.4.0-1036.37~18.04.1
5.4.0-1037.38~18.04.1
5.4.0-1038.39~18.04.1
5.4.0-1039.40~18.04.1
5.4.0-1040.41~18.04.1
5.4.0-1043.44~18.04.1
5.4.0-1046.48~18.04.1
5.4.0-1048.51~18.04.1
5.4.0-1049.52~18.04.1
5.4.0-1051.54~18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-cloud-tools-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-headers-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-source-5.4.0",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.4-tools-5.4.0-1051",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.4.0-1051-gkeop",
            "binary_version": "5.4.0-1051.54~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe

Package

Name
linux-hwe
Purl
pkg:deb/ubuntu/linux-hwe?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.18.0-13.14~18.04.1
4.18.0-14.15~18.04.1
4.18.0-15.16~18.04.1
4.18.0-16.17~18.04.1
4.18.0-17.18~18.04.1
4.18.0-18.19~18.04.1
4.18.0-20.21~18.04.1
4.18.0-21.22~18.04.1
4.18.0-22.23~18.04.1
4.18.0-24.25~18.04.1
4.18.0-25.26~18.04.1
5.*
5.0.0-23.24~18.04.1
5.0.0-25.26~18.04.1
5.0.0-27.28~18.04.1
5.0.0-29.31~18.04.1
5.0.0-31.33~18.04.1
5.0.0-32.34~18.04.2
5.0.0-35.38~18.04.1
5.0.0-36.39~18.04.1
5.0.0-37.40~18.04.1
5.3.0-26.28~18.04.1
5.3.0-28.30~18.04.1
5.3.0-40.32~18.04.1
5.3.0-42.34~18.04.1
5.3.0-45.37~18.04.1
5.3.0-46.38~18.04.1
5.3.0-51.44~18.04.2
5.3.0-53.47~18.04.1
5.3.0-59.53~18.04.1
5.3.0-61.55~18.04.1
5.3.0-62.56~18.04.1
5.3.0-64.58~18.04.1
5.3.0-65.59
5.3.0-66.60
5.3.0-67.61
5.3.0-68.63
5.3.0-69.65
5.3.0-70.66
5.3.0-72.68
5.3.0-73.69
5.3.0-74.70
5.3.0-75.71
5.3.0-76.72

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "crypto-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fat-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "firewire-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "floppy-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fs-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "fs-secondary-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "input-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "ipmi-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "kernel-image-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-headers-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-headers-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-cloud-tools-5.3.0-76",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-headers-5.3.0-76",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-tools-5.3.0-76",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-hwe-udebs-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-modules-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-modules-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-source-5.3.0",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-tools-5.3.0-76-generic",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "linux-tools-5.3.0-76-lowlatency",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "md-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "message-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "mouse-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "multipath-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nfs-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-shared-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "nic-usb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "parport-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "pata-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "pcmcia-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "plip-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "ppp-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "sata-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "scsi-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "serial-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "storage-core-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "usb-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "virtio-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        },
        {
            "binary_name": "vlan-modules-5.3.0-76-generic-di",
            "binary_version": "5.3.0-76.72"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-edge

Package

Name
linux-hwe-edge
Purl
pkg:deb/ubuntu/linux-hwe-edge?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-15.16~18.04.1
5.0.0-16.17~18.04.1
5.0.0-17.18~18.04.1
5.0.0-19.20~18.04.1
5.0.0-20.21~18.04.1
5.3.0-19.20~18.04.2
5.3.0-22.24~18.04.1
5.3.0-23.25~18.04.1
5.3.0-23.25~18.04.2
5.3.0-24.26~18.04.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "block-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "crypto-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "crypto-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "dasd-extra-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "dasd-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fat-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fat-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "firewire-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "floppy-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-secondary-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "fs-secondary-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "input-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "input-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ipmi-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ipmi-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "kernel-image-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "kernel-image-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-headers-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-cloud-tools-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-tools-5.3.0-24",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-hwe-edge-udebs-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-source-5.3.0",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.3.0-24-generic",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.3.0-24-generic-lpae",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "linux-tools-5.3.0-24-lowlatency",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "md-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "md-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "message-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "mouse-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "mouse-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "multipath-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "multipath-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nfs-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nfs-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-shared-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-shared-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-usb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "nic-usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "parport-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "parport-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "pata-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "pcmcia-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "plip-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "plip-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ppp-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "ppp-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "sata-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "sata-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "scsi-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "scsi-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "serial-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "storage-core-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "storage-core-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "usb-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "usb-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "virtio-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "vlan-modules-5.3.0-24-generic-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        },
        {
            "binary_name": "vlan-modules-5.3.0-24-generic-lpae-di",
            "binary_version": "5.3.0-24.26~18.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem

Package

Name
linux-oem
Purl
pkg:deb/ubuntu/linux-oem?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

4.*
4.15.0-1002.3
4.15.0-1004.5
4.15.0-1006.9
4.15.0-1008.11
4.15.0-1009.12
4.15.0-1012.15
4.15.0-1013.16
4.15.0-1015.18
4.15.0-1017.20
4.15.0-1018.21
4.15.0-1021.24
4.15.0-1024.29
4.15.0-1026.31
4.15.0-1028.33
4.15.0-1030.35
4.15.0-1033.38
4.15.0-1034.39
4.15.0-1035.40
4.15.0-1036.41
4.15.0-1038.43
4.15.0-1039.44
4.15.0-1043.48
4.15.0-1045.50
4.15.0-1050.57
4.15.0-1056.65
4.15.0-1057.66
4.15.0-1059.68
4.15.0-1063.72
4.15.0-1064.73
4.15.0-1065.75
4.15.0-1066.76
4.15.0-1067.77
4.15.0-1069.79
4.15.0-1073.83
4.15.0-1076.86
4.15.0-1079.89
4.15.0-1080.90
4.15.0-1081.91
4.15.0-1087.97
4.15.0-1090.100
4.15.0-1091.101
4.15.0-1093.103
4.15.0-1094.104
4.15.0-1096.106
4.15.0-1097.107
4.15.0-1099.109
4.15.0-1100.110
4.15.0-1101.112
4.15.0-1102.113
4.15.0-1103.114

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "crypto-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fat-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "firewire-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "floppy-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fs-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "fs-secondary-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "input-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "ipmi-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "irda-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "kernel-image-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-buildinfo-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-headers-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-image-unsigned-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-modules-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-oem-headers-4.15.0-1103",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-oem-tools-4.15.0-1103",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-tools-4.15.0-1103-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "linux-udebs-oem",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "md-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "message-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "mouse-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "multipath-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nfs-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-shared-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "nic-usb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "parport-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "pata-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "pcmcia-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "pcmcia-storage-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "plip-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "ppp-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "sata-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "scsi-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "serial-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "storage-core-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "usb-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "virtio-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        },
        {
            "binary_name": "vlan-modules-4.15.0-1103-oem-di",
            "binary_version": "4.15.0-1103.114"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-5.0

Package

Name
linux-oracle-5.0
Purl
pkg:deb/ubuntu/linux-oracle-5.0?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.0.0-1007.12~18.04.1
5.0.0-1008.13~18.04.1
5.0.0-1009.14~18.04.1
5.0.0-1010.15~18.04.1
5.0.0-1011.16
5.0.0-1013.18
5.0.0-1014.19

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-headers-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-image-unsigned-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-modules-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-modules-extra-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-oracle-5.0-headers-5.0.0-1014",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-oracle-5.0-tools-5.0.0-1014",
            "binary_version": "5.0.0-1014.19"
        },
        {
            "binary_name": "linux-tools-5.0.0-1014-oracle",
            "binary_version": "5.0.0-1014.19"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-5.3

Package

Name
linux-oracle-5.3
Purl
pkg:deb/ubuntu/linux-oracle-5.3?arch=source&distro=bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1011.12~18.04.1
5.3.0-1013.14~18.04.1
5.3.0-1014.15~18.04.1
5.3.0-1016.18~18.04.1
5.3.0-1018.20~18.04.1
5.3.0-1024.26~18.04.1
5.3.0-1027.29~18.04.1
5.3.0-1028.30~18.04.1
5.3.0-1030.32~18.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-headers-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-modules-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-oracle-5.3-headers-5.3.0-1030",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-oracle-5.3-tools-5.3.0-1030",
            "binary_version": "5.3.0-1030.32~18.04.1"
        },
        {
            "binary_name": "linux-tools-5.3.0-1030-oracle",
            "binary_version": "5.3.0-1030.32~18.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:20.04:LTS
linux-aws-5.11

Package

Name
linux-aws-5.11
Purl
pkg:deb/ubuntu/linux-aws-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1009.9~20.04.2
5.11.0-1014.15~20.04.1
5.11.0-1016.17~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.2
5.11.0-1021.22~20.04.2
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.11-cloud-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-1028-aws",
            "binary_version": "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-5.13

Package

Name
linux-aws-5.13
Purl
pkg:deb/ubuntu/linux-aws-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9~20.04.2
5.13.0-1011.12~20.04.1
5.13.0-1012.13~20.04.1
5.13.0-1014.15~20.04.1
5.13.0-1017.19~20.04.1
5.13.0-1019.21~20.04.1
5.13.0-1021.23~20.04.2
5.13.0-1022.24~20.04.1
5.13.0-1023.25~20.04.1
5.13.0-1025.27~20.04.1
5.13.0-1028.31~20.04.1
5.13.0-1029.32~20.04.1
5.13.0-1031.35~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.13-cloud-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.13-headers-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.13-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1031-aws",
            "binary_version": "5.13.0-1031.35~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-5.8

Package

Name
linux-aws-5.8
Purl
pkg:deb/ubuntu/linux-aws-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1035.37~20.04.1
5.8.0-1038.40~20.04.1
5.8.0-1041.43~20.04.1
5.8.0-1042.44~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.8-cloud-tools-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.8-headers-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.8-tools-5.8.0-1042",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-1042-aws",
            "binary_version": "5.8.0-1042.44~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-5.11

Package

Name
linux-azure-5.11
Purl
pkg:deb/ubuntu/linux-azure-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1007.7~20.04.2
5.11.0-1012.13~20.04.1
5.11.0-1013.14~20.04.1
5.11.0-1015.16~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.11-cloud-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-azure-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-azure-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-headers-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-modules-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        },
        {
            "binary_name": "linux-tools-5.11.0-1028-azure",
            "binary_version": "5.11.0-1028.31~20.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-5.13

Package

Name
linux-azure-5.13
Purl
pkg:deb/ubuntu/linux-azure-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1009.10~20.04.2
5.13.0-1012.14~20.04.1
5.13.0-1013.15~20.04.1
5.13.0-1014.16~20.04.1
5.13.0-1017.19~20.04.1
5.13.0-1021.24~20.04.1
5.13.0-1022.26~20.04.1
5.13.0-1023.27~20.04.1
5.13.0-1025.29~20.04.1
5.13.0-1028.33~20.04.1
5.13.0-1029.34~20.04.1
5.13.0-1031.37~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.13-cloud-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.13-headers-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.13-tools-5.13.0-1031",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1031-azure",
            "binary_version": "5.13.0-1031.37~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-5.8

Package

Name
linux-azure-5.8
Purl
pkg:deb/ubuntu/linux-azure-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1033.35~20.04.1
5.8.0-1036.38~20.04.1
5.8.0-1039.42~20.04.1
5.8.0-1040.43~20.04.1
5.8.0-1041.44~20.04.1
5.8.0-1042.45~20.04.1
5.8.0-1043.46~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.8-cloud-tools-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.8-headers-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.8-tools-5.8.0-1043",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-1043-azure",
            "binary_version": "5.8.0-1043.46~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1063.66+cvm2.2
5.4.0-1063.66+cvm3.2
5.4.0-1064.67+cvm1.1
5.4.0-1065.68+cvm2.1
5.4.0-1067.70+cvm1.1
5.4.0-1068.71+cvm1.1
5.4.0-1069.72+cvm1.1
5.4.0-1070.73+cvm1.1
5.4.0-1072.75+cvm1.1
5.4.0-1073.76+cvm1.1
5.4.0-1074.77+cvm1.1
5.4.0-1076.79+cvm1.1
5.4.0-1078.81+cvm1.1
5.4.0-1080.83+cvm1.1
5.4.0-1083.87+cvm1.1
5.4.0-1085.90+cvm1.1
5.4.0-1085.90+cvm2.1
5.4.0-1086.91+cvm1.1
5.4.0-1089.94+cvm1.2
5.4.0-1090.95+cvm1.1
5.4.0-1091.96+cvm1.1
5.4.0-1092.97+cvm1.1
5.4.0-1095.101+cvm1.1
5.4.0-1098.104+cvm1.1
5.4.0-1100.106+cvm1.1
5.4.0-1103.109+cvm1.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-image-unsigned-5.4.0-1103-azure-fde",
            "binary_version": "5.4.0-1103.109+cvm1.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-5.11

Package

Name
linux-gcp-5.11
Purl
pkg:deb/ubuntu/linux-gcp-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1009.10~20.04.1
5.11.0-1014.16~20.04.1
5.11.0-1017.19~20.04.1
5.11.0-1018.20~20.04.2
5.11.0-1020.22~20.04.1
5.11.0-1021.23~20.04.1
5.11.0-1022.24~20.04.1
5.11.0-1023.25~20.04.1
5.11.0-1024.26~20.04.1
5.11.0-1026.29~20.04.1
5.11.0-1028.32~20.04.1
5.11.0-1029.33~20.04.3

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-gcp-5.11-headers-5.11.0-1029",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-gcp-5.11-tools-5.11.0-1029",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-headers-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-modules-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        },
        {
            "binary_name": "linux-tools-5.11.0-1029-gcp",
            "binary_version": "5.11.0-1029.33~20.04.3"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-5.13

Package

Name
linux-gcp-5.13
Purl
pkg:deb/ubuntu/linux-gcp-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9~20.04.3
5.13.0-1012.15~20.04.1
5.13.0-1013.16~20.04.1
5.13.0-1015.18~20.04.1
5.13.0-1019.23~20.04.1
5.13.0-1021.25~20.04.1
5.13.0-1023.28~20.04.1
5.13.0-1024.29~20.04.1
5.13.0-1025.30~20.04.1
5.13.0-1027.32~20.04.1
5.13.0-1030.36~20.04.1
5.13.0-1031.37~20.04.1
5.13.0-1033.40~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-gcp-5.13-headers-5.13.0-1033",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-gcp-5.13-tools-5.13.0-1033",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1033-gcp",
            "binary_version": "5.13.0-1033.40~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-5.8

Package

Name
linux-gcp-5.8
Purl
pkg:deb/ubuntu/linux-gcp-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1032.34~20.04.1
5.8.0-1035.37~20.04.1
5.8.0-1038.40~20.04.1
5.8.0-1039.41

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-gcp-5.8-headers-5.8.0-1039",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-gcp-5.8-tools-5.8.0-1039",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-headers-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-modules-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        },
        {
            "binary_name": "linux-tools-5.8.0-1039-gcp",
            "binary_version": "5.8.0-1039.41"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1033.35
5.4.0-1035.37
5.4.0-1036.38
5.4.0-1037.39
5.4.0-1039.41
5.4.0-1041.43
5.4.0-1042.44
5.4.0-1043.45
5.4.0-1044.46
5.4.0-1046.48
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1055.58
5.4.0-1056.59
5.4.0-1057.60
5.4.0-1059.62
5.4.0-1061.64
5.4.0-1062.65
5.4.0-1063.66
5.4.0-1065.68
5.4.0-1066.69
5.4.0-1067.70
5.4.0-1068.71
5.4.0-1071.76
5.4.0-1072.77
5.4.0-1074.79
5.4.0-1076.82
5.4.0-1078.84
5.4.0-1080.86
5.4.0-1081.87
5.4.0-1083.89
5.4.0-1084.90
5.4.0-1086.93
5.4.0-1087.94
5.4.0-1090.97
5.4.0-1091.98
5.4.0-1094.101
5.4.0-1095.102
5.4.0-1096.103
5.4.0-1097.104
5.4.0-1098.105
5.4.0-1099.106
5.4.0-1100.107
5.4.0-1101.108
5.4.0-1102.109
5.4.0-1103.110
5.4.0-1104.111
5.4.0-1105.112

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-gke-headers-5.4.0-1105",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-gke-tools-5.4.0-1105",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-headers-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-modules-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        },
        {
            "binary_name": "linux-tools-5.4.0-1105-gke",
            "binary_version": "5.4.0-1105.112"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gke-5.15

Package

Name
linux-gke-5.15
Purl
pkg:deb/ubuntu/linux-gke-5.15?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1011.14~20.04.1
5.15.0-1014.17~20.04.1
5.15.0-1015.18~20.04.1
5.15.0-1016.19~20.04.1
5.15.0-1019.23~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1023.28~20.04.2
5.15.0-1027.32~20.04.1
5.15.0-1028.33~20.04.1
5.15.0-1029.34~20.04.1
5.15.0-1031.36~20.04.1
5.15.0-1032.37~20.04.1
5.15.0-1033.38~20.04.1
5.15.0-1034.39~20.04.1
5.15.0-1036.41~20.04.1
5.15.0-1037.42~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1039.44~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-gke-5.15-headers-5.15.0-1039",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-gke-5.15-tools-5.15.0-1039",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1039-gke",
            "binary_version": "5.15.0-1039.44~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-1008.9
5.4.0-1009.10
5.4.0-1010.11
5.4.0-1011.12
5.4.0-1012.13
5.4.0-1013.14
5.4.0-1014.15
5.4.0-1015.16
5.4.0-1016.17
5.4.0-1018.19
5.4.0-1021.22
5.4.0-1022.23
5.4.0-1023.24
5.4.0-1024.25
5.4.0-1025.26
5.4.0-1026.27
5.4.0-1027.28
5.4.0-1029.30
5.4.0-1031.32
5.4.0-1032.33
5.4.0-1033.34
5.4.0-1034.35
5.4.0-1036.37
5.4.0-1037.38
5.4.0-1038.39
5.4.0-1039.40
5.4.0-1040.41
5.4.0-1043.44
5.4.0-1046.48
5.4.0-1048.51
5.4.0-1049.52
5.4.0-1051.54
5.4.0-1052.55
5.4.0-1053.56
5.4.0-1054.57
5.4.0-1056.60
5.4.0-1057.61
5.4.0-1060.64
5.4.0-1061.65
5.4.0-1062.66
5.4.0-1064.68
5.4.0-1065.69
5.4.0-1066.70
5.4.0-1067.71
5.4.0-1068.72
5.4.0-1069.73
5.4.0-1070.74
5.4.0-1071.75
5.4.0-1072.76
5.4.0-1073.77
5.4.0-1074.78
5.4.0-1075.79
5.4.0-1076.80
5.4.0-1077.81
5.4.0-1078.82
5.4.0-1079.83
5.4.0-1080.84
5.4.0-1081.85
5.4.0-1083.87
5.4.0-1084.88
5.4.0-1085.89
5.4.0-1086.90
5.4.0-1087.91
5.4.0-1088.92
5.4.0-1089.93
5.4.0-1090.94
5.4.0-1091.95
5.4.0-1092.96
5.4.0-1093.97
5.4.0-1094.98
5.4.0-1095.99
5.4.0-1096.100
5.4.0-1097.101
5.4.0-1098.102
5.4.0-1099.103
5.4.0-1100.104
5.4.0-1101.105
5.4.0-1102.106

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-cloud-tools-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-cloud-tools-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-headers-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-source-5.4.0",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-gkeop-tools-5.4.0-1102",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-headers-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-image-unsigned-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-modules-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        },
        {
            "binary_name": "linux-tools-5.4.0-1102-gkeop",
            "binary_version": "5.4.0-1102.106"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gkeop-5.15

Package

Name
linux-gkeop-5.15
Purl
pkg:deb/ubuntu/linux-gkeop-5.15?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1003.5~20.04.2
5.15.0-1005.7~20.04.1
5.15.0-1007.10~20.04.1
5.15.0-1008.12~20.04.1
5.15.0-1011.15~20.04.2
5.15.0-1012.16~20.04.1
5.15.0-1013.17~20.04.1
5.15.0-1015.19~20.04.1
5.15.0-1016.21~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1022.27~20.04.1
5.15.0-1023.28~20.04.1
5.15.0-1024.29~20.04.1
5.15.0-1025.30~20.04.1
5.15.0-1026.31~20.04.1
5.15.0-1027.32~20.04.1
5.15.0-1028.33~20.04.1
5.15.0-1030.35~20.04.1
5.15.0-1031.37~20.04.1
5.15.0-1032.38~20.04.1
5.15.0-1033.39~20.04.1
5.15.0-1034.40~20.04.1
5.15.0-1035.41~20.04.1
5.15.0-1036.42~20.04.1
5.15.0-1037.43~20.04.1
5.15.0-1038.44~20.04.1
5.15.0-1039.45~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1043.50~20.04.1
5.15.0-1044.51~20.04.1
5.15.0-1045.52~20.04.1
5.15.0-1046.53~20.04.1
5.15.0-1047.54~20.04.1
5.15.0-1048.55~20.04.1
5.15.0-1049.56~20.04.1
5.15.0-1050.57~20.04.1
5.15.0-1051.58~20.04.1
5.15.0-1052.59~20.04.1
5.15.0-1053.60~20.04.1
5.15.0-1054.61~20.04.1
5.15.0-1055.62~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.15-cloud-tools-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.15-headers-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-gkeop-5.15-tools-5.15.0-1055",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1055-gkeop",
            "binary_version": "5.15.0-1055.62~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-5.11

Package

Name
linux-hwe-5.11
Purl
pkg:deb/ubuntu/linux-hwe-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-22.23~20.04.1
5.11.0-25.27~20.04.1
5.11.0-27.29~20.04.1
5.11.0-34.36~20.04.1
5.11.0-36.40~20.04.1
5.11.0-37.41~20.04.2
5.11.0-38.42~20.04.1
5.11.0-40.44~20.04.2
5.11.0-41.45~20.04.1
5.11.0-43.47~20.04.2
5.11.0-44.48~20.04.2
5.11.0-46.51~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "block-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "block-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "dasd-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "floppy-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "input-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "input-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "input-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-cloud-tools-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-cloud-tools-common",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-headers-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-source-5.11.0",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-tools-5.11.0-46",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-tools-common",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-tools-host",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-udebs-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-udebs-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.11-udebs-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-generic",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-generic-64k",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-generic-lpae",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-46-lowlatency",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "md-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "md-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "md-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "message-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "message-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "pcmcia-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "serial-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.11.0-46-generic-64k-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.11.0-46-generic-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.11.0-46-generic-lpae-di",
            "binary_version": "5.11.0-46.51~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-5.13

Package

Name
linux-hwe-5.13
Purl
pkg:deb/ubuntu/linux-hwe-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-21.21~20.04.1
5.13.0-22.22~20.04.1
5.13.0-23.23~20.04.2
5.13.0-25.26~20.04.1
5.13.0-27.29~20.04.1
5.13.0-28.31~20.04.1
5.13.0-30.33~20.04.1
5.13.0-35.40~20.04.1
5.13.0-37.42~20.04.1
5.13.0-39.44~20.04.1
5.13.0-40.45~20.04.1
5.13.0-41.46~20.04.1
5.13.0-44.49~20.04.1
5.13.0-48.54~20.04.1
5.13.0-51.58~20.04.1
5.13.0-52.59~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "block-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "block-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "dasd-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "floppy-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "input-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "input-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "input-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-cloud-tools-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-cloud-tools-common",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-headers-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-source-5.13.0",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-tools-5.13.0-52",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-tools-common",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-tools-host",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-udebs-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-udebs-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.13-udebs-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-generic",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-generic-64k",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-generic-lpae",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-52-lowlatency",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "md-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "md-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "md-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "message-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "message-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "pcmcia-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "serial-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.13.0-52-generic-64k-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.13.0-52-generic-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.13.0-52-generic-lpae-di",
            "binary_version": "5.13.0-52.59~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-5.8

Package

Name
linux-hwe-5.8
Purl
pkg:deb/ubuntu/linux-hwe-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-23.24~20.04.1
5.8.0-25.26~20.04.1
5.8.0-28.30~20.04.1
5.8.0-29.31~20.04.1
5.8.0-31.33~20.04.1
5.8.0-33.36~20.04.1
5.8.0-34.37~20.04.2
5.8.0-36.40~20.04.1
5.8.0-38.43~20.04.1
5.8.0-40.45~20.04.1
5.8.0-41.46~20.04.1
5.8.0-43.49~20.04.1
5.8.0-44.50~20.04.1
5.8.0-45.51~20.04.1
5.8.0-48.54~20.04.1
5.8.0-49.55~20.04.1
5.8.0-50.56~20.04.1
5.8.0-53.60~20.04.1
5.8.0-55.62~20.04.1
5.8.0-59.66~20.04.1
5.8.0-63.71~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "block-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "block-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "dasd-extra-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "dasd-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "floppy-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-cloud-tools-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-cloud-tools-common",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-headers-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-source-5.8.0",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-tools-5.8.0-63",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-tools-common",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-tools-host",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-udebs-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-udebs-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.8-udebs-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-generic",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-generic-64k",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-generic-lpae",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-63-lowlatency",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "message-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "message-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-pcmcia-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "pcmcia-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "pcmcia-storage-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "serial-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-63-generic-64k-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-63-generic-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-63-generic-lpae-di",
            "binary_version": "5.8.0-63.71~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-intel-5.13

Package

Name
linux-intel-5.13
Purl
pkg:deb/ubuntu/linux-intel-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1007.7
5.13.0-1008.8
5.13.0-1009.9
5.13.0-1010.10
5.13.0-1011.11
5.13.0-1014.15
5.13.0-1017.19

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-cloud-tools-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-headers-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-cloud-tools-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-cloud-tools-common",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-headers-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-source-5.13.0",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-tools-5.13.0-1017",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-tools-common",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-intel-5.13-tools-host",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-modules-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        },
        {
            "binary_name": "linux-tools-5.13.0-1017-intel",
            "binary_version": "5.13.0-1017.19"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-5.10

Package

Name
linux-oem-5.10
Purl
pkg:deb/ubuntu/linux-oem-5.10?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.10.0-1008.9
5.10.0-1011.12
5.10.0-1013.14
5.10.0-1014.15
5.10.0-1016.17
5.10.0-1017.18
5.10.0-1019.20
5.10.0-1021.22
5.10.0-1022.23
5.10.0-1023.24
5.10.0-1025.26
5.10.0-1026.27
5.10.0-1029.30
5.10.0-1032.33
5.10.0-1033.34
5.10.0-1034.35
5.10.0-1038.40
5.10.0-1044.46
5.10.0-1045.47
5.10.0-1049.51
5.10.0-1050.52
5.10.0-1051.53
5.10.0-1052.54
5.10.0-1053.55
5.10.0-1055.58
5.10.0-1057.61

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-headers-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-image-unsigned-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-modules-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-oem-5.10-headers-5.10.0-1057",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-oem-5.10-tools-5.10.0-1057",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-oem-5.10-tools-host",
            "binary_version": "5.10.0-1057.61"
        },
        {
            "binary_name": "linux-tools-5.10.0-1057-oem",
            "binary_version": "5.10.0-1057.61"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-5.13

Package

Name
linux-oem-5.13
Purl
pkg:deb/ubuntu/linux-oem-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1009.10
5.13.0-1010.11
5.13.0-1012.16
5.13.0-1014.18
5.13.0-1017.21
5.13.0-1019.23
5.13.0-1020.24
5.13.0-1021.25
5.13.0-1022.26
5.13.0-1026.32
5.13.0-1028.35
5.13.0-1029.36

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-headers-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-modules-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-oem-5.13-headers-5.13.0-1029",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-oem-5.13-tools-5.13.0-1029",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-oem-5.13-tools-host",
            "binary_version": "5.13.0-1029.36"
        },
        {
            "binary_name": "linux-tools-5.13.0-1029-oem",
            "binary_version": "5.13.0-1029.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-5.14

Package

Name
linux-oem-5.14
Purl
pkg:deb/ubuntu/linux-oem-5.14?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.14.0-1004.4
5.14.0-1005.5
5.14.0-1007.7
5.14.0-1008.8
5.14.0-1010.10
5.14.0-1011.11
5.14.0-1013.13
5.14.0-1018.19
5.14.0-1020.22
5.14.0-1022.24
5.14.0-1024.26
5.14.0-1027.30
5.14.0-1029.32
5.14.0-1031.34
5.14.0-1032.35
5.14.0-1033.36
5.14.0-1034.37
5.14.0-1036.40
5.14.0-1038.42
5.14.0-1042.47
5.14.0-1044.49
5.14.0-1045.51
5.14.0-1046.53
5.14.0-1047.54
5.14.0-1048.55
5.14.0-1049.56
5.14.0-1050.57
5.14.0-1051.58
5.14.0-1052.59
5.14.0-1054.61
5.14.0-1055.62
5.14.0-1056.63
5.14.0-1057.64
5.14.0-1058.66
5.14.0-1059.67

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-headers-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-image-unsigned-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-modules-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-oem-5.14-headers-5.14.0-1059",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-oem-5.14-tools-5.14.0-1059",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-oem-5.14-tools-host",
            "binary_version": "5.14.0-1059.67"
        },
        {
            "binary_name": "linux-tools-5.14.0-1059-oem",
            "binary_version": "5.14.0-1059.67"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-5.6

Package

Name
linux-oem-5.6
Purl
pkg:deb/ubuntu/linux-oem-5.6?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.6.0-1007.7
5.6.0-1008.8
5.6.0-1010.10
5.6.0-1011.11
5.6.0-1013.13
5.6.0-1017.17
5.6.0-1018.18
5.6.0-1020.20
5.6.0-1021.21
5.6.0-1023.23
5.6.0-1026.26
5.6.0-1027.27
5.6.0-1028.28
5.6.0-1031.32
5.6.0-1032.33
5.6.0-1033.35
5.6.0-1034.36
5.6.0-1035.37
5.6.0-1036.39
5.6.0-1039.43
5.6.0-1042.46
5.6.0-1047.51
5.6.0-1048.52
5.6.0-1050.54
5.6.0-1052.56
5.6.0-1053.57
5.6.0-1054.58
5.6.0-1055.59
5.6.0-1056.60

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-headers-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-image-unsigned-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-modules-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-oem-5.6-headers-5.6.0-1056",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-oem-5.6-tools-5.6.0-1056",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-oem-5.6-tools-host",
            "binary_version": "5.6.0-1056.60"
        },
        {
            "binary_name": "linux-tools-5.6.0-1056-oem",
            "binary_version": "5.6.0-1056.60"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-5.11

Package

Name
linux-oracle-5.11
Purl
pkg:deb/ubuntu/linux-oracle-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1008.8~20.04.1
5.11.0-1013.14~20.04.1
5.11.0-1016.17~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1019.20~20.04.1
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1025.27~20.04.1
5.11.0-1027.30~20.04.1
5.11.0-1028.31~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.11-headers-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.11-tools-5.11.0-1028",
            "binary_version": "5.11.0-1028.31~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.11.0-1028-oracle",
            "binary_version": "5.11.0-1028.31~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-5.13

Package

Name
linux-oracle-5.13
Purl
pkg:deb/ubuntu/linux-oracle-5.13?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1011.13~20.04.2
5.13.0-1015.19~20.04.1
5.13.0-1016.20~20.04.1
5.13.0-1018.22~20.04.1
5.13.0-1021.26~20.04.1
5.13.0-1025.30~20.04.1
5.13.0-1027.32~20.04.1
5.13.0-1028.33~20.04.1
5.13.0-1030.35~20.04.1
5.13.0-1033.39~20.04.1
5.13.0-1034.40~20.04.1
5.13.0-1036.43~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.13-headers-5.13.0-1036",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.13-tools-5.13.0-1036",
            "binary_version": "5.13.0-1036.43~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.13.0-1036-oracle",
            "binary_version": "5.13.0-1036.43~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-5.8

Package

Name
linux-oracle-5.8
Purl
pkg:deb/ubuntu/linux-oracle-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-1031.32~20.04.2
5.8.0-1033.34~20.04.1
5.8.0-1034.35~20.04.2
5.8.0-1037.38~20.04.1
5.8.0-1038.39~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.8-headers-5.8.0-1038",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.8-tools-5.8.0-1038",
            "binary_version": "5.8.0-1038.39~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-1038-oracle",
            "binary_version": "5.8.0-1038.39~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-raspi2

Package

Name
linux-raspi2
Purl
pkg:deb/ubuntu/linux-raspi2?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.3.0-1007.8
5.3.0-1014.16
5.3.0-1015.17
5.3.0-1017.19
5.4.0-1004.4
5.4.0-1006.6

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-headers-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-image-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-modules-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-raspi2-headers-5.4.0-1006",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-raspi2-tools-5.4.0-1006",
            "binary_version": "5.4.0-1006.6"
        },
        {
            "binary_name": "linux-tools-5.4.0-1006-raspi2",
            "binary_version": "5.4.0-1006.6"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.4.0-24.28
5.4.0-26.30
5.4.0-27.31
5.4.0-28.32
5.4.0-30.34
5.4.0-31.35
5.4.0-33.37
5.4.0-34.38
5.4.0-36.41
5.4.0-37.42
5.4.0-39.44
5.4.0-40.45

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "crypto-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "fat-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "firewire-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "fs-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "fs-secondary-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "input-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "ipmi-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "kernel-image-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-buildinfo-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-headers-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-image-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-modules-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-modules-extra-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-riscv-headers-5.4.0-40",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-riscv-tools-5.4.0-40",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-tools-5.4.0-40-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "linux-udebs-generic",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "md-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "message-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "mouse-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "multipath-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nfs-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nic-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nic-shared-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "nic-usb-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "parport-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "pata-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "plip-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "ppp-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "sata-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "scsi-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "storage-core-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "usb-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "virtio-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        },
        {
            "binary_name": "vlan-modules-5.4.0-40-generic-di",
            "binary_version": "5.4.0-40.45"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv-5.11

Package

Name
linux-riscv-5.11
Purl
pkg:deb/ubuntu/linux-riscv-5.11?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.11.0-1015.16~20.04.1
5.11.0-1017.18~20.04.1
5.11.0-1018.19~20.04.2
5.11.0-1020.21~20.04.1
5.11.0-1021.22~20.04.1
5.11.0-1022.23~20.04.1
5.11.0-1023.24~20.04.1
5.11.0-1024.25~20.04.1
5.11.0-1026.28~20.04.1
5.11.0-1028.31~20.04.1
5.11.0-1029.32~20.04.1
5.11.0-1030.34
5.11.0-1031.35

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-headers-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-image-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-modules-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-modules-extra-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-riscv-5.11-headers-5.11.0-1031",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-riscv-5.11-tools-5.11.0-1031",
            "binary_version": "5.11.0-1031.35"
        },
        {
            "binary_name": "linux-tools-5.11.0-1031-generic",
            "binary_version": "5.11.0-1031.35"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv-5.8

Package

Name
linux-riscv-5.8
Purl
pkg:deb/ubuntu/linux-riscv-5.8?arch=source&distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.8.0-14.16~20.04.1
5.8.0-14.16~20.04.3
5.8.0-16.18~20.04.1
5.8.0-17.19~20.04.1
5.8.0-18.20~20.04.1
5.8.0-20.22~20.04.1
5.8.0-22.24~20.04.1
5.8.0-25.27~20.04.1
5.8.0-26.28~20.04.1
5.8.0-29.31~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "block-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "crypto-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "fat-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "firewire-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "fs-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "fs-secondary-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "input-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "ipmi-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "kernel-image-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-image-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-riscv-5.8-headers-5.8.0-29",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-riscv-5.8-tools-5.8.0-29",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.8.0-29-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "linux-udebs-generic",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "md-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "message-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "mouse-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "multipath-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nfs-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nic-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nic-shared-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "nic-usb-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "parport-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "pata-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "plip-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "ppp-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "sata-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "scsi-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "storage-core-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "usb-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "virtio-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        },
        {
            "binary_name": "vlan-modules-5.8.0-29-generic-di",
            "binary_version": "5.8.0-29.31~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:22.04:LTS
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-19.19
5.15.0-17.17
5.15.0-18.18
5.15.0-22.22
5.15.0-23.23
5.15.0-25.25
5.15.0-27.28
5.15.0-30.31
5.15.0-33.34
5.15.0-35.36
5.15.0-37.39
5.15.0-39.42
5.15.0-40.43
5.15.0-41.44
5.15.0-43.46
5.15.0-46.49
5.15.0-47.51
5.15.0-48.54
5.15.0-50.56
5.15.0-52.58
5.15.0-53.59
5.15.0-56.62
5.15.0-57.63
5.15.0-58.64
5.15.0-60.66
5.15.0-67.74
5.15.0-69.76
5.15.0-70.77
5.15.0-71.78
5.15.0-72.79
5.15.0-73.80
5.15.0-75.82
5.15.0-76.83
5.15.0-78.85
5.15.0-79.86
5.15.0-82.91
5.15.0-83.92
5.15.0-84.93
5.15.0-86.96
5.15.0-87.97
5.15.0-88.98
5.15.0-89.99
5.15.0-91.101
5.15.0-92.102
5.15.0-94.104
5.15.0-97.107
5.15.0-100.110
5.15.0-101.111
5.15.0-102.112
5.15.0-105.115
5.15.0-106.116
5.15.0-107.117
5.15.0-112.122
5.15.0-113.123
5.15.0-116.126
5.15.0-117.127
5.15.0-118.128
5.15.0-119.129
5.15.0-121.131
5.15.0-122.132
5.15.0-124.134
5.15.0-125.135
5.15.0-126.136
5.15.0-127.137
5.15.0-128.138
5.15.0-130.140
5.15.0-131.141
5.15.0-133.144
5.15.0-134.145
5.15.0-135.146
5.15.0-136.147
5.15.0-138.148
5.15.0-139.149
5.15.0-140.150
5.15.0-141.151
5.15.0-142.152
5.15.0-143.153
5.15.0-144.157
5.15.0-151.161
5.15.0-152.162
5.15.0-153.163
5.15.0-156.166
5.15.0-157.167
5.15.0-160.170
5.15.0-161.171
5.15.0-163.173
5.15.0-164.174
5.15.0-168.178
5.15.0-170.180
5.15.0-171.181
5.15.0-173.183
5.15.0-174.184
5.15.0-176.186
5.15.0-177.187
5.15.0-179.189
5.15.0-181.191
5.15.0-185.195
5.15.0-186.196
5.15.0-187.197
5.15.0-190.200
5.15.0-191.201
5.15.0-194.204
5.15.0-198.208

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-headers-5.15.0-198",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-image-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-image-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-source-5.15.0",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-tools-common",
            "binary_version": "5.15.0-198.208"
        },
        {
            "binary_name": "linux-tools-host",
            "binary_version": "5.15.0-198.208"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-allwinner-5.19

Package

Name
linux-allwinner-5.19
Purl
pkg:deb/ubuntu/linux-allwinner-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1007.7~22.04.1
5.19.0-1009.9~22.04.1
5.19.0-1010.10~22.04.1
5.19.0-1011.11~22.04.1
5.19.0-1012.12~22.04.1
5.19.0-1013.13~22.04.1
5.19.0-1014.14~22.04.1
5.19.0-1015.15~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-allwinner-5.19-headers-5.19.0-1015",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-allwinner-5.19-tools-5.19.0-1015",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-image-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1015-allwinner",
            "binary_version": "5.19.0-1015.15~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1005.6
5.15.0-1002.4
5.15.0-1003.5
5.15.0-1004.6
5.15.0-1005.7
5.15.0-1008.10
5.15.0-1009.11
5.15.0-1011.14
5.15.0-1013.17
5.15.0-1014.18
5.15.0-1015.19
5.15.0-1017.21
5.15.0-1019.23
5.15.0-1020.24
5.15.0-1021.25
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1026.30
5.15.0-1027.31
5.15.0-1028.32
5.15.0-1030.34
5.15.0-1031.35
5.15.0-1033.37
5.15.0-1034.38
5.15.0-1035.39
5.15.0-1036.40
5.15.0-1037.41
5.15.0-1038.43
5.15.0-1039.44
5.15.0-1040.45
5.15.0-1042.47
5.15.0-1043.48
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1047.52
5.15.0-1048.53
5.15.0-1049.54
5.15.0-1050.55
5.15.0-1051.56
5.15.0-1052.57
5.15.0-1053.58
5.15.0-1055.60
5.15.0-1056.61
5.15.0-1057.63
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1068.74
5.15.0-1069.75
5.15.0-1070.76
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1076.83
5.15.0-1078.85
5.15.0-1079.86
5.15.0-1080.87
5.15.0-1081.88
5.15.0-1082.89
5.15.0-1083.90
5.15.0-1084.91
5.15.0-1085.92
5.15.0-1086.93
5.15.0-1087.94
5.15.0-1088.95
5.15.0-1089.96
5.15.0-1090.97
5.15.0-1091.98
5.15.0-1092.99
5.15.0-1093.100
5.15.0-1095.102
5.15.0-1096.103
5.15.0-1097.104
5.15.0-1098.105
5.15.0-1099.106
5.15.0-1100.107
5.15.0-1101.108
5.15.0-1103.110
5.15.0-1104.111
5.15.0-1105.112
5.15.0-1106.113
5.15.0-1108.115
5.15.0-1109.116
5.15.0-1111.118
5.15.0-1112.119
5.15.0-1113.120
5.15.0-1114.121
5.15.0-1115.122
5.15.0-1116.123
5.15.0-1117.124

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-cloud-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-aws-headers-5.15.0-1117",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-aws-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-headers-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-headers-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-modules-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-modules-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124"
        },
        {
            "binary_name": "linux-tools-5.15.0-1117-aws-64k",
            "binary_version": "5.15.0-1117.124"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-5.19

Package

Name
linux-aws-5.19
Purl
pkg:deb/ubuntu/linux-aws-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1019.20~22.04.1
5.19.0-1020.21~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1024.25~22.04.1
5.19.0-1025.26~22.04.1
5.19.0-1026.27~22.04.1
5.19.0-1027.28~22.04.1
5.19.0-1028.29~22.04.1
5.19.0-1029.30~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.19-cloud-tools-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-aws-5.19-headers-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-aws-5.19-tools-5.19.0-1029",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1029-aws",
            "binary_version": "5.19.0-1029.30~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-6.2

Package

Name
linux-aws-6.2
Purl
pkg:deb/ubuntu/linux-aws-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1005.5~22.04.1
6.2.0-1006.6~22.04.1
6.2.0-1007.7~22.04.1
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.3
6.2.0-1010.10~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-6.2-cloud-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.2-headers-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.2-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1018-aws",
            "binary_version": "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-6.5

Package

Name
linux-aws-6.5
Purl
pkg:deb/ubuntu/linux-aws-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1008.8~22.04.1
6.5.0-1010.10~22.04.1
6.5.0-1011.11~22.04.1
6.5.0-1012.12~22.04.1
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.2
6.5.0-1018.18~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1021.21~22.04.1
6.5.0-1022.22~22.04.1
6.5.0-1023.23~22.04.1
6.5.0-1024.24~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-6.5-cloud-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.5-headers-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.5-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1024-aws",
            "binary_version": "6.5.0-1024.24~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws-6.8

Package

Name
linux-aws-6.8
Purl
pkg:deb/ubuntu/linux-aws-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49~22.04.1

Affected versions

6.*
6.8.0-1009.9~22.04.2
6.8.0-1010.10~22.04.2
6.8.0-1011.12~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.15~22.04.1
6.8.0-1015.16~22.04.1
6.8.0-1016.17~22.04.2
6.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1023.25~22.04.1
6.8.0-1024.26~22.04.1
6.8.0-1027.29~22.04.1
6.8.0-1028.30~22.04.1
6.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
6.8.0-1033.35~22.04.1
6.8.0-1035.37~22.04.1
6.8.0-1036.38~22.04.1
6.8.0-1039.41~22.04.1
6.8.0-1040.42~22.04.1
6.8.0-1041.43~22.04.1
6.8.0-1042.44~22.04.1
6.8.0-1043.45~22.04.1
6.8.0-1044.46~22.04.1
6.8.0-1045.47~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-6.8-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.8-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-aws-6.8-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1006.7
5.15.0-1001.2
5.15.0-1002.3
5.15.0-1003.4
5.15.0-1005.6
5.15.0-1007.8
5.15.0-1008.9
5.15.0-1010.12
5.15.0-1012.15
5.15.0-1013.16
5.15.0-1014.17
5.15.0-1017.20
5.15.0-1019.24
5.15.0-1020.25
5.15.0-1021.26
5.15.0-1022.27
5.15.0-1023.29
5.15.0-1024.30
5.15.0-1029.36
5.15.0-1030.37
5.15.0-1031.38
5.15.0-1033.40
5.15.0-1034.41
5.15.0-1035.42
5.15.0-1036.43
5.15.0-1037.44
5.15.0-1038.45
5.15.0-1039.46
5.15.0-1040.47
5.15.0-1041.48
5.15.0-1042.49
5.15.0-1044.51
5.15.0-1045.52
5.15.0-1046.53
5.15.0-1047.54
5.15.0-1049.56
5.15.0-1050.57
5.15.0-1051.59
5.15.0-1052.60
5.15.0-1053.61
5.15.0-1054.62
5.15.0-1056.64
5.15.0-1057.65
5.15.0-1058.66
5.15.0-1059.67
5.15.0-1060.69
5.15.0-1061.70
5.15.0-1063.72
5.15.0-1064.73
5.15.0-1066.75
5.15.0-1067.76
5.15.0-1068.77
5.15.0-1070.79
5.15.0-1071.80
5.15.0-1072.81
5.15.0-1073.82
5.15.0-1074.83
5.15.0-1075.84
5.15.0-1078.87
5.15.0-1079.88
5.15.0-1081.90
5.15.0-1082.91
5.15.0-1084.93
5.15.0-1086.95
5.15.0-1087.96
5.15.0-1088.97
5.15.0-1089.98
5.15.0-1090.99
5.15.0-1091.100
5.15.0-1092.101
5.15.0-1094.103
5.15.0-1095.104
5.15.0-1096.105
5.15.0-1097.106
5.15.0-1098.107
5.15.0-1099.108
5.15.0-1101.110
5.15.0-1102.111
5.15.0-1103.112
5.15.0-1109.118
5.15.0-1110.119
5.15.0-1111.120
5.15.0-1114.123
5.15.0-1116.125
5.15.0-1117.126
5.15.0-1118.127
5.15.0-1119.128
5.15.0-1121.130
5.15.0-1122.131
5.15.0-1123.132

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-cloud-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-azure-headers-5.15.0-1123",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-azure-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-headers-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-modules-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        },
        {
            "binary_name": "linux-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-5.19

Package

Name
linux-azure-5.19
Purl
pkg:deb/ubuntu/linux-azure-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1020.21~22.04.1
5.19.0-1021.22~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1025.28~22.04.1
5.19.0-1026.29~22.04.1
5.19.0-1027.30~22.04.2

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.19-cloud-tools-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-azure-5.19-headers-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-azure-5.19-tools-5.19.0-1027",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-headers-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-modules-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        },
        {
            "binary_name": "linux-tools-5.19.0-1027-azure",
            "binary_version": "5.19.0-1027.30~22.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-6.2

Package

Name
linux-azure-6.2
Purl
pkg:deb/ubuntu/linux-azure-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1005.5~22.04.1
6.2.0-1006.6~22.04.1
6.2.0-1007.7~22.04.1
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.3
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1
6.2.0-1019.19~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-6.2-cloud-tools-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.2-headers-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.2-tools-6.2.0-1019",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1019-azure",
            "binary_version": "6.2.0-1019.19~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-6.5

Package

Name
linux-azure-6.5
Purl
pkg:deb/ubuntu/linux-azure-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1007.7~22.04.1
6.5.0-1009.9~22.04.1
6.5.0-1010.10~22.04.1
6.5.0-1011.11~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.1
6.5.0-1018.19~22.04.2
6.5.0-1019.20~22.04.1
6.5.0-1021.22~22.04.1
6.5.0-1022.23~22.04.1
6.5.0-1023.24~22.04.1
6.5.0-1024.25~22.04.1
6.5.0-1025.26~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-6.5-cloud-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.5-headers-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.5-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1025-azure",
            "binary_version": "6.5.0-1025.26~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-6.8

Package

Name
linux-azure-6.8
Purl
pkg:deb/ubuntu/linux-azure-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1051.57~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1012.14~22.04.1
6.8.0-1013.15~22.04.1
6.8.0-1014.16~22.04.1
6.8.0-1015.17~22.04.2
6.8.0-1017.20~22.04.1
6.8.0-1018.21~22.04.1
6.8.0-1020.23~22.04.1
6.8.0-1021.25~22.04.1
6.8.0-1025.30~22.04.1
6.8.0-1026.31~22.04.1
6.8.0-1027.32~22.04.1
6.8.0-1028.33~22.04.1
6.8.0-1029.34~22.04.1
6.8.0-1030.35~22.04.1
6.8.0-1031.36~22.04.1
6.8.0-1034.39~22.04.1
6.8.0-1036.42~22.04.1
6.8.0-1040.46~22.04.1
6.8.0-1041.47~22.04.1
6.8.0-1044.50~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-6.8-cloud-tools-6.8.0-1051",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.8-headers-6.8.0-1051",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-azure-6.8-tools-6.8.0-1051",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1051-azure",
            "binary_version": "6.8.0-1051.57~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1019.24.1
5.15.0-1024.30.1
5.15.0-1029.36.1
5.15.0-1030.37.1
5.15.0-1031.38.1
5.15.0-1033.40.1
5.15.0-1034.41.1
5.15.0-1035.42.1
5.15.0-1036.43.1
5.15.0-1037.44.1
5.15.0-1038.45.1
5.15.0-1039.46.1
5.15.0-1041.48.1
5.15.0-1042.49.1
5.15.0-1044.51.1
5.15.0-1045.52.1
5.15.0-1046.53.1
5.15.0-1047.54.1
5.15.0-1049.56.1
5.15.0-1050.57.1
5.15.0-1051.59.1
5.15.0-1052.60.1
5.15.0-1053.61.1
5.15.0-1054.62.1
5.15.0-1056.64.1
5.15.0-1057.65.1
5.15.0-1058.66.1
5.15.0-1059.67.1
5.15.0-1060.69.1
5.15.0-1061.70.1
5.15.0-1063.72.1
5.15.0-1064.73.1
5.15.0-1065.74.1
5.15.0-1067.76.1
5.15.0-1068.77.1
5.15.0-1070.79.1
5.15.0-1071.80.1
5.15.0-1072.81.1
5.15.0-1073.82.1
5.15.0-1076.85.1
5.15.0-1078.87.1
5.15.0-1081.90.1
5.15.0-1082.91.1
5.15.0-1084.93.1
5.15.0-1086.95.1
5.15.0-1087.96.1
5.15.0-1088.97.1
5.15.0-1089.98.1
5.15.0-1090.99.1
5.15.0-1091.100.1
5.15.0-1092.101.1
5.15.0-1094.103.1
5.15.0-1095.104.1
5.15.0-1096.105.1
5.15.0-1097.106.1
5.15.0-1098.107.1
5.15.0-1102.111.1
5.15.0-1109.118.1
5.15.0-1110.119.1
5.15.0-1111.120.1
5.15.0-1114.123
5.15.0-1116.125
5.15.0-1117.126
5.15.0-1118.127
5.15.0-1119.128
5.15.0-1120.129
5.15.0-1121.130
5.15.0-1122.131

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-fde-cloud-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-azure-fde-headers-5.15.0-1122",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-azure-fde-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-headers-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-modules-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        },
        {
            "binary_name": "linux-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde-5.19

Package

Name
linux-azure-fde-5.19
Purl
pkg:deb/ubuntu/linux-azure-fde-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1025.28~22.04.1.1
5.19.0-1026.29~22.04.1.1
5.19.0-1027.30~22.04.2.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-image-unsigned-5.19.0-1027-azure-fde",
            "binary_version": "5.19.0-1027.30~22.04.2.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde-6.2

Package

Name
linux-azure-fde-6.2
Purl
pkg:deb/ubuntu/linux-azure-fde-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1008.8~22.04.1.1
6.2.0-1009.9~22.04.3.1
6.2.0-1011.11~22.04.1.1
6.2.0-1012.12~22.04.1.1
6.2.0-1014.14~22.04.1.1
6.2.0-1015.15~22.04.1.1
6.2.0-1016.16~22.04.1.1
6.2.0-1017.17~22.04.1.1
6.2.0-1018.18~22.04.1.1
6.2.0-1019.19~22.04.1.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-image-unsigned-6.2.0-1019-azure-fde",
            "binary_version": "6.2.0-1019.19~22.04.1.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde-6.8

Package

Name
linux-azure-fde-6.8
Purl
pkg:deb/ubuntu/linux-azure-fde-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.53~22.04.1

Affected versions

6.*
6.8.0-1041.48~22.04.1
6.8.0-1042.49~22.04.1
6.8.0-1044.51~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-fde-6.8-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-azure-fde-6.8-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-azure-fde-6.8-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1005.6
5.15.0-1001.3
5.15.0-1002.5
5.15.0-1003.6
5.15.0-1004.7
5.15.0-1005.8
5.15.0-1006.9
5.15.0-1008.12
5.15.0-1010.15
5.15.0-1013.18
5.15.0-1016.21
5.15.0-1017.23
5.15.0-1018.24
5.15.0-1019.25
5.15.0-1021.28
5.15.0-1022.29
5.15.0-1025.32
5.15.0-1026.33
5.15.0-1027.34
5.15.0-1029.36
5.15.0-1030.37
5.15.0-1031.38
5.15.0-1032.40
5.15.0-1034.42
5.15.0-1035.43
5.15.0-1036.44
5.15.0-1037.45
5.15.0-1038.46
5.15.0-1039.47
5.15.0-1040.48
5.15.0-1041.49
5.15.0-1042.50
5.15.0-1044.52
5.15.0-1045.53
5.15.0-1046.54
5.15.0-1047.55
5.15.0-1048.56
5.15.0-1049.57
5.15.0-1051.59
5.15.0-1052.60
5.15.0-1053.61
5.15.0-1054.62
5.15.0-1055.63
5.15.0-1058.66
5.15.0-1059.67
5.15.0-1060.68
5.15.0-1062.70
5.15.0-1063.71
5.15.0-1064.72
5.15.0-1065.73
5.15.0-1066.74
5.15.0-1067.75
5.15.0-1068.76
5.15.0-1069.77
5.15.0-1070.78
5.15.0-1071.79
5.15.0-1072.80
5.15.0-1073.81
5.15.0-1074.83
5.15.0-1075.84
5.15.0-1077.86
5.15.0-1078.87
5.15.0-1079.88
5.15.0-1080.89
5.15.0-1081.90
5.15.0-1082.91
5.15.0-1083.92
5.15.0-1084.93
5.15.0-1085.94
5.15.0-1086.95
5.15.0-1087.96
5.15.0-1088.97
5.15.0-1090.99
5.15.0-1091.100
5.15.0-1092.101
5.15.0-1093.102
5.15.0-1095.104
5.15.0-1096.105
5.15.0-1097.106
5.15.0-1098.107
5.15.0-1099.108
5.15.0-1100.109
5.15.0-1101.110
5.15.0-1103.112
5.15.0-1104.113
5.15.0-1105.114
5.15.0-1106.115
5.15.0-1108.117
5.15.0-1109.118
5.15.0-1111.121
5.15.0-1112.122
5.15.0-1114.124
5.15.0-1115.125
5.15.0-1117.127
5.15.0-1118.128

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-gcp-headers-5.15.0-1118",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-gcp-tools-5.15.0-1118",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-headers-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-modules-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
        },
        {
            "binary_name": "linux-tools-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-5.19

Package

Name
linux-gcp-5.19
Purl
pkg:deb/ubuntu/linux-gcp-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1020.22~22.04.2
5.19.0-1021.23~22.04.1
5.19.0-1022.24~22.04.1
5.19.0-1024.26~22.04.1
5.19.0-1025.27~22.04.1
5.19.0-1026.28~22.04.1
5.19.0-1027.29~22.04.1
5.19.0-1030.32~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-gcp-5.19-headers-5.19.0-1030",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-gcp-5.19-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1030-gcp",
            "binary_version": "5.19.0-1030.32~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-6.2

Package

Name
linux-gcp-6.2
Purl
pkg:deb/ubuntu/linux-gcp-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1009.9~22.04.3
6.2.0-1010.10~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1011.11~22.04.3
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1016.18~22.04.1
6.2.0-1017.19~22.04.1
6.2.0-1018.20~22.04.1
6.2.0-1019.21~22.04.1
6.2.0-1021.23~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.2-headers-6.2.0-1021",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.2-tools-6.2.0-1021",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1021-gcp",
            "binary_version": "6.2.0-1021.23~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-6.5

Package

Name
linux-gcp-6.5
Purl
pkg:deb/ubuntu/linux-gcp-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1010.10~22.04.3
6.5.0-1011.11~22.04.1
6.5.0-1013.13~22.04.1
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1017.17~22.04.1
6.5.0-1018.18~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1022.24~22.04.1
6.5.0-1023.25~22.04.1
6.5.0-1024.26~22.04.1
6.5.0-1025.27~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.5-headers-6.5.0-1025",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-gcp-6.5-tools-6.5.0-1025",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1025-gcp",
            "binary_version": "6.5.0-1025.27~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-6.8

Package

Name
linux-gcp-6.8
Purl
pkg:deb/ubuntu/linux-gcp-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50~22.04.2

Affected versions

6.*
6.8.0-1010.11~22.04.1
6.8.0-1011.12~22.04.1
6.8.0-1012.13~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.16~22.04.1
6.8.0-1015.17~22.04.1
6.8.0-1016.18~22.04.1
6.8.0-1017.19~22.04.1
6.8.0-1018.20~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1024.26~22.04.1
6.8.0-1025.27~22.04.1
6.8.0-1026.28~22.04.1
6.8.0-1027.29~22.04.1
6.8.0-1028.30~22.04.1
6.8.0-1029.31~22.04.1
6.8.0-1030.32~22.04.1
6.8.0-1031.33~22.04.1
6.8.0-1032.34~22.04.1
6.8.0-1033.35~22.04.1
6.8.0-1034.36~22.04.2
6.8.0-1036.38~22.04.1
6.8.0-1037.39~22.04.1
6.8.0-1040.42~22.04.1
6.8.0-1041.43~22.04.1
6.8.0-1042.45~22.04.1
6.8.0-1043.46~22.04.1
6.8.0-1044.47~22.04.1
6.8.0-1045.48~22.04.1
6.8.0-1046.49~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-gcp-6.8-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-gcp-6.8-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50~22.04.2"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50~22.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.5
5.15.0-1005.6
5.15.0-1006.7
5.15.0-1008.10
5.15.0-1010.13
5.15.0-1011.14
5.15.0-1014.17
5.15.0-1015.18
5.15.0-1016.19
5.15.0-1017.20
5.15.0-1019.23
5.15.0-1020.25
5.15.0-1023.28
5.15.0-1024.29
5.15.0-1027.32
5.15.0-1028.33
5.15.0-1030.35
5.15.0-1031.36
5.15.0-1032.37
5.15.0-1033.38
5.15.0-1034.39
5.15.0-1035.40
5.15.0-1036.41
5.15.0-1037.42
5.15.0-1038.43
5.15.0-1039.44
5.15.0-1040.45
5.15.0-1041.46
5.15.0-1042.47
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1046.51
5.15.0-1047.52
5.15.0-1048.53
5.15.0-1049.54
5.15.0-1050.55
5.15.0-1051.56
5.15.0-1052.57
5.15.0-1053.58
5.15.0-1054.59
5.15.0-1057.62
5.15.0-1058.63
5.15.0-1059.64
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1068.74
5.15.0-1069.75
5.15.0-1070.76
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1075.81
5.15.0-1076.82
5.15.0-1077.83
5.15.0-1078.84
5.15.0-1079.85
5.15.0-1080.86
5.15.0-1081.87
5.15.0-1082.88
5.15.0-1083.89
5.15.0-1084.90
5.15.0-1085.91
5.15.0-1086.92
5.15.0-1087.93
5.15.0-1088.94
5.15.0-1089.95
5.15.0-1090.96
5.15.0-1091.97
5.15.0-1092.98
5.15.0-1093.99
5.15.0-1094.100
5.15.0-1095.101
5.15.0-1096.102
5.15.0-1097.103
5.15.0-1099.105
5.15.0-1100.106
5.15.0-1101.107
5.15.0-1102.108
5.15.0-1104.110
5.15.0-1105.111
5.15.0-1107.113
5.15.0-1108.114
5.15.0-1110.116
5.15.0-1111.117
5.15.0-1112.118
5.15.0-1113.119

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-gke-headers-5.15.0-1113",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-gke-tools-5.15.0-1113",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-headers-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-modules-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
        },
        {
            "binary_name": "linux-tools-5.15.0-1113-gke",
            "binary_version": "5.15.0-1113.119"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1001.2
5.15.0-1002.4
5.15.0-1003.5
5.15.0-1004.6
5.15.0-1005.7
5.15.0-1007.10
5.15.0-1008.12
5.15.0-1011.15
5.15.0-1012.16
5.15.0-1013.17
5.15.0-1015.19
5.15.0-1016.21
5.15.0-1017.22
5.15.0-1018.23
5.15.0-1019.24
5.15.0-1020.25
5.15.0-1021.26
5.15.0-1022.27
5.15.0-1023.28
5.15.0-1024.29
5.15.0-1025.30
5.15.0-1026.31
5.15.0-1027.32
5.15.0-1028.33
5.15.0-1030.35
5.15.0-1031.37
5.15.0-1032.38
5.15.0-1033.39
5.15.0-1034.40
5.15.0-1035.41
5.15.0-1036.42
5.15.0-1037.43
5.15.0-1038.44
5.15.0-1039.45
5.15.0-1040.46
5.15.0-1043.50
5.15.0-1044.51
5.15.0-1045.52
5.15.0-1046.53
5.15.0-1047.54
5.15.0-1048.55
5.15.0-1049.56
5.15.0-1050.57
5.15.0-1051.58
5.15.0-1052.59
5.15.0-1053.60
5.15.0-1054.61
5.15.0-1055.62
5.15.0-1056.63
5.15.0-1057.64
5.15.0-1058.66
5.15.0-1059.67
5.15.0-1060.68
5.15.0-1061.69
5.15.0-1062.70
5.15.0-1063.71
5.15.0-1064.72
5.15.0-1065.73
5.15.0-1066.74
5.15.0-1067.75
5.15.0-1068.76
5.15.0-1069.77
5.15.0-1070.78
5.15.0-1071.79
5.15.0-1073.81
5.15.0-1074.82
5.15.0-1075.83
5.15.0-1076.84
5.15.0-1078.86
5.15.0-1079.87
5.15.0-1080.88
5.15.0-1081.89
5.15.0-1082.90
5.15.0-1083.91
5.15.0-1084.92
5.15.0-1086.94
5.15.0-1087.95
5.15.0-1088.96
5.15.0-1089.97
5.15.0-1091.99
5.15.0-1092.100
5.15.0-1094.102
5.15.0-1095.103
5.15.0-1096.104
5.15.0-1097.105
5.15.0-1098.106
5.15.0-1099.107
5.15.0-1100.108

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-gkeop-cloud-tools-5.15.0-1100",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-gkeop-headers-5.15.0-1100",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-gkeop-tools-5.15.0-1100",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-headers-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-modules-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        },
        {
            "binary_name": "linux-tools-5.15.0-1100-gkeop",
            "binary_version": "5.15.0-1100.108"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-5.19

Package

Name
linux-hwe-5.19
Purl
pkg:deb/ubuntu/linux-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-28.29~22.04.1
5.19.0-32.33~22.04.1
5.19.0-35.36~22.04.1
5.19.0-38.39~22.04.1
5.19.0-40.41~22.04.1
5.19.0-41.42~22.04.1
5.19.0-42.43~22.04.1
5.19.0-43.44~22.04.1
5.19.0-45.46~22.04.1
5.19.0-46.47~22.04.1
5.19.0-50.50

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-headers-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-headers-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-headers-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-cloud-tools-5.19.0-50",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-cloud-tools-common",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-headers-5.19.0-50",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-tools-5.19.0-50",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-tools-common",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-hwe-5.19-tools-host",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-ipu6-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-ivsc-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-source-5.19.0",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-tools-5.19.0-50-generic",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-tools-5.19.0-50-generic-64k",
            "binary_version": "5.19.0-50.50"
        },
        {
            "binary_name": "linux-tools-5.19.0-50-generic-lpae",
            "binary_version": "5.19.0-50.50"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-6.2

Package

Name
linux-hwe-6.2
Purl
pkg:deb/ubuntu/linux-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-25.25~22.04.2
6.2.0-26.26~22.04.1
6.2.0-31.31~22.04.1
6.2.0-32.32~22.04.1
6.2.0-33.33~22.04.1
6.2.0-34.34~22.04.1
6.2.0-35.35~22.04.1
6.2.0-36.37~22.04.1
6.2.0-37.38~22.04.1
6.2.0-39.40~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-cloud-tools-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-cloud-tools-common",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-headers-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-tools-6.2.0-39",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-tools-common",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.2-tools-host",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-ivsc-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-source-6.2.0",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-39-generic",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-39-generic-64k",
            "binary_version": "6.2.0-39.40~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-39-generic-lpae",
            "binary_version": "6.2.0-39.40~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-6.5

Package

Name
linux-hwe-6.5
Purl
pkg:deb/ubuntu/linux-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-14.14~22.04.1
6.5.0-15.15~22.04.1
6.5.0-17.17~22.04.1
6.5.0-18.18~22.04.1
6.5.0-21.21~22.04.1
6.5.0-25.25~22.04.1
6.5.0-26.26~22.04.1
6.5.0-27.28~22.04.1
6.5.0-28.29~22.04.1
6.5.0-35.35~22.04.1
6.5.0-41.41~22.04.2
6.5.0-44.44~22.04.1
6.5.0-45.45~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-cloud-tools-common",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-tools-common",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.5-tools-host",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-image-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-ivsc-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-source-6.5.0",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-generic-64k",
            "binary_version": "6.5.0-45.45~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-6.8

Package

Name
linux-hwe-6.8
Purl
pkg:deb/ubuntu/linux-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100~22.04.1

Affected versions

6.*
6.8.0-38.38~22.04.1
6.8.0-39.39~22.04.1
6.8.0-40.40~22.04.3
6.8.0-45.45~22.04.1
6.8.0-47.47~22.04.1
6.8.0-48.48~22.04.1
6.8.0-49.49~22.04.1
6.8.0-50.51~22.04.1
6.8.0-51.52~22.04.1
6.8.0-52.53~22.04.1
6.8.0-57.59~22.04.1
6.8.0-58.60~22.04.1
6.8.0-59.61~22.04.1
6.8.0-60.63~22.04.1
6.8.0-64.67~22.04.1
6.8.0-65.68~22.04.1
6.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
6.8.0-83.83~22.04.1
6.8.0-84.84~22.04.1
6.8.0-85.85~22.04.1
6.8.0-86.87~22.04.1
6.8.0-87.88~22.04.1
6.8.0-88.89~22.04.2
6.8.0-90.91~22.04.1
6.8.0-94.96~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.8-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-hwe-6.8-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-ibm

Package

Name
linux-ibm
Purl
pkg:deb/ubuntu/linux-ibm?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1007.8
5.15.0-1009.11
5.15.0-1010.12
5.15.0-1012.14
5.15.0-1013.15
5.15.0-1015.17
5.15.0-1017.20
5.15.0-1018.21
5.15.0-1021.24
5.15.0-1022.25
5.15.0-1023.26
5.15.0-1025.28
5.15.0-1026.29
5.15.0-1027.30
5.15.0-1028.31
5.15.0-1029.32
5.15.0-1030.33
5.15.0-1031.34
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1035.38
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1040.43
5.15.0-1041.44
5.15.0-1042.45
5.15.0-1043.46
5.15.0-1044.47
5.15.0-1045.48
5.15.0-1046.49
5.15.0-1047.50
5.15.0-1048.51
5.15.0-1049.52
5.15.0-1050.53
5.15.0-1053.56
5.15.0-1054.57
5.15.0-1055.58
5.15.0-1056.59
5.15.0-1057.60
5.15.0-1058.61
5.15.0-1059.62
5.15.0-1060.63
5.15.0-1061.64
5.15.0-1062.65
5.15.0-1063.66
5.15.0-1064.67
5.15.0-1065.68
5.15.0-1066.69
5.15.0-1067.70
5.15.0-1068.71
5.15.0-1069.72
5.15.0-1070.73
5.15.0-1071.74
5.15.0-1072.75
5.15.0-1073.76
5.15.0-1074.77
5.15.0-1075.78
5.15.0-1076.79
5.15.0-1077.80
5.15.0-1078.81
5.15.0-1079.82
5.15.0-1080.83
5.15.0-1081.84
5.15.0-1084.87
5.15.0-1085.88
5.15.0-1086.89
5.15.0-1087.90
5.15.0-1089.92
5.15.0-1090.93
5.15.0-1091.94
5.15.0-1092.95
5.15.0-1093.96
5.15.0-1094.97
5.15.0-1095.98
5.15.0-1097.100
5.15.0-1098.101
5.15.0-1099.102
5.15.0-1100.103
5.15.0-1102.105
5.15.0-1103.106
5.15.0-1105.109
5.15.0-1106.110
5.15.0-1107.111
5.15.0-1108.112
5.15.0-1109.113
5.15.0-1110.114
5.15.0-1111.115

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-headers-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-ibm-cloud-tools-common",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-ibm-headers-5.15.0-1111",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-ibm-source-5.15.0",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-ibm-tools-5.15.0-1111",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-ibm-tools-common",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-modules-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
        },
        {
            "binary_name": "linux-tools-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-ibm-6.8

Package

Name
linux-ibm-6.8
Purl
pkg:deb/ubuntu/linux-ibm-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1044.44~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.13~22.04.1
6.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
6.8.0-1016.16~22.04.1
6.8.0-1017.17~22.04.1
6.8.0-1018.18~22.04.1
6.8.0-1019.19~22.04.1
6.8.0-1023.23~22.04.1
6.8.0-1024.24~22.04.1
6.8.0-1025.25~22.04.1
6.8.0-1026.26~22.04.1
6.8.0-1027.27~22.04.1
6.8.0-1028.28~22.04.1
6.8.0-1029.29~22.04.1
6.8.0-1030.30~22.04.1
6.8.0-1033.33~22.04.1
6.8.0-1036.36~22.04.1
6.8.0-1037.37~22.04.1
6.8.0-1038.38~22.04.1
6.8.0-1039.39~22.04.1
6.8.0-1040.40~22.04.1
6.8.0-1041.41~22.04.1
6.8.0-1042.42~22.04.1
6.8.0-1043.43~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-ibm-6.8-headers-6.8.0-1044",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-ibm-6.8-tools-6.8.0-1044",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-intel-iot-realtime

Package

Name
linux-intel-iot-realtime
Purl
pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1073.75

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-headers-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-headers-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-5.15.0-1073",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-common",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-host",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-modules-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        },
        {
            "binary_name": "linux-tools-5.15.0-1073-intel-iot-realtime",
            "binary_version": "5.15.0-1073.75"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-intel-iotg

Package

Name
linux-intel-iotg
Purl
pkg:deb/ubuntu/linux-intel-iotg?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1004.6
5.15.0-1008.11
5.15.0-1010.14
5.15.0-1013.17
5.15.0-1015.20
5.15.0-1016.21
5.15.0-1017.22
5.15.0-1018.23
5.15.0-1021.26
5.15.0-1023.28
5.15.0-1025.30
5.15.0-1026.31
5.15.0-1027.32
5.15.0-1028.33
5.15.0-1030.35
5.15.0-1031.36
5.15.0-1033.38
5.15.0-1034.39
5.15.0-1035.40
5.15.0-1036.41
5.15.0-1037.42
5.15.0-1038.43
5.15.0-1039.45
5.15.0-1040.46
5.15.0-1043.49
5.15.0-1045.51
5.15.0-1046.52
5.15.0-1047.53
5.15.0-1048.54
5.15.0-1049.55
5.15.0-1050.56
5.15.0-1051.57
5.15.0-1052.58
5.15.0-1055.61
5.15.0-1057.63
5.15.0-1058.64
5.15.0-1059.65
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1074.80
5.15.0-1075.81
5.15.0-1076.82
5.15.0-1077.83
5.15.0-1078.84
5.15.0-1079.85
5.15.0-1080.86
5.15.0-1081.87
5.15.0-1082.88
5.15.0-1083.89
5.15.0-1084.90
5.15.0-1085.91
5.15.0-1086.92
5.15.0-1087.93
5.15.0-1088.94
5.15.0-1090.96
5.15.0-1091.97
5.15.0-1092.98
5.15.0-1093.99
5.15.0-1094.100
5.15.0-1095.101
5.15.0-1096.102
5.15.0-1098.104
5.15.0-1099.105
5.15.0-1100.106
5.15.0-1101.107
5.15.0-1103.109
5.15.0-1104.110
5.15.0-1106.112
5.15.0-1107.113
5.15.0-1108.114
5.15.0-1109.115
5.15.0-1110.116
5.15.0-1111.117
5.15.0-1112.118

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-intel-iotg-cloud-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-intel-iotg-cloud-tools-common",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-intel-iotg-headers-5.15.0-1112",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-intel-iotg-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-intel-iotg-tools-common",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-intel-iotg-tools-host",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        },
        {
            "binary_name": "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-kvm

Package

Name
linux-kvm
Purl
pkg:deb/ubuntu/linux-kvm?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1004.4
5.13.0-1006.6+22.04.1
5.13.0-1007.7+22.04.1
5.13.0-1010.11+22.04.1
5.15.0-1002.2
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1010.11
5.15.0-1012.14
5.15.0-1013.16
5.15.0-1016.19
5.15.0-1017.21
5.15.0-1018.22
5.15.0-1019.23
5.15.0-1020.24
5.15.0-1021.26
5.15.0-1024.29
5.15.0-1025.30
5.15.0-1026.31
5.15.0-1028.33
5.15.0-1029.34
5.15.0-1030.35
5.15.0-1031.36
5.15.0-1032.37
5.15.0-1033.38
5.15.0-1034.39
5.15.0-1035.40
5.15.0-1037.42
5.15.0-1038.43
5.15.0-1039.44
5.15.0-1040.45
5.15.0-1041.46
5.15.0-1042.47
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1046.51
5.15.0-1047.52
5.15.0-1048.53
5.15.0-1049.54
5.15.0-1050.55
5.15.0-1051.56
5.15.0-1052.57
5.15.0-1053.58
5.15.0-1054.59
5.15.0-1057.62
5.15.0-1058.63
5.15.0-1059.64
5.15.0-1060.65
5.15.0-1061.66
5.15.0-1062.67
5.15.0-1063.68
5.15.0-1064.69
5.15.0-1065.70
5.15.0-1066.71
5.15.0-1067.72
5.15.0-1068.73
5.15.0-1069.74
5.15.0-1070.75
5.15.0-1071.76
5.15.0-1072.77
5.15.0-1073.78
5.15.0-1076.81
5.15.0-1077.82
5.15.0-1078.83
5.15.0-1079.84
5.15.0-1080.85
5.15.0-1081.86
5.15.0-1082.87
5.15.0-1083.88
5.15.0-1084.89
5.15.0-1085.90
5.15.0-1086.91
5.15.0-1087.92
5.15.0-1088.93
5.15.0-1089.94
5.15.0-1090.95
5.15.0-1091.96
5.15.0-1092.97
5.15.0-1093.98
5.15.0-1095.100
5.15.0-1096.101
5.15.0-1097.102
5.15.0-1098.103
5.15.0-1100.105
5.15.0-1101.106
5.15.0-1103.108
5.15.0-1104.109
5.15.0-1105.110
5.15.0-1106.111
5.15.0-1107.112
5.15.0-1108.113
5.15.0-1109.114

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
        },
        {
            "binary_name": "linux-headers-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
        },
        {
            "binary_name": "linux-kvm-headers-5.15.0-1109",
            "binary_version": "5.15.0-1109.114"
        },
        {
            "binary_name": "linux-kvm-tools-5.15.0-1109",
            "binary_version": "5.15.0-1109.114"
        },
        {
            "binary_name": "linux-modules-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
        },
        {
            "binary_name": "linux-tools-5.15.0-1109-kvm",
            "binary_version": "5.15.0-1109.114"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency

Package

Name
linux-lowlatency
Purl
pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-22.22
5.15.0-23.23
5.15.0-24.24
5.15.0-27.28
5.15.0-30.31
5.15.0-33.34
5.15.0-35.36
5.15.0-37.39
5.15.0-39.42
5.15.0-40.43
5.15.0-41.44
5.15.0-43.46
5.15.0-46.49
5.15.0-47.53
5.15.0-48.54
5.15.0-50.56
5.15.0-52.58
5.15.0-53.59
5.15.0-56.62
5.15.0-57.63
5.15.0-58.64
5.15.0-60.66
5.15.0-67.74
5.15.0-69.76
5.15.0-70.77
5.15.0-71.78
5.15.0-72.79
5.15.0-73.80
5.15.0-75.82
5.15.0-76.83
5.15.0-78.85
5.15.0-79.88
5.15.0-82.91
5.15.0-83.92
5.15.0-84.93
5.15.0-86.95
5.15.0-87.96
5.15.0-88.98
5.15.0-89.99
5.15.0-91.101
5.15.0-92.102
5.15.0-94.104
5.15.0-97.107
5.15.0-100.110
5.15.0-101.111
5.15.0-102.112
5.15.0-105.115
5.15.0-106.116
5.15.0-107.117
5.15.0-110.120
5.15.0-113.123
5.15.0-116.126
5.15.0-117.127
5.15.0-118.128
5.15.0-119.129
5.15.0-121.131
5.15.0-122.132
5.15.0-124.134
5.15.0-125.135
5.15.0-126.136
5.15.0-127.137
5.15.0-128.138
5.15.0-129.139
5.15.0-131.141
5.15.0-133.143
5.15.0-134.145
5.15.0-135.146
5.15.0-136.147
5.15.0-138.148
5.15.0-139.149
5.15.0-140.150
5.15.0-141.151
5.15.0-142.152
5.15.0-143.153
5.15.0-144.157
5.15.0-145.158
5.15.0-152.162
5.15.0-153.163
5.15.0-156.166
5.15.0-157.167
5.15.0-160.170
5.15.0-161.171
5.15.0-163.173
5.15.0-164.174
5.15.0-168.178
5.15.0-170.180
5.15.0-171.181
5.15.0-173.183
5.15.0-174.184
5.15.0-175.185
5.15.0-177.187
5.15.0-178.188
5.15.0-179.189
5.15.0-181.191
5.15.0-183.193
5.15.0-184.194
5.15.0-190.200
5.15.0-191.201
5.15.0-194.204
5.15.0-195.205

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-headers-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-lowlatency-cloud-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-lowlatency-headers-5.15.0-195",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-lowlatency-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-modules-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205"
        },
        {
            "binary_name": "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency-hwe-5.19

Package

Name
linux-lowlatency-hwe-5.19
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1017.18~22.04.1
5.19.0-1018.19~22.04.1
5.19.0-1021.22~22.04.1
5.19.0-1022.23~22.04.1
5.19.0-1023.24~22.04.1
5.19.0-1024.25~22.04.1
5.19.0-1025.26~22.04.1
5.19.0-1027.28~22.04.1
5.19.0-1028.29~22.04.1
5.19.0-1030.30

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-buildinfo-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-cloud-tools-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-headers-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-headers-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-image-unsigned-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-cloud-tools-common",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-headers-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-5.19.0-1030",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-common",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.19-tools-host",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-ipu6-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-ivsc-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-tools-5.19.0-1030-lowlatency",
            "binary_version": "5.19.0-1030.30"
        },
        {
            "binary_name": "linux-tools-5.19.0-1030-lowlatency-64k",
            "binary_version": "5.19.0-1030.30"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency-hwe-6.2

Package

Name
linux-lowlatency-hwe-6.2
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1008.8~22.04.1
6.2.0-1009.9~22.04.1
6.2.0-1011.11~22.04.1
6.2.0-1012.12~22.04.1
6.2.0-1013.13~22.04.1
6.2.0-1014.14~22.04.1
6.2.0-1015.15~22.04.1
6.2.0-1016.16~22.04.1
6.2.0-1017.17~22.04.1
6.2.0-1018.18~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-cloud-tools-common",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-headers-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-6.2.0-1018",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-common",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.2-tools-host",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-ivsc-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1018-lowlatency",
            "binary_version": "6.2.0-1018.18~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1018-lowlatency-64k",
            "binary_version": "6.2.0-1018.18~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency-hwe-6.5

Package

Name
linux-lowlatency-hwe-6.5
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-14.14.1~22.04.1
6.5.0-15.15.1.1~22.04.1
6.5.0-17.17.1.1.1~22.04.1
6.5.0-21.21.1~22.04.1
6.5.0-25.25.1~22.04.1
6.5.0-26.26.1~22.04.1
6.5.0-27.28.1~22.04.1
6.5.0-28.29.1~22.04.1
6.5.0-35.35.1~22.04.1
6.5.0-41.41.1~22.04.1
6.5.0-42.42.1~22.04.1
6.5.0-44.44.1~22.04.1
6.5.0-45.45.1~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-cloud-tools-common",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-lib-rust-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-common",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.5-tools-host",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-lowlatency",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-lowlatency-64k",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency-hwe-6.8

Package

Name
linux-lowlatency-hwe-6.8
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100.1~22.04.1

Affected versions

6.*
6.8.0-38.38.1~22.04.2
6.8.0-40.40.1~22.04.1
6.8.0-44.44.1~22.04.1
6.8.0-45.45.1~22.04.1
6.8.0-47.47.1~22.04.1
6.8.0-48.48.3~22.04.1
6.8.0-49.49.1~22.04.1
6.8.0-50.51.1~22.04.1
6.8.0-51.52.1~22.04.1
6.8.0-52.53.1~22.04.1
6.8.0-54.56.1~22.04.1
6.8.0-55.57.1~22.04.1
6.8.0-56.58.1~22.04.1
6.8.0-57.59.1~22.04.1
6.8.0-58.60.1~22.04.1
6.8.0-59.61.1~22.04.1
6.8.0-60.63.1~22.04.1
6.8.0-62.65.1~22.04.1
6.8.0-63.66.1~22.04.1
6.8.0-64.67.1~22.04.1
6.8.0-65.68.1~22.04.1
6.8.0-78.78.1~22.04.1
6.8.0-79.79.1~22.04.1
6.8.0-83.83.1~22.04.1
6.8.0-84.84.1~22.04.1
6.8.0-85.85.1~22.04.1
6.8.0-86.87.1~22.04.1
6.8.0-87.88.1~22.04.1
6.8.0-88.89.1~22.04.1
6.8.0-90.91.1~22.04.1
6.8.0-94.96.1~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-lib-rust-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.8-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia

Package

Name
linux-nvidia
Purl
pkg:deb/ubuntu/linux-nvidia?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1005.5
5.15.0-1007.7
5.15.0-1010.10
5.15.0-1015.15
5.15.0-1017.17
5.15.0-1018.18
5.15.0-1023.23
5.15.0-1025.25
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1029.29
5.15.0-1030.30
5.15.0-1031.31
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1037.37
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1043.43
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47
5.15.0-1048.48
5.15.0-1053.54
5.15.0-1054.55
5.15.0-1055.56
5.15.0-1058.59
5.15.0-1059.60
5.15.0-1060.61
5.15.0-1061.62
5.15.0-1062.63
5.15.0-1063.64
5.15.0-1064.65
5.15.0-1065.66
5.15.0-1066.67
5.15.0-1067.68
5.15.0-1068.69
5.15.0-1069.70
5.15.0-1070.71
5.15.0-1071.72
5.15.0-1072.73
5.15.0-1073.74
5.15.0-1074.75
5.15.0-1075.76
5.15.0-1076.77
5.15.0-1077.78
5.15.0-1078.79
5.15.0-1079.80
5.15.0-1080.81
5.15.0-1081.82
5.15.0-1082.83
5.15.0-1083.84
5.15.0-1085.86
5.15.0-1086.87
5.15.0-1087.88
5.15.0-1088.89
5.15.0-1090.91
5.15.0-1091.92
5.15.0-1092.93
5.15.0-1093.94
5.15.0-1094.95
5.15.0-1095.96
5.15.0-1096.97
5.15.0-1098.99
5.15.0-1099.100
5.15.0-1100.101
5.15.0-1101.102
5.15.0-1103.104
5.15.0-1104.105
5.15.0-1106.107
5.15.0-1107.108
5.15.0-1108.109
5.15.0-1109.110
5.15.0-1110.111
5.15.0-1111.112
5.15.0-1112.113

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-headers-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-headers-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-modules-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-modules-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-nvidia-cloud-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-nvidia-cloud-tools-common",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-nvidia-headers-5.15.0-1112",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-nvidia-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-nvidia-tools-common",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-nvidia-tools-host",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-tools-5.15.0-1112-nvidia",
            "binary_version": "5.15.0-1112.113"
        },
        {
            "binary_name": "linux-tools-5.15.0-1112-nvidia-lowlatency",
            "binary_version": "5.15.0-1112.113"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-6.2

Package

Name
linux-nvidia-6.2
Purl
pkg:deb/ubuntu/linux-nvidia-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1003.3~22.04.1
6.2.0-1009.9
6.2.0-1010.10
6.2.0-1011.11
6.2.0-1012.12
6.2.0-1013.13
6.2.0-1015.15

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-buildinfo-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-headers-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-headers-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-image-unsigned-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-nvidia-6.2-headers-6.2.0-1015",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-nvidia-6.2-tools-6.2.0-1015",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-nvidia-6.2-tools-host",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-tools-6.2.0-1015-nvidia",
            "binary_version": "6.2.0-1015.15"
        },
        {
            "binary_name": "linux-tools-6.2.0-1015-nvidia-64k",
            "binary_version": "6.2.0-1015.15"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-6.5

Package

Name
linux-nvidia-6.5
Purl
pkg:deb/ubuntu/linux-nvidia-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1004.4
6.5.0-1007.7
6.5.0-1013.13
6.5.0-1014.14
6.5.0-1015.15
6.5.0-1018.18
6.5.0-1019.19
6.5.0-1021.22
6.5.0-1022.23
6.5.0-1023.24
6.5.0-1024.25

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-headers-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-headers-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-nvidia-6.5-headers-6.5.0-1024",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-nvidia-6.5-tools-6.5.0-1024",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-nvidia-6.5-tools-host",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-tools-6.5.0-1024-nvidia",
            "binary_version": "6.5.0-1024.25"
        },
        {
            "binary_name": "linux-tools-6.5.0-1024-nvidia-64k",
            "binary_version": "6.5.0-1024.25"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-6.8

Package

Name
linux-nvidia-6.8
Purl
pkg:deb/ubuntu/linux-nvidia-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49~22.04.1

Affected versions

6.*
6.8.0-1008.8~22.04.1
6.8.0-1009.9~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.14~22.04.1
6.8.0-1014.15~22.04.1
6.8.0-1015.16~22.04.1
6.8.0-1017.19~22.04.1
6.8.0-1018.20~22.04.1
6.8.0-1019.21~22.04.1
6.8.0-1020.22~22.04.1
6.8.0-1021.23~22.04.1
6.8.0-1022.25~22.04.2
6.8.0-1023.26~22.04.1
6.8.0-1024.27~22.04.1
6.8.0-1025.28~22.04.1
6.8.0-1026.29~22.04.1
6.8.0-1027.30~22.04.1
6.8.0-1028.31~22.04.1
6.8.0-1029.32~22.04.1
6.8.0-1030.33~22.04.1
6.8.0-1031.34~22.04.1
6.8.0-1032.35~22.04.1
6.8.0-1035.38~22.04.1
6.8.0-1036.39~22.04.1
6.8.0-1038.41~22.04.1
6.8.0-1039.42~22.04.1
6.8.0-1040.43~22.04.1
6.8.0-1041.44~22.04.2
6.8.0-1042.45~22.04.1
6.8.0-1043.46~22.04.1
6.8.0-1044.47~22.04.1
6.8.0-1045.48~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-nvidia-6.8-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-nvidia-6.8-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-tegra

Package

Name
linux-nvidia-tegra
Purl
pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1009.9
5.15.0-1010.10
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1014.14
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1017.17
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1025.25
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1030.30
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36
5.15.0-1037.37
5.15.0-1038.38
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1043.43
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47
5.15.0-1048.48
5.15.0-1049.49
5.15.0-1050.50
5.15.0-1051.51
5.15.0-1052.52
5.15.0-1053.53
5.15.0-1055.55
5.15.0-1056.56
5.15.0-1057.57
5.15.0-1058.58
5.15.0-1060.60
5.15.0-1061.61
5.15.0-1063.63
5.15.0-1064.66
5.15.0-1065.67
5.15.0-1066.68
5.15.0-1067.69
5.15.0-1068.70

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-nvidia-tegra-headers-5.15.0-1068",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-nvidia-tegra-tools-5.15.0-1068",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70"
        },
        {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-tegra-igx

Package

Name
linux-nvidia-tegra-igx
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-igx?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1001.1
5.15.0-1002.2
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1009.9
5.15.0-1012.12
5.15.0-1013.13
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1018.18
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1023.23
5.15.0-1024.24
5.15.0-1026.26
5.15.0-1027.27
5.15.0-1028.28
5.15.0-1029.29
5.15.0-1030.30
5.15.0-1031.31
5.15.0-1032.32
5.15.0-1033.33
5.15.0-1034.34
5.15.0-1035.35
5.15.0-1036.36
5.15.0-1037.37
5.15.0-1038.38
5.15.0-1039.39
5.15.0-1040.40
5.15.0-1041.41
5.15.0-1042.42
5.15.0-1044.44
5.15.0-1045.45
5.15.0-1046.46
5.15.0-1047.47
5.15.0-1049.49
5.15.0-1050.50
5.15.0-1052.52
5.15.0-1053.53
5.15.0-1054.54
5.15.0-1055.55
5.15.0-1056.56
5.15.0-1057.57

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-headers-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-headers-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-modules-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-modules-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-nvidia-tegra-igx-headers-5.15.0-1057",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-nvidia-tegra-igx-tools-5.15.0-1057",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-tools-5.15.0-1057-nvidia-tegra-igx",
            "binary_version": "5.15.0-1057.57"
        },
        {
            "binary_name": "linux-tools-5.15.0-1057-nvidia-tegra-igx-rt",
            "binary_version": "5.15.0-1057.57"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-5.17

Package

Name
linux-oem-5.17
Purl
pkg:deb/ubuntu/linux-oem-5.17?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.17.0-1003.3
5.17.0-1004.4
5.17.0-1006.6
5.17.0-1011.12
5.17.0-1012.13
5.17.0-1013.14
5.17.0-1014.15
5.17.0-1015.16
5.17.0-1016.17
5.17.0-1017.18
5.17.0-1018.19
5.17.0-1019.20
5.17.0-1020.21
5.17.0-1021.22
5.17.0-1024.25
5.17.0-1025.26
5.17.0-1026.27
5.17.0-1027.28
5.17.0-1028.29
5.17.0-1029.30
5.17.0-1030.31
5.17.0-1031.32
5.17.0-1032.33
5.17.0-1033.34
5.17.0-1034.35
5.17.0-1035.36

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-headers-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-image-unsigned-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-ipu6-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-ivsc-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-oem-5.17-headers-5.17.0-1035",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-oem-5.17-tools-5.17.0-1035",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-oem-5.17-tools-host",
            "binary_version": "5.17.0-1035.36"
        },
        {
            "binary_name": "linux-tools-5.17.0-1035-oem",
            "binary_version": "5.17.0-1035.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-6.0

Package

Name
linux-oem-6.0
Purl
pkg:deb/ubuntu/linux-oem-6.0?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.0.0-1006.6
6.0.0-1007.7
6.0.0-1008.8
6.0.0-1009.9
6.0.0-1010.10
6.0.0-1011.11
6.0.0-1012.12
6.0.0-1013.13
6.0.0-1014.14
6.0.0-1015.15
6.0.0-1016.16
6.0.0-1017.17
6.0.0-1018.18
6.0.0-1019.19
6.0.0-1020.20
6.0.0-1021.21

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-headers-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-image-unsigned-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-ipu6-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-ivsc-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-oem-6.0-headers-6.0.0-1021",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-oem-6.0-tools-6.0.0-1021",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-oem-6.0-tools-host",
            "binary_version": "6.0.0-1021.21"
        },
        {
            "binary_name": "linux-tools-6.0.0-1021-oem",
            "binary_version": "6.0.0-1021.21"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-6.1

Package

Name
linux-oem-6.1
Purl
pkg:deb/ubuntu/linux-oem-6.1?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.1.0-1004.4
6.1.0-1006.6
6.1.0-1007.7
6.1.0-1008.8
6.1.0-1009.9
6.1.0-1010.10
6.1.0-1012.12
6.1.0-1013.13
6.1.0-1014.14
6.1.0-1015.15
6.1.0-1016.16
6.1.0-1017.17
6.1.0-1019.19
6.1.0-1020.20
6.1.0-1021.21
6.1.0-1022.22
6.1.0-1023.23
6.1.0-1024.24
6.1.0-1025.25
6.1.0-1026.26
6.1.0-1027.27
6.1.0-1028.28
6.1.0-1029.29
6.1.0-1033.33
6.1.0-1034.34
6.1.0-1035.35
6.1.0-1036.36

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-headers-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-image-unsigned-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-ipu6-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-ivsc-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-oem-6.1-headers-6.1.0-1036",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-oem-6.1-tools-6.1.0-1036",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-oem-6.1-tools-host",
            "binary_version": "6.1.0-1036.36"
        },
        {
            "binary_name": "linux-tools-6.1.0-1036-oem",
            "binary_version": "6.1.0-1036.36"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-6.5

Package

Name
linux-oem-6.5
Purl
pkg:deb/ubuntu/linux-oem-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1003.3
6.5.0-1004.4
6.5.0-1006.6
6.5.0-1007.7
6.5.0-1008.8
6.5.0-1009.10
6.5.0-1011.12
6.5.0-1013.14
6.5.0-1014.15
6.5.0-1015.16
6.5.0-1016.17
6.5.0-1018.19
6.5.0-1019.20
6.5.0-1020.21
6.5.0-1022.23
6.5.0-1023.24
6.5.0-1024.25
6.5.0-1025.26
6.5.0-1027.28

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-headers-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-ipu6-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-ivsc-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-modules-usbio-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-headers-6.5.0-1027",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-lib-rust-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-tools-6.5.0-1027",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-oem-6.5-tools-host",
            "binary_version": "6.5.0-1027.28"
        },
        {
            "binary_name": "linux-tools-6.5.0-1027-oem",
            "binary_version": "6.5.0-1027.28"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle

Package

Name
linux-oracle
Purl
pkg:deb/ubuntu/linux-oracle?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.10
5.15.0-1001.3
5.15.0-1002.4
5.15.0-1003.5
5.15.0-1006.8
5.15.0-1007.9
5.15.0-1009.12
5.15.0-1011.15
5.15.0-1013.17
5.15.0-1016.20
5.15.0-1017.22
5.15.0-1018.23
5.15.0-1019.24
5.15.0-1021.27
5.15.0-1022.28
5.15.0-1025.31
5.15.0-1026.32
5.15.0-1027.33
5.15.0-1029.35
5.15.0-1030.36
5.15.0-1032.38
5.15.0-1033.39
5.15.0-1034.40
5.15.0-1035.41
5.15.0-1036.42
5.15.0-1037.43
5.15.0-1038.44
5.15.0-1039.45
5.15.0-1040.46
5.15.0-1041.47
5.15.0-1042.48
5.15.0-1044.50
5.15.0-1045.51
5.15.0-1046.52
5.15.0-1047.53
5.15.0-1048.54
5.15.0-1049.55
5.15.0-1050.56
5.15.0-1051.57
5.15.0-1052.58
5.15.0-1053.59
5.15.0-1054.60
5.15.0-1055.61
5.15.0-1058.64
5.15.0-1059.65
5.15.0-1060.66
5.15.0-1061.67
5.15.0-1062.68
5.15.0-1063.69
5.15.0-1064.70
5.15.0-1065.71
5.15.0-1066.72
5.15.0-1067.73
5.15.0-1068.74
5.15.0-1069.75
5.15.0-1070.76
5.15.0-1071.77
5.15.0-1072.78
5.15.0-1073.79
5.15.0-1074.80
5.15.0-1075.81
5.15.0-1076.82
5.15.0-1077.83
5.15.0-1078.84
5.15.0-1079.85
5.15.0-1080.86
5.15.0-1081.87
5.15.0-1082.88
5.15.0-1083.89
5.15.0-1084.90
5.15.0-1085.91
5.15.0-1086.92
5.15.0-1088.94
5.15.0-1089.95
5.15.0-1090.96
5.15.0-1091.97
5.15.0-1092.98
5.15.0-1093.99
5.15.0-1094.100
5.15.0-1095.101
5.15.0-1096.102
5.15.0-1097.103
5.15.0-1098.104
5.15.0-1100.106
5.15.0-1101.107
5.15.0-1102.108
5.15.0-1103.109
5.15.0-1105.111
5.15.0-1106.112
5.15.0-1108.114
5.15.0-1109.115
5.15.0-1110.116
5.15.0-1111.117
5.15.0-1112.118
5.15.0-1113.119
5.15.0-1114.120

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-headers-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-modules-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-oracle-headers-5.15.0-1114",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-oracle-tools-5.15.0-1114",
            "binary_version": "5.15.0-1114.120"
        },
        {
            "binary_name": "linux-tools-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-6.5

Package

Name
linux-oracle-6.5
Purl
pkg:deb/ubuntu/linux-oracle-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1013.13~22.04.4
6.5.0-1014.14~22.04.1
6.5.0-1015.15~22.04.1
6.5.0-1016.16~22.04.1
6.5.0-1018.18~22.04.1
6.5.0-1019.19~22.04.1
6.5.0-1020.20~22.04.1
6.5.0-1021.21~22.04.1
6.5.0-1023.23~22.04.1
6.5.0-1024.24~22.04.1
6.5.0-1025.25~22.04.1
6.5.0-1026.26~22.04.1
6.5.0-1027.27~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.5-headers-6.5.0-1027",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.5-tools-6.5.0-1027",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1027-oracle",
            "binary_version": "6.5.0-1027.27~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1027-oracle-64k",
            "binary_version": "6.5.0-1027.27~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-6.8

Package

Name
linux-oracle-6.8
Purl
pkg:deb/ubuntu/linux-oracle-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.44~22.04.1

Affected versions

6.*
6.8.0-1006.6~22.04.3
6.8.0-1008.8~22.04.1
6.8.0-1010.10~22.04.1
6.8.0-1011.11~22.04.1
6.8.0-1012.12~22.04.1
6.8.0-1013.13~22.04.1
6.8.0-1014.14~22.04.1
6.8.0-1015.15~22.04.1
6.8.0-1016.17~22.04.1
6.8.0-1017.18~22.04.1
6.8.0-1018.19~22.04.1
6.8.0-1019.20~22.04.1
6.8.0-1020.21~22.04.1
6.8.0-1021.22~22.04.1
6.8.0-1022.23~22.04.1
6.8.0-1023.24~22.04.1
6.8.0-1024.25~22.04.1
6.8.0-1025.26~22.04.1
6.8.0-1026.27~22.04.1
6.8.0-1027.28~22.04.1
6.8.0-1028.29~22.04.1
6.8.0-1029.30~22.04.1
6.8.0-1030.31~22.04.1
6.8.0-1032.33~22.04.1
6.8.0-1033.34~22.04.1
6.8.0-1035.36~22.04.1
6.8.0-1037.38~22.04.1
6.8.0-1038.39~22.04.1
6.8.0-1039.40~22.04.1
6.8.0-1040.41~22.04.1
6.8.0-1041.42~22.04.1
6.8.0-1042.43~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.8-headers-6.8.0-1043",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-oracle-6.8-tools-6.8.0-1043",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1008.9
5.15.0-1002.2
5.15.0-1003.3
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1008.8
5.15.0-1011.13
5.15.0-1012.14
5.15.0-1013.15
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.20
5.15.0-1021.23
5.15.0-1022.24
5.15.0-1023.25
5.15.0-1024.26
5.15.0-1025.27
5.15.0-1026.28
5.15.0-1027.29
5.15.0-1028.30
5.15.0-1029.31
5.15.0-1030.32
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1035.38
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1040.43
5.15.0-1041.44
5.15.0-1042.45
5.15.0-1043.46
5.15.0-1044.47
5.15.0-1045.48
5.15.0-1046.49
5.15.0-1047.50
5.15.0-1048.51
5.15.0-1049.52
5.15.0-1050.53
5.15.0-1053.56
5.15.0-1054.57
5.15.0-1055.58
5.15.0-1058.61
5.15.0-1059.62
5.15.0-1060.63
5.15.0-1061.64
5.15.0-1062.65
5.15.0-1063.66
5.15.0-1064.67
5.15.0-1065.68
5.15.0-1066.69
5.15.0-1067.70
5.15.0-1070.73
5.15.0-1071.74
5.15.0-1072.75
5.15.0-1073.76
5.15.0-1074.77
5.15.0-1075.78
5.15.0-1076.79
5.15.0-1077.80
5.15.0-1078.81
5.15.0-1079.82
5.15.0-1080.83
5.15.0-1083.86
5.15.0-1084.87
5.15.0-1085.88
5.15.0-1086.89
5.15.0-1087.90
5.15.0-1089.92
5.15.0-1090.93
5.15.0-1091.94
5.15.0-1092.95
5.15.0-1093.96
5.15.0-1097.100
5.15.0-1098.101
5.15.0-1099.102
5.15.0-1100.103
5.15.0-1102.105
5.15.0-1103.106
5.15.0-1105.108
5.15.0-1106.109
5.15.0-1108.111
5.15.0-1110.113

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-headers-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-image-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-modules-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-raspi-headers-5.15.0-1110",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-raspi-tools-5.15.0-1110",
            "binary_version": "5.15.0-1110.113"
        },
        {
            "binary_name": "linux-tools-5.15.0-1110-raspi",
            "binary_version": "5.15.0-1110.113"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1032.35

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-headers-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-modules-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-headers-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-tools-5.15.0-1032",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-tools-common",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-realtime-tools-host",
            "binary_version": "5.15.0-1032.35"
        },
        {
            "binary_name": "linux-tools-5.15.0-1032-realtime",
            "binary_version": "5.15.0-1032.35"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.13.0-1004.4
5.13.0-1006.6+22.04.1
5.13.0-1007.7+22.04.1
5.13.0-1010.11+22.04.1
5.15.0-1004.4
5.15.0-1005.5
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1008.8
5.15.0-1011.12
5.15.0-1012.13
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1016.18
5.15.0-1017.19
5.15.0-1018.21
5.15.0-1019.22
5.15.0-1020.23
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1026.30
5.15.0-1027.31
5.15.0-1028.32

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-headers-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-image-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-modules-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-riscv-headers-5.15.0-1028",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-riscv-tools-5.15.0-1028",
            "binary_version": "5.15.0-1028.32"
        },
        {
            "binary_name": "linux-tools-5.15.0-1028-generic",
            "binary_version": "5.15.0-1028.32"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv-5.19

Package

Name
linux-riscv-5.19
Purl
pkg:deb/ubuntu/linux-riscv-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1012.13~22.04.1
5.19.0-1015.16~22.04.1
5.19.0-1016.17~22.04.1
5.19.0-1017.18~22.04.1
5.19.0-1018.19~22.04.1
5.19.0-1019.21~22.04.1
5.19.0-1020.22~22.04.1
5.19.0-1021.23~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-image-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-riscv-5.19-headers-5.19.0-1021",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-riscv-5.19-tools-5.19.0-1021",
            "binary_version": "5.19.0-1021.23~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1021-generic",
            "binary_version": "5.19.0-1021.23~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv-6.5

Package

Name
linux-riscv-6.5
Purl
pkg:deb/ubuntu/linux-riscv-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-17.17.1.1~22.04.1
6.5.0-21.21.1~22.04.1
6.5.0-25.25.1~22.04.1
6.5.0-26.26.1~22.04.1
6.5.0-27.28.1~22.04.1
6.5.0-28.29.1~22.04.1
6.5.0-35.35.1~22.04.1
6.5.0-40.40.1~22.04.1
6.5.0-42.42.1~22.04.1
6.5.0-45.45.1~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-image-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.5-headers-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.5-tools-6.5.0-45",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-45-generic",
            "binary_version": "6.5.0-45.45.1~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv-6.8

Package

Name
linux-riscv-6.8
Purl
pkg:deb/ubuntu/linux-riscv-6.8?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100~22.04.1

Affected versions

6.*
6.8.0-38.38.1~22.04.1
6.8.0-39.39.1~22.04.1
6.8.0-40.40.1~22.04.1
6.8.0-41.41.1~22.04.1
6.8.0-44.44.1~22.04.1
6.8.0-47.47.1~22.04.1
6.8.0-48.48.1~22.04.2
6.8.0-49.49.1~22.04.1
6.8.0-50.51.1~22.04.1
6.8.0-51.52.1~22.04.1
6.8.0-52.53.1~22.04.1
6.8.0-53.55.1~22.04.1
6.8.0-55.57.1~22.04.1
6.8.0-56.58.1~22.04.1
6.8.0-57.59.1~22.04.1
6.8.0-58.60.1~22.04.1
6.8.0-59.61.1~22.04.1
6.8.0-62.65~22.04.1
6.8.0-63.66~22.04.1
6.8.0-64.67~22.04.1
6.8.0-71.71~22.04.1
6.8.0-78.78~22.04.1
6.8.0-79.79~22.04.1
6.8.0-83.83~22.04.1
6.8.0-84.84~22.04.1
6.8.0-86.87~22.04.1
6.8.0-87.88~22.04.1
6.8.0-88.89~22.04.1
6.8.0-90.91~22.04.1
6.8.0-94.96~22.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-image-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.8-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-riscv-6.8-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-starfive-5.19

Package

Name
linux-starfive-5.19
Purl
pkg:deb/ubuntu/linux-starfive-5.19?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.19.0-1014.16~22.04.1
5.19.0-1015.17~22.04.1
5.19.0-1016.18~22.04.1
5.19.0-1017.19~22.04.1
5.19.0-1018.20~22.04.1
5.19.0-1019.21~22.04.1
5.19.0-1020.22~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-headers-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-image-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-modules-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-starfive-5.19-headers-5.19.0-1020",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-starfive-5.19-tools-5.19.0-1020",
            "binary_version": "5.19.0-1020.22~22.04.1"
        },
        {
            "binary_name": "linux-tools-5.19.0-1020-starfive",
            "binary_version": "5.19.0-1020.22~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-starfive-6.2

Package

Name
linux-starfive-6.2
Purl
pkg:deb/ubuntu/linux-starfive-6.2?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.2.0-1006.7~22.04.1
6.2.0-1007.8~22.04.1
6.2.0-1009.10~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-image-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.2-headers-6.2.0-1009",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.2-tools-6.2.0-1009",
            "binary_version": "6.2.0-1009.10~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.2.0-1009-starfive",
            "binary_version": "6.2.0-1009.10~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-starfive-6.5

Package

Name
linux-starfive-6.5
Purl
pkg:deb/ubuntu/linux-starfive-6.5?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-1007.8~22.04.1
6.5.0-1008.9~22.04.1
6.5.0-1009.10~22.04.1
6.5.0-1010.11~22.04.1
6.5.0-1011.12~22.04.1
6.5.0-1012.13~22.04.1
6.5.0-1014.15~22.04.1
6.5.0-1015.16~22.04.1
6.5.0-1016.17~22.04.1
6.5.0-1017.18~22.04.1
6.5.0-1018.19~22.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-image-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.5-headers-6.5.0-1018",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-starfive-6.5-tools-6.5.0-1018",
            "binary_version": "6.5.0-1018.19~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.5.0-1018-starfive",
            "binary_version": "6.5.0-1018.19~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-xilinx-zynqmp

Package

Name
linux-xilinx-zynqmp
Purl
pkg:deb/ubuntu/linux-xilinx-zynqmp?arch=source&distro=jammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1022.26
5.15.0-1023.27
5.15.0-1025.29
5.15.0-1027.31
5.15.0-1030.34
5.15.0-1031.35
5.15.0-1035.39
5.15.0-1036.40
5.15.0-1037.41
5.15.0-1038.42
5.15.0-1039.43
5.15.0-1041.45
5.15.0-1044.48
5.15.0-1046.50
5.15.0-1050.54
5.15.0-1051.55
5.15.0-1052.56
5.15.0-1053.57
5.15.0-1054.58
5.15.0-1055.59
5.15.0-1056.60
5.15.0-1057.61
5.15.0-1059.63
5.15.0-1060.64
5.15.0-1061.65
5.15.0-1062.66
5.15.0-1063.67
5.15.0-1064.68
5.15.0-1065.69
5.15.0-1067.71
5.15.0-1068.72
5.15.0-1069.73
5.15.0-1070.74
5.15.0-1074.78
5.15.0-1075.79
5.15.0-1076.80
5.15.0-1077.81
5.15.0-1078.82
5.15.0-1079.83
5.15.0-1080.84

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
        },
        {
            "binary_name": "linux-headers-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
        },
        {
            "binary_name": "linux-image-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
        },
        {
            "binary_name": "linux-modules-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
        },
        {
            "binary_name": "linux-tools-5.15.0-1080-xilinx-zynqmp",
            "binary_version": "5.15.0-1080.84"
        },
        {
            "binary_name": "linux-xilinx-zynqmp-headers-5.15.0-1080",
            "binary_version": "5.15.0-1080.84"
        },
        {
            "binary_name": "linux-xilinx-zynqmp-tools-5.15.0-1080",
            "binary_version": "5.15.0-1080.84"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:24.04:LTS
linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100

Affected versions

6.*
6.5.0-9.9
6.6.0-14.14
6.8.0-11.11
6.8.0-20.20
6.8.0-22.22
6.8.0-28.28
6.8.0-31.31
6.8.0-35.35
6.8.0-36.36
6.8.0-38.38
6.8.0-39.39
6.8.0-40.40
6.8.0-41.41
6.8.0-44.44
6.8.0-45.45
6.8.0-47.47
6.8.0-48.48
6.8.0-49.49
6.8.0-50.51
6.8.0-51.52
6.8.0-52.53
6.8.0-53.55
6.8.0-54.56
6.8.0-55.57
6.8.0-56.58
6.8.0-57.59
6.8.0-58.60
6.8.0-59.61
6.8.0-60.63
6.8.0-62.65
6.8.0-63.66
6.8.0-64.67
6.8.0-71.71
6.8.0-78.78
6.8.0-79.79
6.8.0-83.83
6.8.0-84.84
6.8.0-85.85
6.8.0-86.87
6.8.0-87.88
6.8.0-88.89
6.8.0-90.91
6.8.0-94.96

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-image-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-lib-rust-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-source-6.8.0",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-generic-64k",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-common",
            "binary_version": "6.8.0-100.100"
        },
        {
            "binary_name": "linux-tools-host",
            "binary_version": "6.8.0-100.100"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49

Affected versions

6.*
6.5.0-1008.8
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1006.6
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1016.17
6.8.0-1017.18
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1023.25
6.8.0-1024.26
6.8.0-1025.27
6.8.0-1026.28
6.8.0-1027.29
6.8.0-1028.30
6.8.0-1029.31
6.8.0-1030.32
6.8.0-1031.33
6.8.0-1032.34
6.8.0-1033.35
6.8.0-1035.37
6.8.0-1036.38
6.8.0-1038.40
6.8.0-1039.41
6.8.0-1040.42
6.8.0-1041.43
6.8.0-1042.44
6.8.0-1043.45
6.8.0-1044.46
6.8.0-1045.47

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-aws-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-aws-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws-64k",
            "binary_version": "6.8.0-1046.49"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure

Package

Name
linux-azure
Purl
pkg:deb/ubuntu/linux-azure?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.52

Affected versions

6.*
6.5.0-1007.7
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1012.14
6.8.0-1013.15
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.20
6.8.0-1018.21
6.8.0-1020.23
6.8.0-1021.25
6.8.0-1025.30
6.8.0-1026.31
6.8.0-1027.32
6.8.0-1028.33
6.8.0-1029.34
6.8.0-1030.35
6.8.0-1031.36
6.8.0-1034.39
6.8.0-1038.44
6.8.0-1040.46
6.8.0-1041.47
6.8.0-1042.48
6.8.0-1044.50

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-azure-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-azure-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure",
            "binary_version": "6.8.0-1046.52"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-6.11

Package

Name
linux-azure-6.11
Purl
pkg:deb/ubuntu/linux-azure-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.11.0-1018.18~24.04.1

Affected versions

6.*
6.11.0-1008.8~24.04.1
6.11.0-1012.12~24.04.1
6.11.0-1013.13~24.04.1
6.11.0-1014.14~24.04.1
6.11.0-1015.15~24.04.1
6.11.0-1017.17~24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-6.11-cloud-tools-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-azure-6.11-headers-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-azure-6.11-tools-6.11.0-1018",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1018-azure",
            "binary_version": "6.11.0-1018.18~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.53

Affected versions

6.*
6.8.0-1041.48
6.8.0-1044.51

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-azure-fde-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-azure-fde-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-azure-fde-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure-fde",
            "binary_version": "6.8.0-1046.53"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-nvidia

Package

Name
linux-azure-nvidia
Purl
pkg:deb/ubuntu/linux-azure-nvidia?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1016.17
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1022.23
6.8.0-1025.27
6.8.0-1027.30
6.8.0-1029.32
6.8.0-1039.42

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-nvidia-cloud-tools-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-azure-nvidia-headers-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-azure-nvidia-tools-6.8.0-1039",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-headers-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-modules-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        },
        {
            "binary_name": "linux-tools-6.8.0-1039-azure-nvidia",
            "binary_version": "6.8.0-1039.42"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp

Package

Name
linux-gcp
Purl
pkg:deb/ubuntu/linux-gcp?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50

Affected versions

6.*
6.5.0-1007.7
6.6.0-1001.1
6.8.0-1002.2
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.9
6.8.0-1009.10
6.8.0-1010.11
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1024.26
6.8.0-1025.27
6.8.0-1026.28
6.8.0-1027.29
6.8.0-1028.30
6.8.0-1029.31
6.8.0-1030.32
6.8.0-1031.33
6.8.0-1032.34
6.8.0-1033.35
6.8.0-1034.36
6.8.0-1036.38
6.8.0-1037.39
6.8.0-1039.41
6.8.0-1040.42
6.8.0-1041.43
6.8.0-1042.45
6.8.0-1043.46
6.8.0-1044.47
6.8.0-1045.48
6.8.0-1046.49

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-gcp-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-gcp-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp",
            "binary_version": "6.8.0-1047.50"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp-64k",
            "binary_version": "6.8.0-1047.50"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-6.11

Package

Name
linux-gcp-6.11
Purl
pkg:deb/ubuntu/linux-gcp-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.11.0-1016.16~24.04.1

Affected versions

6.*
6.11.0-1006.6~24.04.2
6.11.0-1011.11~24.04.1
6.11.0-1013.13~24.04.1
6.11.0-1014.14~24.04.1
6.11.0-1015.15~24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1016-gcp-64k",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.11-headers-6.11.0-1016",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.11-lib-rust-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-gcp-6.11-tools-6.11.0-1016",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-1016-gcp-64k",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1016-gcp-64k",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-1016-gcp-64k",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1016-gcp-64k",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1016-gcp",
            "binary_version": "6.11.0-1016.16~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-1016-gcp-64k",
            "binary_version": "6.11.0-1016.16~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gke

Package

Name
linux-gke
Purl
pkg:deb/ubuntu/linux-gke?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.48

Affected versions

6.*
6.8.0-1003.5
6.8.0-1004.7
6.8.0-1005.8
6.8.0-1006.9
6.8.0-1007.10
6.8.0-1008.11
6.8.0-1009.12
6.8.0-1010.13
6.8.0-1011.14
6.8.0-1012.15
6.8.0-1013.17
6.8.0-1014.18
6.8.0-1015.19
6.8.0-1016.20
6.8.0-1017.21
6.8.0-1019.23
6.8.0-1020.24
6.8.0-1021.25
6.8.0-1022.26
6.8.0-1023.27
6.8.0-1024.28
6.8.0-1025.29
6.8.0-1026.30
6.8.0-1027.31
6.8.0-1028.32
6.8.0-1029.33
6.8.0-1032.36
6.8.0-1033.37
6.8.0-1035.39
6.8.0-1036.40
6.8.0-1037.41
6.8.0-1038.43
6.8.0-1039.44
6.8.0-1040.45
6.8.0-1041.46
6.8.0-1042.47

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-gke-headers-6.8.0-1043",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-gke-tools-6.8.0-1043",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-gke",
            "binary_version": "6.8.0-1043.48"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-gke-64k",
            "binary_version": "6.8.0-1043.48"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gkeop

Package

Name
linux-gkeop
Purl
pkg:deb/ubuntu/linux-gkeop?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1030.33

Affected versions

6.*
6.8.0-1001.3
6.8.0-1002.4
6.8.0-1003.5
6.8.0-1004.6
6.8.0-1006.8
6.8.0-1007.9
6.8.0-1008.10
6.8.0-1009.11
6.8.0-1010.12
6.8.0-1011.13
6.8.0-1012.14
6.8.0-1013.15
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1022.24
6.8.0-1023.25
6.8.0-1024.26
6.8.0-1025.28
6.8.0-1026.29
6.8.0-1027.30
6.8.0-1028.31
6.8.0-1029.32

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-gkeop-cloud-tools-6.8.0-1030",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-gkeop-headers-6.8.0-1030",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-gkeop-tools-6.8.0-1030",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-headers-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-modules-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        },
        {
            "binary_name": "linux-tools-6.8.0-1030-gkeop",
            "binary_version": "6.8.0-1030.33"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-6.11

Package

Name
linux-hwe-6.11
Purl
pkg:deb/ubuntu/linux-hwe-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.11.0-28.28~24.04.1

Affected versions

6.*
6.11.0-17.17~24.04.2
6.11.0-19.19~24.04.1
6.11.0-21.21~24.04.1
6.11.0-24.24~24.04.1
6.11.0-25.25~24.04.1
6.11.0-26.26~24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-28-generic-64k",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-headers-6.11.0-28-generic-64k",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-cloud-tools-6.11.0-28",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-headers-6.11.0-28",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-lib-rust-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-hwe-6.11-tools-6.11.0-28",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-image-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-28-generic-64k",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-6.11.0-28-generic-64k",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-ipu7-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-usbio-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-modules-vision-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-28-generic",
            "binary_version": "6.11.0-28.28~24.04.1"
        },
        {
            "binary_name": "linux-tools-6.11.0-28-generic-64k",
            "binary_version": "6.11.0-28.28~24.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-ibm

Package

Name
linux-ibm
Purl
pkg:deb/ubuntu/linux-ibm?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1044.44

Affected versions

6.*
6.5.0-1009.9
6.8.0-1001.1
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1015.15
6.8.0-1016.16
6.8.0-1017.17
6.8.0-1018.18
6.8.0-1019.19
6.8.0-1022.22
6.8.0-1023.23
6.8.0-1024.24
6.8.0-1025.25
6.8.0-1026.26
6.8.0-1027.27
6.8.0-1028.28
6.8.0-1029.29
6.8.0-1030.30
6.8.0-1033.33
6.8.0-1036.36
6.8.0-1037.37
6.8.0-1038.38
6.8.0-1039.39
6.8.0-1040.40
6.8.0-1041.41
6.8.0-1042.42
6.8.0-1043.43

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-headers-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-ibm-headers-6.8.0-1044",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-ibm-tools-6.8.0-1044",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-modules-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        },
        {
            "binary_name": "linux-tools-6.8.0-1044-ibm",
            "binary_version": "6.8.0-1044.44"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-intel

Package

Name
linux-intel
Purl
pkg:deb/ubuntu/linux-intel?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1005.12
6.8.0-1006.13
6.8.0-1007.14

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-headers-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-intel-cloud-tools-6.8.0-1007",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-intel-headers-6.8.0-1007",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-intel-tools-6.8.0-1007",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-modules-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        },
        {
            "binary_name": "linux-tools-6.8.0-1007-intel",
            "binary_version": "6.8.0-1007.14"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency

Package

Name
linux-lowlatency
Purl
pkg:deb/ubuntu/linux-lowlatency?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100.1

Affected versions

6.*
6.5.0-9.9.1
6.6.0-14.14.1
6.8.0-7.7.1
6.8.0-25.25.3
6.8.0-28.28.1
6.8.0-31.31.1
6.8.0-35.35.1
6.8.0-36.36.1
6.8.0-38.38.1
6.8.0-39.39.1
6.8.0-40.40.1
6.8.0-41.41.1
6.8.0-44.44.1
6.8.0-45.45.1
6.8.0-47.47.1
6.8.0-48.48.3
6.8.0-49.49.1
6.8.0-50.51.1
6.8.0-51.52.1
6.8.0-52.53.1
6.8.0-53.55.2
6.8.0-54.56.1
6.8.0-55.57.1
6.8.0-56.58.1
6.8.0-57.59.1
6.8.0-58.60.1
6.8.0-59.61.1
6.8.0-60.63.1
6.8.0-62.65.1
6.8.0-63.66.1
6.8.0-64.67.1
6.8.0-65.68.1
6.8.0-78.78.1
6.8.0-79.79.1
6.8.0-83.83.1
6.8.0-84.84.1
6.8.0-85.85.1
6.8.0-86.87.1
6.8.0-87.88.1
6.8.0-88.89.1
6.8.0-90.91.1
6.8.0-94.96.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-lib-rust-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-lowlatency-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency",
            "binary_version": "6.8.0-100.100.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-lowlatency-64k",
            "binary_version": "6.8.0-100.100.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency-hwe-6.11

Package

Name
linux-lowlatency-hwe-6.11
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.11.0-1015.16~24.04.2

Affected versions

6.*
6.11.0-1009.10~24.04.1
6.11.0-1011.12~24.04.1
6.11.0-1012.13~24.04.1
6.11.0-1013.14~24.04.1
6.11.0-1014.15~24.04.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1015-lowlatency-64k",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-cloud-tools-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-headers-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-headers-6.11.0-1015-lowlatency-64k",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1015-lowlatency-64k",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-cloud-tools-6.11.0-1015",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-headers-6.11.0-1015",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-lib-rust-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-lowlatency-hwe-6.11-tools-6.11.0-1015",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-modules-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-modules-6.11.0-1015-lowlatency-64k",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-tools-6.11.0-1015-lowlatency",
            "binary_version": "6.11.0-1015.16~24.04.2"
        },
        {
            "binary_name": "linux-tools-6.11.0-1015-lowlatency-64k",
            "binary_version": "6.11.0-1015.16~24.04.2"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia

Package

Name
linux-nvidia
Purl
pkg:deb/ubuntu/linux-nvidia?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49

Affected versions

6.*
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.21
6.8.0-1020.22
6.8.0-1021.23
6.8.0-1022.25
6.8.0-1023.26
6.8.0-1024.27
6.8.0-1025.28
6.8.0-1026.29
6.8.0-1027.30
6.8.0-1028.31
6.8.0-1029.32
6.8.0-1030.33
6.8.0-1031.34
6.8.0-1032.35
6.8.0-1035.38
6.8.0-1036.39
6.8.0-1038.41
6.8.0-1039.42
6.8.0-1040.43
6.8.0-1041.44
6.8.0-1042.45
6.8.0-1043.46
6.8.0-1044.47
6.8.0-1045.48

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-nvidia-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-nvidia-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia",
            "binary_version": "6.8.0-1046.49"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-64k",
            "binary_version": "6.8.0-1046.49"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-6.11

Package

Name
linux-nvidia-6.11
Purl
pkg:deb/ubuntu/linux-nvidia-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.11.0-1012.12

Affected versions

6.*
6.11.0-1002.2
6.11.0-1003.3
6.11.0-1007.7
6.11.0-1010.10
6.11.0-1011.11

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-buildinfo-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-headers-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-headers-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-modules-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-modules-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-modules-extra-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-nvidia-6.11-headers-6.11.0-1012",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-nvidia-6.11-lib-rust-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-nvidia-6.11-tools-6.11.0-1012",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-tools-6.11.0-1012-nvidia",
            "binary_version": "6.11.0-1012.12"
        },
        {
            "binary_name": "linux-tools-6.11.0-1012-nvidia-64k",
            "binary_version": "6.11.0-1012.12"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-lowlatency

Package

Name
linux-nvidia-lowlatency
Purl
pkg:deb/ubuntu/linux-nvidia-lowlatency?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49.1

Affected versions

6.*
6.8.0-1009.9.1
6.8.0-1011.11.1
6.8.0-1012.12.1
6.8.0-1013.14.1
6.8.0-1014.15.1
6.8.0-1015.16.1
6.8.0-1017.19.1
6.8.0-1018.20.1
6.8.0-1019.21.1
6.8.0-1020.22.1
6.8.0-1021.23.1
6.8.0-1022.25.2
6.8.0-1023.26.1
6.8.0-1024.27.1
6.8.0-1025.28.1
6.8.0-1026.29.1
6.8.0-1027.30.1
6.8.0-1028.31.1
6.8.0-1029.32.1
6.8.0-1030.33.1
6.8.0-1031.34.1
6.8.0-1032.35.1
6.8.0-1035.38.1
6.8.0-1036.39.1
6.8.0-1038.41.1
6.8.0-1039.42.1
6.8.0-1040.43.1
6.8.0-1041.44.1
6.8.0-1042.45.1
6.8.0-1043.46.1
6.8.0-1044.47.1
6.8.0-1045.48.1

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-modules-nvidia-fs-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-nvidia-lowlatency-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-nvidia-lowlatency-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-lowlatency",
            "binary_version": "6.8.0-1046.49.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-nvidia-lowlatency-64k",
            "binary_version": "6.8.0-1046.49.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-tegra

Package

Name
linux-nvidia-tegra
Purl
pkg:deb/ubuntu/linux-nvidia-tegra?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1020.20

Affected versions

6.*
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1016.16
6.8.0-1019.19

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-nvidia-tegra-headers-6.8.0-1020",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-nvidia-tegra-tools-6.8.0-1020",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1020-nvidia-tegra",
            "binary_version": "6.8.0-1020.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1020-nvidia-tegra-rt",
            "binary_version": "6.8.0-1020.20"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-6.11

Package

Name
linux-oem-6.11
Purl
pkg:deb/ubuntu/linux-oem-6.11?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.11.0-1024.24

Affected versions

6.*
6.11.0-1007.7
6.11.0-1008.8
6.11.0-1009.9
6.11.0-1010.10
6.11.0-1011.11
6.11.0-1012.12
6.11.0-1013.13
6.11.0-1015.15
6.11.0-1016.16
6.11.0-1017.17
6.11.0-1018.18
6.11.0-1020.20
6.11.0-1021.21
6.11.0-1022.22
6.11.0-1023.23

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-headers-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-image-unsigned-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-modules-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-modules-ipu6-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-modules-ipu7-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-modules-usbio-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-modules-vision-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-oem-6.11-headers-6.11.0-1024",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-oem-6.11-tools-6.11.0-1024",
            "binary_version": "6.11.0-1024.24"
        },
        {
            "binary_name": "linux-tools-6.11.0-1024-oem",
            "binary_version": "6.11.0-1024.24"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oem-6.8

Package

Name
linux-oem-6.8
Purl
pkg:deb/ubuntu/linux-oem-6.8?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.9
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1016.16
6.8.0-1017.17
6.8.0-1018.18
6.8.0-1019.19
6.8.0-1020.20
6.8.0-1024.24
6.8.0-1025.25
6.8.0-1026.26
6.8.0-1027.27
6.8.0-1028.28
6.8.0-1029.29
6.8.0-1030.30
6.8.0-1031.31
6.8.0-1032.32

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-headers-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-oem-6.8-headers-6.8.0-1032",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-oem-6.8-tools-6.8.0-1032",
            "binary_version": "6.8.0-1032.32"
        },
        {
            "binary_name": "linux-tools-6.8.0-1032-oem",
            "binary_version": "6.8.0-1032.32"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle

Package

Name
linux-oracle
Purl
pkg:deb/ubuntu/linux-oracle?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1043.44

Affected versions

6.*
6.5.0-1010.10
6.6.0-1001.1
6.8.0-1001.1
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1008.8
6.8.0-1010.10
6.8.0-1011.11
6.8.0-1012.12
6.8.0-1013.13
6.8.0-1014.14
6.8.0-1015.16
6.8.0-1016.17
6.8.0-1017.18
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1020.21
6.8.0-1021.22
6.8.0-1022.23
6.8.0-1023.24
6.8.0-1024.25
6.8.0-1025.26
6.8.0-1026.27
6.8.0-1027.28
6.8.0-1028.29
6.8.0-1029.30
6.8.0-1030.31
6.8.0-1032.33
6.8.0-1033.34
6.8.0-1035.36
6.8.0-1037.38
6.8.0-1038.39
6.8.0-1039.40
6.8.0-1040.41
6.8.0-1041.42
6.8.0-1042.43

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-headers-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-oracle-headers-6.8.0-1043",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-oracle-tools-6.8.0-1043",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle",
            "binary_version": "6.8.0-1043.44"
        },
        {
            "binary_name": "linux-tools-6.8.0-1043-oracle-64k",
            "binary_version": "6.8.0-1043.44"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-raspi

Package

Name
linux-raspi
Purl
pkg:deb/ubuntu/linux-raspi?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.51

Affected versions

6.*
6.5.0-1005.7
6.7.0-1001.1
6.8.0-1001.1
6.8.0-1002.2
6.8.0-1003.3
6.8.0-1004.4
6.8.0-1005.5
6.8.0-1006.6
6.8.0-1007.7
6.8.0-1008.8
6.8.0-1009.10
6.8.0-1010.11
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.16
6.8.0-1015.17
6.8.0-1016.18
6.8.0-1017.19
6.8.0-1018.20
6.8.0-1019.23
6.8.0-1020.24
6.8.0-1024.28
6.8.0-1028.32
6.8.0-1029.33
6.8.0-1030.34
6.8.0-1031.35
6.8.0-1032.36
6.8.0-1035.39
6.8.0-1036.40
6.8.0-1038.42
6.8.0-1039.43
6.8.0-1040.44
6.8.0-1041.45
6.8.0-1042.46
6.8.0-1043.47
6.8.0-1044.48
6.8.0-1045.49

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-image-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-raspi-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-raspi-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.51"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-raspi",
            "binary_version": "6.8.0-1047.51"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.0-2019.20

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-image-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-raspi-realtime-headers-6.8.0-2019",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-raspi-realtime-tools-6.8.0-2019",
            "binary_version": "6.8.0-2019.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-2019-raspi-realtime",
            "binary_version": "6.8.0-2019.20"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.8.1-1015.16

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-headers-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-modules-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-modules-extra-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-realtime-headers-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-realtime-tools-6.8.1-1015",
            "binary_version": "6.8.1-1015.16"
        },
        {
            "binary_name": "linux-tools-6.8.1-1015-realtime",
            "binary_version": "6.8.1-1015.16"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv

Package

Name
linux-riscv
Purl
pkg:deb/ubuntu/linux-riscv?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.5.0-9.9.1
6.8.0-20.20.1
6.8.0-28.28.1
6.8.0-31.31.1
6.8.0-35.35.1
6.8.0-36.36.1
6.8.0-38.38.1
6.8.0-39.39.1
6.8.0-40.40.1
6.8.0-41.41.1
6.8.0-44.44.1
6.8.0-47.47.1
6.8.0-48.48.1
6.8.0-49.49.1
6.8.0-50.51.1
6.8.0-51.52.1
6.8.0-52.53.1
6.8.0-53.55.1
6.8.0-55.57.1
6.8.0-56.58.1
6.8.0-57.59.1
6.8.0-58.60.1
6.8.0-59.61.1
6.8.0-60.63.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-headers-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-image-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-modules-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-riscv-headers-6.8.0-60",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-riscv-tools-6.8.0-60",
            "binary_version": "6.8.0-60.63.1"
        },
        {
            "binary_name": "linux-tools-6.8.0-60-generic",
            "binary_version": "6.8.0-60.63.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-xilinx

Package

Name
linux-xilinx
Purl
pkg:deb/ubuntu/linux-xilinx?arch=source&distro=noble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1023.24

Affected versions

6.*
6.8.0-1008.9
6.8.0-1009.10
6.8.0-1011.12
6.8.0-1012.13
6.8.0-1013.14
6.8.0-1014.15
6.8.0-1015.16
6.8.0-1017.18
6.8.0-1018.19
6.8.0-1019.20
6.8.0-1020.21
6.8.0-1021.22
6.8.0-1022.23

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-headers-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-image-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-modules-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-tools-6.8.0-1023-xilinx",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-xilinx-headers-6.8.0-1023",
            "binary_version": "6.8.0-1023.24"
        },
        {
            "binary_name": "linux-xilinx-tools-6.8.0-1023",
            "binary_version": "6.8.0-1023.24"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:25.10
linux-azure-fde

Package

Name
linux-azure-fde
Purl
pkg:deb/ubuntu/linux-azure-fde?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

6.*
6.17.0-1003.3
6.17.0-1004.4
6.17.0-1005.5
6.17.0-1007.7
6.17.0-1008.8
6.17.0-1010.10
6.17.0-1012.12
6.17.0-1014.14
6.17.0-1015.15
6.17.0-1017.17

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-fde-cloud-tools-6.17.0-1017",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-azure-fde-headers-6.17.0-1017",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-azure-fde-tools-6.17.0-1017",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-headers-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-modules-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        },
        {
            "binary_name": "linux-tools-6.17.0-1017-azure-fde",
            "binary_version": "6.17.0-1017.17"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Nvidia-BlueField:22.04:LTS
linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1011.13
5.15.0-1014.16
5.15.0-1015.17
5.15.0-1017.19
5.15.0-1019.21
5.15.0-1021.23
5.15.0-1022.24
5.15.0-1023.25
5.15.0-1024.26
5.15.0-1027.29
5.15.0-1028.30
5.15.0-1031.33
5.15.0-1032.34
5.15.0-1033.35
5.15.0-1035.37
5.15.0-1036.38
5.15.0-1037.39
5.15.0-1038.40
5.15.0-1040.42
5.15.0-1042.44
5.15.0-1043.45
5.15.0-1044.46
5.15.0-1045.47
5.15.0-1047.49
5.15.0-1048.50
5.15.0-1050.52
5.15.0-1051.53
5.15.0-1052.54
5.15.0-1053.55
5.15.0-1054.56
5.15.0-1056.58
5.15.0-1057.59
5.15.0-1058.60
5.15.0-1059.61
5.15.0-1060.62
5.15.0-1061.63
5.15.0-1062.64
5.15.0-1063.65
5.15.0-1064.66
5.15.0-1065.67
5.15.0-1066.68
5.15.0-1067.69
5.15.0-1069.71
5.15.0-1070.72
5.15.0-1072.74
5.15.0-1074.76
5.15.0-1075.77
5.15.0-1076.78
5.15.0-1077.79
5.15.0-1079.81
5.15.0-1080.82
5.15.0-1081.83
5.15.0-1082.84
5.15.0-1083.85
5.15.0-1084.86
5.15.0-1085.87
5.15.0-1086.88
5.15.0-1087.89
5.15.0-1089.91
5.15.0-1090.92
5.15.0-1092.94
5.15.0-1093.95
5.15.0-1095.97
5.15.0-1096.98
5.15.0-1097.99
5.15.0-1098.100
5.15.0-1099.101
5.15.0-1100.102
5.15.0-1101.103

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-bluefield-cloud-tools-common",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-bluefield-headers-5.15.0-1101",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-bluefield-tools-5.15.0-1101",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-bluefield-tools-host",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-headers-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-modules-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
        },
        {
            "binary_name": "linux-tools-5.15.0-1101-bluefield",
            "binary_version": "5.15.0-1101.103"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Nvidia-BlueField:24.04:LTS
linux-bluefield

Package

Name
linux-bluefield
Purl
pkg:deb/ubuntu/linux-bluefield?arch=source&distro=bluefield%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1016.20

Affected versions

6.*
6.8.0-1011.15
6.8.0-1012.16
6.8.0-1013.17
6.8.0-1014.18

Ecosystem specific 

{
    "availability": "Available for NVIDIA BlueField platforms",
    "binaries": [
        {
            "binary_name": "linux-bluefield-headers-6.8.0-1016",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-bluefield-tools-6.8.0-1016",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-headers-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1016-bluefield",
            "binary_version": "6.8.0-1016.20"
        },
        {
            "binary_name": "linux-tools-6.8.0-1016-bluefield-64k",
            "binary_version": "6.8.0-1016.20"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Pro:20.04:LTS
linux-aws-5.15

Package

Name
linux-aws-5.15
Purl
pkg:deb/ubuntu/linux-aws-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1014.18~20.04.1
5.15.0-1015.19~20.04.1
5.15.0-1017.21~20.04.1
5.15.0-1019.23~20.04.1
5.15.0-1020.24~20.04.1
5.15.0-1021.25~20.04.1
5.15.0-1022.26~20.04.1
5.15.0-1023.27~20.04.1
5.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
5.15.0-1028.32~20.04.1
5.15.0-1030.34~20.04.1
5.15.0-1031.35~20.04.1
5.15.0-1033.37~20.04.1
5.15.0-1034.38~20.04.1
5.15.0-1035.39~20.04.1
5.15.0-1036.40~20.04.1
5.15.0-1037.41~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1039.44~20.04.1
5.15.0-1040.45~20.04.1
5.15.0-1041.46~20.04.1
5.15.0-1043.48~20.04.1
5.15.0-1044.49~20.04.1
5.15.0-1045.50~20.04.1
5.15.0-1047.52~20.04.1
5.15.0-1048.53~20.04.1
5.15.0-1049.54~20.04.1
5.15.0-1050.55~20.04.1
5.15.0-1051.56~20.04.1
5.15.0-1052.57~20.04.1
5.15.0-1053.58~20.04.1
5.15.0-1055.60~20.04.1
5.15.0-1056.61~20.04.1
5.15.0-1057.63~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1068.74~20.04.1
5.15.0-1069.75~20.04.1
5.15.0-1070.76~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.1
5.15.0-1075.82~20.04.1
5.15.0-1077.84~20.04.1
5.15.0-1080.87~20.04.1
5.15.0-1081.88~20.04.1
5.15.0-1082.89~20.04.1
5.15.0-1083.90~20.04.1
5.15.0-1084.91~20.04.1
5.15.0-1086.93~20.04.1
5.15.0-1087.94~20.04.1
5.15.0-1088.95~20.04.1
5.15.0-1089.96~20.04.1
5.15.0-1090.97~20.04.1
5.15.0-1091.98~20.04.1
5.15.0-1092.99~20.04.1
5.15.0-1093.100~20.04.1
5.15.0-1095.102~20.04.1
5.15.0-1096.103~20.04.1
5.15.0-1097.104~20.04.1
5.15.0-1098.105~20.04.1
5.15.0-1099.106~20.04.1
5.15.0-1100.107~20.04.2
5.15.0-1101.108~20.04.1
5.15.0-1103.110~20.04.1
5.15.0-1104.111~20.04.1
5.15.0-1105.112~20.04.1
5.15.0-1106.113~20.04.1
5.15.0-1108.115~20.04.1
5.15.0-1109.116~20.04.1
5.15.0-1111.118~20.04.1
5.15.0-1112.119~20.04.1
5.15.0-1114.121~20.04.1
5.15.0-1115.122~20.04.1
5.15.0-1116.123~20.04.1
5.15.0-1117.124~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-5.15-cloud-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.15-headers-5.15.0-1117",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-aws-5.15-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1117-aws",
            "binary_version": "5.15.0-1117.124~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-5.15

Package

Name
linux-azure-5.15
Purl
pkg:deb/ubuntu/linux-azure-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1007.8~20.04.1
5.15.0-1008.9~20.04.1
5.15.0-1013.16~20.04.1
5.15.0-1014.17~20.04.1
5.15.0-1017.20~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1020.25~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1022.27~20.04.1
5.15.0-1023.29~20.04.1
5.15.0-1029.36~20.04.1
5.15.0-1030.37~20.04.1
5.15.0-1031.38~20.04.1
5.15.0-1033.40~20.04.1
5.15.0-1034.41~20.04.1
5.15.0-1035.42~20.04.1
5.15.0-1036.43~20.04.1
5.15.0-1037.44~20.04.1
5.15.0-1038.45~20.04.1
5.15.0-1039.46~20.04.1
5.15.0-1040.47~20.04.1
5.15.0-1041.48~20.04.1
5.15.0-1042.49~20.04.1
5.15.0-1043.50~20.04.1
5.15.0-1045.52~20.04.1
5.15.0-1046.53~20.04.1
5.15.0-1047.54~20.04.1
5.15.0-1049.56~20.04.1
5.15.0-1050.57~20.04.1
5.15.0-1051.59~20.04.1
5.15.0-1052.60~20.04.1
5.15.0-1053.61~20.04.1
5.15.0-1054.62~20.04.1
5.15.0-1056.64~20.04.1
5.15.0-1057.65~20.04.1
5.15.0-1058.66~20.04.2
5.15.0-1059.67~20.04.1
5.15.0-1060.69~20.04.1
5.15.0-1061.70~20.04.1
5.15.0-1063.72~20.04.1
5.15.0-1064.73~20.04.1
5.15.0-1065.74~20.04.1
5.15.0-1067.76~20.04.1
5.15.0-1068.77~20.04.1
5.15.0-1070.79~20.04.1
5.15.0-1071.80~20.04.1
5.15.0-1072.81~20.04.1
5.15.0-1073.82~20.04.1
5.15.0-1074.83~20.04.1
5.15.0-1075.84~20.04.1
5.15.0-1078.87~20.04.1
5.15.0-1079.88~20.04.1
5.15.0-1081.90~20.04.1
5.15.0-1082.91~20.04.1
5.15.0-1086.95~20.04.1
5.15.0-1087.96~20.04.1
5.15.0-1088.97~20.04.1
5.15.0-1089.98~20.04.1
5.15.0-1091.100~20.04.1
5.15.0-1094.103~20.04.1
5.15.0-1095.104~20.04.1
5.15.0-1096.105~20.04.1
5.15.0-1097.106~20.04.1
5.15.0-1098.107~20.04.1
5.15.0-1102.111~20.04.1
5.15.0-1103.112~20.04.1
5.15.0-1110.119~20.04.1
5.15.0-1111.120~20.04.1
5.15.0-1114.123~20.04.1
5.15.0-1116.125~20.04.1
5.15.0-1117.126~20.04.1
5.15.0-1119.128~20.04.1
5.15.0-1121.130~20.04.1
5.15.0-1122.131~20.04.1
5.15.0-1123.132~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-5.15-cloud-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.15-headers-5.15.0-1123",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-azure-5.15-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-modules-involflt-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1123-azure",
            "binary_version": "5.15.0-1123.132~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fde-5.15

Package

Name
linux-azure-fde-5.15
Purl
pkg:deb/ubuntu/linux-azure-fde-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1019.24~20.04.1.1
5.15.0-1020.25~20.04.1.1
5.15.0-1021.26~20.04.1.1
5.15.0-1029.36~20.04.1.1
5.15.0-1030.37~20.04.1.1
5.15.0-1031.38~20.04.1.1
5.15.0-1033.40~20.04.1.1
5.15.0-1034.41~20.04.1.2
5.15.0-1035.42~20.04.1.1
5.15.0-1036.43~20.04.1.1
5.15.0-1037.44~20.04.1.1
5.15.0-1038.45~20.04.1.1
5.15.0-1039.46~20.04.1.1
5.15.0-1040.47~20.04.1.1
5.15.0-1041.48~20.04.1.1
5.15.0-1042.49~20.04.1.1
5.15.0-1043.50~20.04.1.1
5.15.0-1046.53~20.04.1.1
5.15.0-1047.54~20.04.1.1
5.15.0-1049.56~20.04.1.1
5.15.0-1050.57~20.04.1.1
5.15.0-1051.59~20.04.1.1
5.15.0-1052.60~20.04.1.1
5.15.0-1053.61~20.04.1.1
5.15.0-1054.62~20.04.1.1
5.15.0-1056.64~20.04.1.1
5.15.0-1057.65~20.04.1.1
5.15.0-1058.66~20.04.2.1
5.15.0-1059.67~20.04.1.1
5.15.0-1060.69~20.04.1.1
5.15.0-1061.70~20.04.1.1
5.15.0-1063.72~20.04.1.1
5.15.0-1064.73~20.04.1.1
5.15.0-1065.74~20.04.1.1
5.15.0-1067.76~20.04.1.1
5.15.0-1068.77~20.04.1.1
5.15.0-1070.79~20.04.1.1
5.15.0-1071.80~20.04.1.1
5.15.0-1072.81~20.04.1.1
5.15.0-1073.82~20.04.1.1
5.15.0-1074.83~20.04.1.1
5.15.0-1076.85~20.04.1.1
5.15.0-1078.87~20.04.1.1
5.15.0-1081.90~20.04.1.1
5.15.0-1082.91~20.04.1.1
5.15.0-1086.95~20.04.1.1
5.15.0-1087.96~20.04.1.1
5.15.0-1088.97~20.04.1.1
5.15.0-1089.98~20.04.1.1
5.15.0-1091.100~20.04.1.1
5.15.0-1094.103~20.04.1.1
5.15.0-1096.105~20.04.1.1
5.15.0-1097.106~20.04.1.1
5.15.0-1098.107~20.04.1.1
5.15.0-1102.111~20.04.1.1
5.15.0-1103.112~20.04.1.1
5.15.0-1111.120~20.04.1.1
5.15.0-1114.123~20.04.1
5.15.0-1116.125~20.04.1
5.15.0-1117.126~20.04.2
5.15.0-1118.127~20.04.1
5.15.0-1119.128~20.04.1
5.15.0-1120.129~20.04.1
5.15.0-1121.130~20.04.1
5.15.0-1122.131~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-fde-5.15-cloud-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-azure-fde-5.15-headers-5.15.0-1122",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-azure-fde-5.15-tools-5.15.0-1122",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-modules-involflt-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1122-azure-fde",
            "binary_version": "5.15.0-1122.131~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-5.15

Package

Name
linux-gcp-5.15
Purl
pkg:deb/ubuntu/linux-gcp-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1006.9~20.04.1
5.15.0-1012.17~20.04.1
5.15.0-1013.18~20.04.1
5.15.0-1016.21~20.04.1
5.15.0-1017.23~20.04.2
5.15.0-1018.24~20.04.1
5.15.0-1021.28~20.04.1
5.15.0-1022.29~20.04.1
5.15.0-1025.32~20.04.2
5.15.0-1026.33~20.04.1
5.15.0-1027.34~20.04.1
5.15.0-1029.36~20.04.1
5.15.0-1030.37~20.04.1
5.15.0-1031.38~20.04.1
5.15.0-1032.40~20.04.1
5.15.0-1033.41~20.04.1
5.15.0-1034.42~20.04.1
5.15.0-1035.43~20.04.1
5.15.0-1036.44~20.04.1
5.15.0-1037.45~20.04.1
5.15.0-1038.46~20.04.1
5.15.0-1039.47~20.04.1
5.15.0-1040.48~20.04.1
5.15.0-1041.49~20.04.1
5.15.0-1042.50~20.04.1
5.15.0-1044.52~20.04.1
5.15.0-1045.53~20.04.2
5.15.0-1046.54~20.04.1
5.15.0-1047.55~20.04.1
5.15.0-1048.56~20.04.1
5.15.0-1049.57~20.04.1
5.15.0-1051.59~20.04.1
5.15.0-1052.60~20.04.1
5.15.0-1053.61~20.04.1
5.15.0-1054.62~20.04.1
5.15.0-1055.63~20.04.1
5.15.0-1058.66~20.04.1
5.15.0-1059.67~20.04.1
5.15.0-1060.68~20.04.1
5.15.0-1062.70~20.04.1
5.15.0-1065.73~20.04.1
5.15.0-1066.74~20.04.1
5.15.0-1067.75~20.04.1
5.15.0-1068.76~20.04.1
5.15.0-1069.77~20.04.1
5.15.0-1070.78~20.04.1
5.15.0-1071.79~20.04.1
5.15.0-1072.80~20.04.1
5.15.0-1073.81~20.04.1
5.15.0-1074.83~20.04.1
5.15.0-1075.84~20.04.1
5.15.0-1077.86~20.04.1
5.15.0-1078.87~20.04.1
5.15.0-1081.90~20.04.1
5.15.0-1083.92~20.04.1
5.15.0-1085.94~20.04.1
5.15.0-1086.95~20.04.1
5.15.0-1087.96~20.04.2
5.15.0-1088.97~20.04.1
5.15.0-1090.99~20.04.1
5.15.0-1091.100~20.04.1
5.15.0-1092.101~20.04.1
5.15.0-1093.102~20.04.1
5.15.0-1095.104~20.04.1
5.15.0-1096.105~20.04.1
5.15.0-1097.106~20.04.1
5.15.0-1098.107~20.04.1
5.15.0-1099.108~20.04.1
5.15.0-1100.109~20.04.1
5.15.0-1101.110~20.04.1
5.15.0-1103.112~20.04.1
5.15.0-1104.113~20.04.1
5.15.0-1106.115~20.04.1
5.15.0-1108.117~20.04.1
5.15.0-1109.118~20.04.1
5.15.0-1111.121~20.04.1
5.15.0-1112.122~20.04.1
5.15.0-1114.124~20.04.1
5.15.0-1118.128~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-gcp-5.15-headers-5.15.0-1118",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-gcp-5.15-tools-5.15.0-1118",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1118-gcp",
            "binary_version": "5.15.0-1118.128~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-hwe-5.15

Package

Name
linux-hwe-5.15
Purl
pkg:deb/ubuntu/linux-hwe-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-33.34~20.04.1
5.15.0-41.44~20.04.1
5.15.0-43.46~20.04.1
5.15.0-46.49~20.04.1
5.15.0-48.54~20.04.1
5.15.0-50.56~20.04.1
5.15.0-52.58~20.04.1
5.15.0-53.59~20.04.1
5.15.0-56.62~20.04.1
5.15.0-57.63~20.04.1
5.15.0-58.64~20.04.1
5.15.0-60.66~20.04.1
5.15.0-67.74~20.04.1
5.15.0-69.76~20.04.1
5.15.0-70.77~20.04.1
5.15.0-71.78~20.04.1
5.15.0-72.79~20.04.1
5.15.0-73.80~20.04.1
5.15.0-75.82~20.04.1
5.15.0-76.83~20.04.1
5.15.0-78.85~20.04.1
5.15.0-79.86~20.04.2
5.15.0-82.91~20.04.1
5.15.0-83.92~20.04.1
5.15.0-84.93~20.04.1
5.15.0-86.96~20.04.1
5.15.0-87.97~20.04.1
5.15.0-88.98~20.04.1
5.15.0-89.99~20.04.1
5.15.0-91.101~20.04.1
5.15.0-92.102~20.04.1
5.15.0-94.104~20.04.1
5.15.0-97.107~20.04.1
5.15.0-100.110~20.04.1
5.15.0-101.111~20.04.1
5.15.0-102.112~20.04.1
5.15.0-105.115~20.04.1
5.15.0-106.116~20.04.1
5.15.0-107.117~20.04.1
5.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
5.15.0-117.127~20.04.1
5.15.0-118.128~20.04.1
5.15.0-119.129~20.04.1
5.15.0-121.131~20.04.1
5.15.0-122.132~20.04.1
5.15.0-124.134~20.04.1
5.15.0-125.135~20.04.1
5.15.0-126.136~20.04.1
5.15.0-127.137~20.04.1
5.15.0-130.140~20.04.1
5.15.0-131.141~20.04.1
5.15.0-134.145~20.04.1
5.15.0-136.147~20.04.1
5.15.0-138.148~20.04.1
5.15.0-139.149~20.04.1
5.15.0-142.152~20.04.1
5.15.0-143.153~20.04.1
5.15.0-144.157~20.04.1
5.15.0-145.158~20.04.1
5.15.0-151.161~20.04.1
5.15.0-152.162~20.04.1
5.15.0-153.163~20.04.1
5.15.0-156.166~20.04.1
5.15.0-157.167~20.04.1
5.15.0-160.170~20.04.1
5.15.0-161.171~20.04.1
5.15.0-163.173~20.04.1
5.15.0-164.174~20.04.1
5.15.0-168.178~20.04.1
5.15.0-170.180~20.04.3
5.15.0-171.181~20.04.1
5.15.0-173.183~20.04.1
5.15.0-176.186~20.04.1
5.15.0-177.187~20.04.1
5.15.0-179.189~20.04.1
5.15.0-181.191~20.04.1
5.15.0-185.195~20.04.1
5.15.0-186.196~20.04.1
5.15.0-190.200~20.04.1
5.15.0-191.201~20.04.1
5.15.0-194.204~20.04.1
5.15.0-198.208~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.15-cloud-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.15-headers-5.15.0-198",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-hwe-5.15-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-image-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-image-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-generic",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-generic-64k",
            "binary_version": "5.15.0-198.208~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-generic-lpae",
            "binary_version": "5.15.0-198.208~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-ibm-5.15

Package

Name
linux-ibm-5.15
Purl
pkg:deb/ubuntu/linux-ibm-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1033.36~20.04.1
5.15.0-1034.37~20.04.1
5.15.0-1035.38~20.04.1
5.15.0-1036.39~20.04.1
5.15.0-1037.40~20.04.1
5.15.0-1038.41~20.04.1
5.15.0-1040.43~20.04.1
5.15.0-1041.44~20.04.1
5.15.0-1042.45~20.04.1
5.15.0-1043.46~20.04.1
5.15.0-1044.47~20.04.1
5.15.0-1045.48~20.04.1
5.15.0-1046.49~20.04.1
5.15.0-1047.50~20.04.1
5.15.0-1048.51~20.04.1
5.15.0-1049.52~20.04.1
5.15.0-1050.53~20.04.1
5.15.0-1053.56~20.04.1
5.15.0-1054.57~20.04.1
5.15.0-1055.58~20.04.1
5.15.0-1057.60~20.04.1
5.15.0-1058.61~20.04.1
5.15.0-1059.62~20.04.1
5.15.0-1060.63~20.04.1
5.15.0-1061.64~20.04.1
5.15.0-1062.65~20.04.1
5.15.0-1063.66~20.04.1
5.15.0-1064.67~20.04.1
5.15.0-1065.68~20.04.1
5.15.0-1066.69~20.04.1
5.15.0-1067.70~20.04.1
5.15.0-1068.71~20.04.1
5.15.0-1069.72~20.04.1
5.15.0-1074.77~20.04.1
5.15.0-1075.78~20.04.1
5.15.0-1076.79~20.04.1
5.15.0-1078.81~20.04.1
5.15.0-1079.82~20.04.1
5.15.0-1080.83~20.04.1
5.15.0-1081.84~20.04.1
5.15.0-1083.86~20.04.1
5.15.0-1085.88~20.04.1
5.15.0-1086.89~20.04.1
5.15.0-1087.90~20.04.1
5.15.0-1089.92~20.04.1
5.15.0-1090.93~20.04.1
5.15.0-1091.94~20.04.1
5.15.0-1092.95~20.04.1
5.15.0-1093.96~20.04.1
5.15.0-1094.97~20.04.1
5.15.0-1095.98~20.04.1
5.15.0-1097.100~20.04.1
5.15.0-1098.101~20.04.1
5.15.0-1099.102~20.04.1
5.15.0-1100.103~20.04.1
5.15.0-1102.105~20.04.1
5.15.0-1103.106~20.04.1
5.15.0-1105.109~20.04.1
5.15.0-1106.110~20.04.1
5.15.0-1107.111~20.04.1
5.15.0-1108.112~20.04.1
5.15.0-1109.113~20.04.1
5.15.0-1110.114~20.04.1
5.15.0-1111.115~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-ibm-5.15-headers-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-ibm-5.15-source-5.15.0",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-ibm-5.15-tools-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1111-ibm",
            "binary_version": "5.15.0-1111.115~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-intel-iotg-5.15

Package

Name
linux-intel-iotg-5.15
Purl
pkg:deb/ubuntu/linux-intel-iotg-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1003.5~20.04.1
5.15.0-1008.11~20.04.1
5.15.0-1010.14~20.04.1
5.15.0-1015.20~20.04.2
5.15.0-1016.21~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1021.26~20.04.1
5.15.0-1023.28~20.04.1
5.15.0-1025.30~20.04.1
5.15.0-1026.31~20.04.1
5.15.0-1027.32~20.04.1
5.15.0-1030.35~20.04.1
5.15.0-1031.36~20.04.1
5.15.0-1033.38~20.04.1
5.15.0-1034.39~20.04.1
5.15.0-1036.41~20.04.1
5.15.0-1037.42~20.04.1
5.15.0-1038.43~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1043.49~20.04.1
5.15.0-1045.51~20.04.1
5.15.0-1046.52~20.04.1
5.15.0-1048.54~20.04.1
5.15.0-1049.55~20.04.1
5.15.0-1050.56~20.04.1
5.15.0-1051.57~20.04.1
5.15.0-1052.58~20.04.1
5.15.0-1055.61~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1059.65~20.04.1
5.15.0-1060.66~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1064.70~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.2
5.15.0-1074.80~20.04.1
5.15.0-1077.83~20.04.1
5.15.0-1078.84~20.04.1
5.15.0-1079.85~20.04.1
5.15.0-1083.89~20.04.1
5.15.0-1084.90~20.04.1
5.15.0-1085.91~20.04.1
5.15.0-1086.92~20.04.1
5.15.0-1087.93~20.04.1
5.15.0-1088.94~20.04.1
5.15.0-1090.96~20.04.1
5.15.0-1091.97~20.04.1
5.15.0-1092.98~20.04.1
5.15.0-1093.99~20.04.1
5.15.0-1094.100~20.04.1
5.15.0-1095.101~20.04.1
5.15.0-1096.102~20.04.1
5.15.0-1098.104~20.04.1
5.15.0-1099.105~20.04.1
5.15.0-1100.106~20.04.1
5.15.0-1101.107~20.04.1
5.15.0-1103.109~20.04.1
5.15.0-1104.110~20.04.1
5.15.0-1106.112~20.04.1
5.15.0-1107.113~20.04.1
5.15.0-1108.114~20.04.1
5.15.0-1109.115~20.04.1
5.15.0-1110.116~20.04.1
5.15.0-1111.117~20.04.1
5.15.0-1112.118~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-intel-iotg-5.15-cloud-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-intel-iotg-5.15-cloud-tools-common",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-intel-iotg-5.15-headers-5.15.0-1112",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-intel-iotg-5.15-tools-5.15.0-1112",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-intel-iotg-5.15-tools-common",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-intel-iotg-5.15-tools-host",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1112-intel-iotg",
            "binary_version": "5.15.0-1112.118~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-lowlatency-hwe-5.15

Package

Name
linux-lowlatency-hwe-5.15
Purl
pkg:deb/ubuntu/linux-lowlatency-hwe-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-33.34~20.04.1
5.15.0-42.45~20.04.1
5.15.0-43.46~20.04.1
5.15.0-46.49~20.04.1
5.15.0-48.54~20.04.1
5.15.0-50.56~20.04.1
5.15.0-52.58~20.04.1
5.15.0-53.59~20.04.1
5.15.0-56.62~20.04.1
5.15.0-58.64~20.04.1
5.15.0-60.66~20.04.1
5.15.0-67.74~20.04.1
5.15.0-69.76~20.04.1
5.15.0-70.77~20.04.1
5.15.0-71.78~20.04.1
5.15.0-72.79~20.04.1
5.15.0-73.80~20.04.1
5.15.0-75.82~20.04.1
5.15.0-76.83~20.04.1
5.15.0-78.85~20.04.1
5.15.0-79.88~20.04.1
5.15.0-82.91~20.04.1
5.15.0-83.92~20.04.1
5.15.0-84.93~20.04.1
5.15.0-86.95~20.04.1
5.15.0-87.96~20.04.1
5.15.0-88.98~20.04.1
5.15.0-89.99~20.04.1
5.15.0-91.101~20.04.1
5.15.0-92.102~20.04.1
5.15.0-94.104~20.04.1
5.15.0-97.107~20.04.1
5.15.0-100.110~20.04.1
5.15.0-101.111~20.04.1
5.15.0-102.112~20.04.1
5.15.0-105.115~20.04.1
5.15.0-106.116~20.04.1
5.15.0-107.117~20.04.1
5.15.0-110.120~20.04.1
5.15.0-113.123~20.04.1
5.15.0-116.126~20.04.1
5.15.0-117.127~20.04.1
5.15.0-118.128~20.04.1
5.15.0-119.129~20.04.1
5.15.0-121.131~20.04.1
5.15.0-122.132~20.04.1
5.15.0-124.134~20.04.1
5.15.0-125.135~20.04.1
5.15.0-126.136~20.04.1
5.15.0-127.137~20.04.1
5.15.0-128.138~20.04.1
5.15.0-129.139~20.04.1
5.15.0-131.141~20.04.1
5.15.0-133.143~20.04.1
5.15.0-134.145~20.04.1
5.15.0-135.146~20.04.1
5.15.0-136.147~20.04.1
5.15.0-138.148~20.04.1
5.15.0-139.149~20.04.1
5.15.0-140.150~20.04.1
5.15.0-142.152~20.04.1
5.15.0-143.153~20.04.1
5.15.0-144.157~20.04.1
5.15.0-145.158~20.04.1
5.15.0-152.162~20.04.1
5.15.0-153.163~20.04.1
5.15.0-156.166~20.04.1
5.15.0-157.167~20.04.1
5.15.0-160.170~20.04.1
5.15.0-161.171~20.04.1
5.15.0-163.173~20.04.1
5.15.0-164.174~20.04.1
5.15.0-168.178~20.04.1
5.15.0-170.180~20.04.1
5.15.0-171.181~20.04.1
5.15.0-173.183~20.04.1
5.15.0-174.184~20.04.1
5.15.0-175.185~20.04.1
5.15.0-177.187~20.04.1
5.15.0-178.188~20.04.1
5.15.0-179.189~20.04.1
5.15.0-181.191~20.04.1
5.15.0-183.193~20.04.1
5.15.0-184.194~20.04.1
5.15.0-190.200~20.04.1
5.15.0-191.201~20.04.1
5.15.0-194.204~20.04.1
5.15.0-195.205~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.15-cloud-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.15-headers-5.15.0-195",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-lowlatency-hwe-5.15-tools-5.15.0-195",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-195-lowlatency",
            "binary_version": "5.15.0-195.205~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-195-lowlatency-64k",
            "binary_version": "5.15.0-195.205~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-nvidia-tegra-5.15

Package

Name
linux-nvidia-tegra-5.15
Purl
pkg:deb/ubuntu/linux-nvidia-tegra-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1009.9~20.04.1
5.15.0-1010.10~20.04.1
5.15.0-1012.12~20.04.1
5.15.0-1014.14~20.04.1
5.15.0-1015.15~20.04.1
5.15.0-1016.16~20.04.1
5.15.0-1017.17~20.04.1
5.15.0-1018.18~20.04.1
5.15.0-1019.19~20.04.1
5.15.0-1020.20~20.04.1
5.15.0-1022.22~20.04.1
5.15.0-1025.25~20.04.1
5.15.0-1027.27~20.04.1
5.15.0-1030.30~20.04.1
5.15.0-1032.32~20.04.1
5.15.0-1039.39~20.04.1
5.15.0-1040.40~20.04.1
5.15.0-1041.41~20.04.1
5.15.0-1042.42~20.04.1
5.15.0-1043.43~20.04.1
5.15.0-1044.44~20.04.1
5.15.0-1045.45~20.04.1
5.15.0-1046.46~20.04.1
5.15.0-1047.47~20.04.1
5.15.0-1048.48~20.04.1
5.15.0-1049.49~20.04.1
5.15.0-1050.50~20.04.1
5.15.0-1051.51~20.04.1
5.15.0-1052.52~20.04.2
5.15.0-1053.53~20.04.1
5.15.0-1055.55~20.04.1
5.15.0-1057.57~20.04.1
5.15.0-1058.58~20.04.1
5.15.0-1060.60~20.04.1
5.15.0-1061.61~20.04.1
5.15.0-1063.63~20.04.1
5.15.0-1064.66~20.04.1
5.15.0-1065.67~20.04.1
5.15.0-1066.68~20.04.1
5.15.0-1067.69~20.04.1
5.15.0-1068.70~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-nvidia-tegra-5.15-headers-5.15.0-1068",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-nvidia-tegra-5.15-tools-5.15.0-1068",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra",
            "binary_version": "5.15.0-1068.70~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1068-nvidia-tegra-rt",
            "binary_version": "5.15.0-1068.70~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-oracle-5.15

Package

Name
linux-oracle-5.15
Purl
pkg:deb/ubuntu/linux-oracle-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1007.9~20.04.1
5.15.0-1013.17~20.04.1
5.15.0-1016.20~20.04.1
5.15.0-1017.22~20.04.1
5.15.0-1018.23~20.04.1
5.15.0-1019.24~20.04.1
5.15.0-1021.27~20.04.1
5.15.0-1022.28~20.04.1
5.15.0-1025.31~20.04.2
5.15.0-1027.33~20.04.1
5.15.0-1029.35~20.04.1
5.15.0-1030.36~20.04.1
5.15.0-1032.38~20.04.1
5.15.0-1033.39~20.04.1
5.15.0-1034.40~20.04.1
5.15.0-1035.41~20.04.1
5.15.0-1036.42~20.04.1
5.15.0-1037.43~20.04.1
5.15.0-1038.44~20.04.1
5.15.0-1039.45~20.04.1
5.15.0-1040.46~20.04.1
5.15.0-1041.47~20.04.1
5.15.0-1042.48~20.04.1
5.15.0-1044.50~20.04.1
5.15.0-1045.51~20.04.1
5.15.0-1046.52~20.04.1
5.15.0-1047.53~20.04.1
5.15.0-1048.54~20.04.1
5.15.0-1049.55~20.04.1
5.15.0-1050.56~20.04.1
5.15.0-1051.57~20.04.1
5.15.0-1052.58~20.04.1
5.15.0-1053.59~20.04.1
5.15.0-1054.60~20.04.1
5.15.0-1055.61~20.04.1
5.15.0-1058.64~20.04.1
5.15.0-1059.65~20.04.1
5.15.0-1061.67~20.04.1
5.15.0-1062.68~20.04.1
5.15.0-1063.69~20.04.1
5.15.0-1065.71~20.04.1
5.15.0-1066.72~20.04.1
5.15.0-1067.73~20.04.1
5.15.0-1068.74~20.04.1
5.15.0-1069.75~20.04.1
5.15.0-1070.76~20.04.1
5.15.0-1071.77~20.04.1
5.15.0-1072.78~20.04.1
5.15.0-1073.79~20.04.1
5.15.0-1074.80~20.04.1
5.15.0-1075.81~20.04.1
5.15.0-1076.82~20.04.1
5.15.0-1077.83~20.04.1
5.15.0-1078.84~20.04.1
5.15.0-1079.85~20.04.1
5.15.0-1080.86~20.04.1
5.15.0-1081.87~20.04.1
5.15.0-1083.89~20.04.1
5.15.0-1084.90~20.04.1
5.15.0-1085.91~20.04.3
5.15.0-1086.92~20.04.1
5.15.0-1088.94~20.04.1
5.15.0-1090.96~20.04.1
5.15.0-1091.97~20.04.1
5.15.0-1092.98~20.04.1
5.15.0-1093.99~20.04.1
5.15.0-1094.100~20.04.1
5.15.0-1095.101~20.04.1
5.15.0-1096.102~20.04.1
5.15.0-1097.103~20.04.1
5.15.0-1098.104~20.04.1
5.15.0-1100.106~20.04.1
5.15.0-1101.107~20.04.1
5.15.0-1102.108~20.04.1
5.15.0-1104.110~20.04.1
5.15.0-1106.112~20.04.1
5.15.0-1108.114~20.04.1
5.15.0-1109.115~20.04.1
5.15.0-1110.116~20.04.1
5.15.0-1111.117~20.04.1
5.15.0-1114.120~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.15-headers-5.15.0-1114",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-oracle-5.15-tools-5.15.0-1114",
            "binary_version": "5.15.0-1114.120~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1114-oracle",
            "binary_version": "5.15.0-1114.120~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-riscv-5.15

Package

Name
linux-riscv-5.15
Purl
pkg:deb/ubuntu/linux-riscv-5.15?arch=source&distro=esm-infra%2Ffocal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1015.17~20.04.1
5.15.0-1017.19~20.04.1
5.15.0-1018.21~20.04.1
5.15.0-1019.22~20.04.1
5.15.0-1022.26~20.04.1
5.15.0-1023.27~20.04.1
5.15.0-1026.30~20.04.2
5.15.0-1027.31~20.04.1
5.15.0-1028.32~20.04.1
5.15.0-1029.33~20.04.1
5.15.0-1030.34~20.04.1
5.15.0-1031.35~20.04.1
5.15.0-1032.36~20.04.1
5.15.0-1033.37~20.04.1
5.15.0-1034.38~20.04.1
5.15.0-1035.39~20.04.1
5.15.0-1036.40~20.04.2
5.15.0-1037.41~20.04.2
5.15.0-1038.42~20.04.2
5.15.0-1039.43~20.04.2
5.15.0-1040.44~20.04.3
5.15.0-1041.45~20.04.1
5.15.0-1043.47~20.04.1
5.15.0-1044.48~20.04.1
5.15.0-1045.49~20.04.1
5.15.0-1046.50~20.04.1
5.15.0-1047.51~20.04.1
5.15.0-1048.52~20.04.1
5.15.0-1049.53~20.04.2
5.15.0-1050.54~20.04.1
5.15.0-1051.55~20.04.1
5.15.0-1052.56~20.04.1
5.15.0-1053.57~20.04.1
5.15.0-1056.60~20.04.1
5.15.0-1057.61~20.04.1
5.15.0-1058.62~20.04.1
5.15.0-1059.63~20.04.1
5.15.0-1060.64~20.04.1
5.15.0-1061.65~20.04.1
5.15.0-1062.66~20.04.1
5.15.0-1063.67~20.04.1
5.15.0-1064.68~20.04.1
5.15.0-1065.69~20.04.1
5.15.0-1066.70~20.04.1
5.15.0-1067.71~20.04.1
5.15.0-1068.72~20.04.1
5.15.0-1069.73~20.04.1
5.15.0-1070.74~20.04.1
5.15.0-1071.75~20.04.1
5.15.0-1072.76~20.04.1
5.15.0-1073.77~20.04.1
5.15.0-1074.78~20.04.1
5.15.0-1075.79~20.04.1
5.15.0-1076.80~20.04.1
5.15.0-1077.81~20.04.1
5.15.0-1078.82~20.04.1
5.15.0-1079.83~20.04.1
5.15.0-1081.85~20.04.1
5.15.0-1082.86~20.04.1
5.15.0-1083.87~20.04.1
5.15.0-1084.88~20.04.1
5.15.0-1085.89~20.04.1
5.15.0-1086.90~20.04.1
5.15.0-1087.91~20.04.1
5.15.0-1088.92~20.04.1
5.15.0-1090.94~20.04.1
5.15.0-1091.95~20.04.1
5.15.0-1092.96~20.04.1
5.15.0-1093.97~20.04.2
5.15.0-1094.98~20.04.1
5.15.0-1095.99~20.04.1
5.15.0-1096.100~20.04.1
5.15.0-1097.101~20.04.1
5.15.0-1098.102~20.04.1
5.15.0-1099.103~20.04.1
5.15.0-1100.104~20.04.1
5.15.0-1102.106~20.04.1
5.15.0-1103.107~20.04.1
5.15.0-1105.109~20.04.1
5.15.0-1106.110~20.04.1
5.15.0-1107.111~20.04.1
5.15.0-1108.112~20.04.1
5.15.0-1109.113~20.04.1
5.15.0-1110.114~20.04.1
5.15.0-1111.115~20.04.1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-image-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-riscv-5.15-headers-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-riscv-5.15-tools-5.15.0-1111",
            "binary_version": "5.15.0-1111.115~20.04.1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1111-generic",
            "binary_version": "5.15.0-1111.115~20.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Pro:FIPS-preview:22.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1042.47+fips1
5.15.0-1051.56+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-fips-cloud-tools-5.15.0-1051",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-aws-fips-headers-5.15.0-1051",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-aws-fips-tools-5.15.0-1051",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1051-aws-fips",
            "binary_version": "5.15.0-1051.56+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1053.61+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-fips-cloud-tools-5.15.0-1053",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-azure-fips-headers-5.15.0-1053",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-azure-fips-tools-5.15.0-1053",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1053-azure-fips",
            "binary_version": "5.15.0-1053.61+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-73.80+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-fips-headers-5.15.0-73",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-fips-tools-5.15.0-73",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-fips-tools-host",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-73-fips",
            "binary_version": "5.15.0-73.80+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-preview%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1048.56+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-headers-5.15.0-1048",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-tools-5.15.0-1048",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1048-gcp-fips",
            "binary_version": "5.15.0-1048.56+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Pro:FIPS-updates:22.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1051.56+fips1
5.15.0-1052.57+fips1
5.15.0-1053.58+fips1
5.15.0-1055.60+fips1
5.15.0-1056.61+fips1
5.15.0-1057.63+fips1
5.15.0-1060.66+fips1
5.15.0-1061.67+fips1
5.15.0-1062.68+fips1
5.15.0-1063.69+fips1
5.15.0-1064.70+fips1
5.15.0-1065.71+fips1
5.15.0-1066.72+fips1
5.15.0-1067.73+fips1
5.15.0-1068.74+fips1
5.15.0-1069.75+fips1
5.15.0-1070.76+fips1
5.15.0-1071.77+fips1
5.15.0-1072.78+fips1
5.15.0-1073.79+fips1
5.15.0-1076.83+fips1
5.15.0-1077.84+fips1
5.15.0-1078.85+fips1
5.15.0-1079.86+fips1
5.15.0-1080.87+fips1
5.15.0-1081.88+fips1
5.15.0-1082.89+fips1
5.15.0-1083.90+fips1
5.15.0-1084.91+fips1
5.15.0-1085.92+fips1
5.15.0-1086.93+fips1
5.15.0-1087.94+fips1
5.15.0-1088.95+fips1
5.15.0-1089.96+fips1
5.15.0-1090.97+fips1
5.15.0-1091.98+fips1
5.15.0-1092.99+fips1
5.15.0-1093.100+fips1
5.15.0-1095.102+fips1
5.15.0-1096.103+fips1
5.15.0-1097.104+fips1
5.15.0-1098.105+fips1
5.15.0-1099.106+fips1
5.15.0-1100.107+fips1
5.15.0-1101.108+fips1
5.15.0-1103.110+fips1
5.15.0-1104.111+fips1
5.15.0-1105.112+fips1
5.15.0-1106.113+fips1
5.15.0-1108.115+fips1
5.15.0-1109.116+fips1
5.15.0-1111.118+fips1
5.15.0-1112.119+fips1
5.15.0-1113.120+fips1
5.15.0-1114.121+fips1
5.15.0-1115.122+fips1
5.15.0-1116.123+fips1
5.15.0-1117.124+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-aws-fips-cloud-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-aws-fips-headers-5.15.0-1117",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-aws-fips-tools-5.15.0-1117",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1117-aws-fips",
            "binary_version": "5.15.0-1117.124+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1053.61+fips1
5.15.0-1058.66+fips1
5.15.0-1059.67+fips1
5.15.0-1060.69+fips1
5.15.0-1061.70+fips1
5.15.0-1063.72+fips1
5.15.0-1064.73+fips1
5.15.0-1065.74+fips1
5.15.0-1067.76+fips1
5.15.0-1068.77+fips1
5.15.0-1070.79+fips1
5.15.0-1071.80+fips1
5.15.0-1072.81+fips1
5.15.0-1073.82+fips1
5.15.0-1074.83+fips1
5.15.0-1075.84+fips1
5.15.0-1078.87+fips1
5.15.0-1079.88+fips1
5.15.0-1080.89+fips1
5.15.0-1082.91+fips1
5.15.0-1083.92+fips1
5.15.0-1085.94+fips1
5.15.0-1087.96+fips1
5.15.0-1088.97+fips1
5.15.0-1089.98+fips1
5.15.0-1090.99+fips1
5.15.0-1091.100+fips1
5.15.0-1094.103+fips1
5.15.0-1095.104+fips1
5.15.0-1096.105+fips1
5.15.0-1097.106+fips1
5.15.0-1098.107+fips1
5.15.0-1101.110+fips1
5.15.0-1102.111+fips1
5.15.0-1103.112+fips1
5.15.0-1109.118+fips1
5.15.0-1110.119+fips1
5.15.0-1111.120+fips1
5.15.0-1114.123+fips1
5.15.0-1116.125+fips1
5.15.0-1117.126+fips1
5.15.0-1118.127+fips1
5.15.0-1119.128+fips1
5.15.0-1121.130+fips1
5.15.0-1122.131+fips1
5.15.0-1123.132+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-azure-fips-cloud-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-azure-fips-headers-5.15.0-1123",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-azure-fips-tools-5.15.0-1123",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-buildinfo-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-modules-involflt-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1123-azure-fips",
            "binary_version": "5.15.0-1123.132+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-73.80+fips1
5.15.0-92.102+fips1
5.15.0-94.104+fips1
5.15.0-97.107+fips1
5.15.0-100.110+fips1
5.15.0-101.111+fips1
5.15.0-102.112+fips1
5.15.0-105.115+fips1
5.15.0-106.116+fips1
5.15.0-107.117+fips1
5.15.0-111.121+fips1
5.15.0-113.123+fips1
5.15.0-115.125+fips1
5.15.0-117.127+fips1
5.15.0-118.128+fips1
5.15.0-119.129+fips1
5.15.0-121.131+fips1
5.15.0-122.132+fips1
5.15.0-124.134+fips1
5.15.0-125.135+fips1
5.15.0-127.137+fips1
5.15.0-128.138+fips1
5.15.0-130.140+fips1
5.15.0-131.141+fips1
5.15.0-133.144+fips1
5.15.0-134.145+fips1
5.15.0-135.146+fips1
5.15.0-136.147+fips1
5.15.0-138.148+fips1
5.15.0-139.149+fips1
5.15.0-140.150+fips1
5.15.0-141.151+fips1
5.15.0-142.152+fips1
5.15.0-143.153+fips1
5.15.0-144.157+fips1
5.15.0-145.158+fips1
5.15.0-152.162+fips1
5.15.0-153.163+fips1
5.15.0-156.166+fips1
5.15.0-157.167+fips1
5.15.0-160.170+fips1
5.15.0-161.171+fips1
5.15.0-163.173+fips1
5.15.0-164.174+fips1
5.15.0-168.178+fips1
5.15.0-170.180+fips1
5.15.0-171.181+fips1
5.15.0-173.183+fips1
5.15.0-174.184+fips1
5.15.0-176.186+fips1
5.15.0-177.187+fips1
5.15.0-179.189+fips1
5.15.0-181.191+fips1
5.15.0-185.195+fips1
5.15.0-186.196+fips1
5.15.0-190.200+fips1
5.15.0-191.201+fips1
5.15.0-194.204+fips1
5.15.0-198.208+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-fips-cloud-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-fips-headers-5.15.0-198",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-fips-tools-5.15.0-198",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-198-fips",
            "binary_version": "5.15.0-198.208+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1048.56+fips1
5.15.0-1055.63+fips2
5.15.0-1058.66+fips1
5.15.0-1059.67+fips1
5.15.0-1060.68+fips1
5.15.0-1062.70+fips1
5.15.0-1063.71+fips1
5.15.0-1064.72+fips1
5.15.0-1065.73+fips1
5.15.0-1066.74+fips1
5.15.0-1067.75+fips1
5.15.0-1068.76+fips1
5.15.0-1069.77+fips1
5.15.0-1070.78+fips1
5.15.0-1071.79+fips1
5.15.0-1072.80+fips1
5.15.0-1073.81+fips1
5.15.0-1074.83+fips1
5.15.0-1075.84+fips1
5.15.0-1077.86+fips1
5.15.0-1078.87+fips1
5.15.0-1079.88+fips1
5.15.0-1080.89+fips1
5.15.0-1081.90+fips1
5.15.0-1082.91+fips1
5.15.0-1083.92+fips1
5.15.0-1084.93+fips1
5.15.0-1085.94+fips1
5.15.0-1086.95+fips1
5.15.0-1087.96+fips1
5.15.0-1088.97+fips1
5.15.0-1090.99+fips1
5.15.0-1091.100+fips1
5.15.0-1092.101+fips1
5.15.0-1093.102+fips1
5.15.0-1095.104+fips1
5.15.0-1096.105+fips1
5.15.0-1097.106+fips1
5.15.0-1098.107+fips1
5.15.0-1099.108+fips1
5.15.0-1100.109+fips1
5.15.0-1101.110+fips1
5.15.0-1103.112+fips1
5.15.0-1104.113+fips1
5.15.0-1105.114+fips1
5.15.0-1106.115+fips1
5.15.0-1108.117+fips1
5.15.0-1109.118+fips1
5.15.0-1111.121+fips1
5.15.0-1112.122+fips1
5.15.0-1114.124+fips1
5.15.0-1115.125+fips1
5.15.0-1116.126+fips1
5.15.0-1118.128+fips1

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-headers-5.15.0-1118",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-tools-5.15.0-1118",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-headers-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-modules-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        },
        {
            "binary_name": "linux-tools-5.15.0-1118-gcp-fips",
            "binary_version": "5.15.0-1118.128+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Pro:FIPS-updates:24.04:LTS
linux-aws-fips

Package

Name
linux-aws-fips
Purl
pkg:deb/ubuntu/linux-aws-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.49+fips1

Affected versions

6.*
6.8.0-1035.37+fips1
6.8.0-1036.38+fips1
6.8.0-1038.40+fips1
6.8.0-1039.41+fips1
6.8.0-1040.42+fips1
6.8.0-1041.43+fips1
6.8.0-1042.44+fips1
6.8.0-1043.45+fips1
6.8.0-1044.46+fips1
6.8.0-1045.47+fips1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-aws-fips-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-aws-fips-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-aws-fips-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-aws-fips",
            "binary_version": "6.8.0-1046.49+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-azure-fips

Package

Name
linux-azure-fips
Purl
pkg:deb/ubuntu/linux-azure-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1046.52+fips1

Affected versions

6.*
6.8.0-1034.39+fips1
6.8.0-1040.46+fips1
6.8.0-1044.50+fips1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-azure-fips-cloud-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-azure-fips-headers-6.8.0-1046",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-azure-fips-tools-6.8.0-1046",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-buildinfo-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-involflt-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1046-azure-fips",
            "binary_version": "6.8.0-1046.52+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-fips

Package

Name
linux-fips
Purl
pkg:deb/ubuntu/linux-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-100.100+fips1

Affected versions

6.*
6.8.0-38.38+fips4
6.8.0-78.78+fips1
6.8.0-79.79+fips1
6.8.0-83.83+fips1
6.8.0-84.84+fips1
6.8.0-85.85+fips1
6.8.0-86.87+fips1
6.8.0-87.88+fips1
6.8.0-88.89+fips1
6.8.0-90.91+fips1
6.8.0-94.96+fips1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-cloud-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-headers-6.8.0-100",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-lib-rust-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-fips-tools-6.8.0-100",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-hmac-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-ipu6-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-modules-usbio-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-100-fips",
            "binary_version": "6.8.0-100.100+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-gcp-fips

Package

Name
linux-gcp-fips
Purl
pkg:deb/ubuntu/linux-gcp-fips?arch=source&distro=fips-updates%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-1047.50+fips1

Affected versions

6.*
6.8.0-1036.38+fips1
6.8.0-1037.39+fips1
6.8.0-1039.41+fips1
6.8.0-1040.42+fips1
6.8.0-1041.43+fips1
6.8.0-1042.45+fips1
6.8.0-1043.46+fips1
6.8.0-1044.47+fips1
6.8.0-1045.48+fips1
6.8.0-1046.49+fips1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-headers-6.8.0-1047",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-gcp-fips-tools-6.8.0-1047",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-headers-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-image-unsigned-hmac-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-modules-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        },
        {
            "binary_name": "linux-tools-6.8.0-1047-gcp-fips",
            "binary_version": "6.8.0-1047.50+fips1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Pro:Realtime:22.04:LTS
linux-intel-iot-realtime

Package

Name
linux-intel-iot-realtime
Purl
pkg:deb/ubuntu/linux-intel-iot-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1021.26
5.15.0-1022.27
5.15.0-1023.28
5.15.0-1024.29
5.15.0-1028.33
5.15.0-1033.35
5.15.0-1034.36
5.15.0-1035.37
5.15.0-1036.38
5.15.0-1037.39
5.15.0-1038.40
5.15.0-1039.41
5.15.0-1040.42
5.15.0-1041.43
5.15.0-1042.44
5.15.0-1043.45
5.15.0-1044.46
5.15.0-1046.48
5.15.0-1047.49
5.15.0-1048.50
5.15.0-1049.51
5.15.0-1050.52
5.15.0-1053.55
5.15.0-1054.56
5.15.0-1055.57
5.15.0-1056.58
5.15.0-1057.59
5.15.0-1058.60
5.15.0-1059.61
5.15.0-1060.62
5.15.0-1061.63
5.15.0-1063.65
5.15.0-1064.66
5.15.0-1066.68
5.15.0-1071.73
5.15.0-1072.74
5.15.0-1073.75
5.15.0-1074.76
5.15.0-1075.77
5.15.0-1076.78
5.15.0-1077.79
5.15.0-1078.80
5.15.0-1079.81
5.15.0-1080.82
5.15.0-1081.83
5.15.0-1082.84
5.15.0-1083.85
5.15.0-1084.86
5.15.0-1085.87
5.15.0-1086.88
5.15.0-1087.89
5.15.0-1088.90
5.15.0-1089.91
5.15.0-1090.92
5.15.0-1091.93
5.15.0-1092.94
5.15.0-1093.95
5.15.0-1094.96
5.15.0-1096.98
5.15.0-1097.99
5.15.0-1098.100
5.15.0-1099.101
5.15.0-1100.102
5.15.0-1101.103
5.15.0-1103.105
5.15.0-1104.106
5.15.0-1105.107
5.15.0-1106.108
5.15.0-1107.109
5.15.0-1108.110
5.15.0-1109.111

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-headers-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-5.15.0-1109",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-intel-iot-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-intel-iot-realtime-headers-5.15.0-1109",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-5.15.0-1109",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-common",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-intel-iot-realtime-tools-host",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-modules-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        },
        {
            "binary_name": "linux-tools-5.15.0-1109-intel-iot-realtime",
            "binary_version": "5.15.0-1109.111"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected

Affected versions

5.*
5.15.0-1006.6
5.15.0-1007.7
5.15.0-1009.9
5.15.0-1011.11
5.15.0-1014.14
5.15.0-1015.15
5.15.0-1016.16
5.15.0-1019.19
5.15.0-1020.20
5.15.0-1021.21
5.15.0-1022.22
5.15.0-1024.25
5.15.0-1025.28
5.15.0-1028.31
5.15.0-1029.32
5.15.0-1030.33
5.15.0-1032.35
5.15.0-1033.36
5.15.0-1034.37
5.15.0-1036.39
5.15.0-1037.40
5.15.0-1038.41
5.15.0-1039.42
5.15.0-1040.45
5.15.0-1041.46
5.15.0-1042.47
5.15.0-1043.48
5.15.0-1044.49
5.15.0-1045.50
5.15.0-1046.52
5.15.0-1048.54
5.15.0-1049.55
5.15.0-1050.56
5.15.0-1051.57
5.15.0-1052.58
5.15.0-1053.59
5.15.0-1054.60
5.15.0-1055.62
5.15.0-1056.63
5.15.0-1057.64
5.15.0-1058.66
5.15.0-1061.69
5.15.0-1062.70
5.15.0-1063.71
5.15.0-1064.72
5.15.0-1065.73
5.15.0-1066.74
5.15.0-1067.75
5.15.0-1068.76
5.15.0-1069.77
5.15.0-1070.78
5.15.0-1071.79
5.15.0-1072.80
5.15.0-1073.81
5.15.0-1074.82
5.15.0-1075.83
5.15.0-1076.84
5.15.0-1077.85
5.15.0-1078.86
5.15.0-1079.87
5.15.0-1080.88
5.15.0-1081.89
5.15.0-1082.91
5.15.0-1083.92
5.15.0-1084.93
5.15.0-1085.94
5.15.0-1086.95
5.15.0-1087.96
5.15.0-1088.97
5.15.0-1089.98
5.15.0-1090.99
5.15.0-1091.100
5.15.0-1092.101
5.15.0-1093.102
5.15.0-1094.103
5.15.0-1095.104
5.15.0-1096.105
5.15.0-1097.106
5.15.0-1098.107
5.15.0-1099.108
5.15.0-1100.109
5.15.0-1102.111
5.15.0-1103.112
5.15.0-1104.113
5.15.0-1105.114
5.15.0-1107.116
5.15.0-1108.117
5.15.0-1110.119
5.15.0-1111.120
5.15.0-1112.121
5.15.0-1113.122
5.15.0-1114.123
5.15.0-1115.124
5.15.0-1116.125

Ecosystem specific 

{
    "binaries": [
        {
            "binary_name": "linux-buildinfo-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-cloud-tools-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-headers-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-image-unsigned-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-modules-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-modules-extra-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-modules-iwlwifi-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-5.15.0-1116",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-common",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-realtime-headers-5.15.0-1116",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-realtime-tools-5.15.0-1116",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-realtime-tools-common",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-realtime-tools-host",
            "binary_version": "5.15.0-1116.125"
        },
        {
            "binary_name": "linux-tools-5.15.0-1116-realtime",
            "binary_version": "5.15.0-1116.125"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-realtime-6.8

Package

Name
linux-realtime-6.8
Purl
pkg:deb/ubuntu/linux-realtime-6.8?arch=source&distro=realtime%2Fjammy

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.1-1041.42~22.04.1

Affected versions

6.*
6.8.1-1004.4~22.04.1
6.8.1-1005.5~22.04.2
6.8.1-1006.6~22.04.1
6.8.1-1007.7~22.04.1
6.8.1-1008.8~22.04.1
6.8.1-1009.9~22.04.1
6.8.1-1010.10~22.04.1
6.8.1-1011.11~22.04.1
6.8.1-1012.12~22.04.1
6.8.1-1013.14~22.04.1
6.8.1-1014.15~22.04.1
6.8.1-1015.16~22.04.1
6.8.1-1016.17~22.04.1
6.8.1-1017.18~22.04.1
6.8.1-1018.19~22.04.1
6.8.1-1019.20~22.04.1
6.8.1-1020.21~22.04.1
6.8.1-1021.22~22.04.1
6.8.1-1022.23~22.04.1
6.8.1-1023.24~22.04.1
6.8.1-1024.25~22.04.1
6.8.1-1025.26~22.04.1
6.8.1-1026.27~22.04.1
6.8.1-1030.31~22.04.1
6.8.1-1031.32~22.04.1
6.8.1-1034.35~22.04.1
6.8.1-1035.36~22.04.1
6.8.1-1036.37~22.04.1
6.8.1-1037.38~22.04.1
6.8.1-1038.39~22.04.1
6.8.1-1039.40~22.04.1
6.8.1-1040.41~22.04.1

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-headers-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-modules-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-realtime-6.8-cloud-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-realtime-6.8-headers-6.8.1-1041",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-realtime-6.8-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42~22.04.1"
        },
        {
            "binary_name": "linux-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42~22.04.1"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
Ubuntu:Pro:Realtime:24.04:LTS
linux-raspi-realtime

Package

Name
linux-raspi-realtime
Purl
pkg:deb/ubuntu/linux-raspi-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.0-2037.38

Affected versions

6.*
6.7.0-2001.1
6.8.0-2001.1
6.8.0-2002.2
6.8.0-2004.4
6.8.0-2005.5
6.8.0-2006.6
6.8.0-2007.7
6.8.0-2008.8
6.8.0-2009.9
6.8.0-2010.10
6.8.0-2011.11
6.8.0-2012.12
6.8.0-2013.14
6.8.0-2014.15
6.8.0-2015.16
6.8.0-2016.17
6.8.0-2017.18
6.8.0-2018.19
6.8.0-2019.20
6.8.0-2022.23
6.8.0-2023.24
6.8.0-2024.25
6.8.0-2025.26
6.8.0-2026.27
6.8.0-2028.29
6.8.0-2029.30
6.8.0-2030.31
6.8.0-2031.32
6.8.0-2032.33
6.8.0-2033.34
6.8.0-2034.35
6.8.0-2035.36
6.8.0-2036.37

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-headers-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-image-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-modules-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-raspi-realtime-headers-6.8.0-2037",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-raspi-realtime-tools-6.8.0-2037",
            "binary_version": "6.8.0-2037.38"
        },
        {
            "binary_name": "linux-tools-6.8.0-2037-raspi-realtime",
            "binary_version": "6.8.0-2037.38"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"
linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime?arch=source&distro=realtime%2Fnoble

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.8.1-1041.42

Affected versions

6.*
6.8.0-1008.19
6.8.1-1001.1
6.8.1-1002.2
6.8.1-1003.3
6.8.1-1004.4
6.8.1-1005.5
6.8.1-1006.6
6.8.1-1007.7
6.8.1-1008.8
6.8.1-1009.9
6.8.1-1010.10
6.8.1-1011.11
6.8.1-1012.12
6.8.1-1013.14
6.8.1-1014.15
6.8.1-1015.16
6.8.1-1016.17
6.8.1-1017.18
6.8.1-1018.19
6.8.1-1019.20
6.8.1-1020.21
6.8.1-1021.22
6.8.1-1022.23
6.8.1-1023.24
6.8.1-1024.25
6.8.1-1025.26
6.8.1-1026.27
6.8.1-1030.31
6.8.1-1031.32
6.8.1-1033.34
6.8.1-1034.35
6.8.1-1035.36
6.8.1-1036.37
6.8.1-1037.38
6.8.1-1038.39
6.8.1-1039.40
6.8.1-1040.41

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro: https://ubuntu.com/pro",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-cloud-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-headers-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-image-unsigned-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-modules-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-modules-extra-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-realtime-headers-6.8.1-1041",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-realtime-tools-6.8.1-1041",
            "binary_version": "6.8.1-1041.42"
        },
        {
            "binary_name": "linux-tools-6.8.1-1041-realtime",
            "binary_version": "6.8.1-1041.42"
        }
    ],
    "priority_reason": "The vulnerability depends on a real hardware uncorrectable memory error (MCE) occurring during a copy_from_user() operation, which is a prerequisite event the attacker can neither invoke nor influence. The only software trigger (MADV_HWPOISON) requires CAP_SYS_ADMIN and uses a different code path (memory_failure()) that does not reach the vulnerable MCE handler."
}

Database specific

source 
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2025/UBUNTU-CVE-2025-39989.json"