USN-7906-1

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/notices/USN-7906-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7906-1.json
JSON Data
https://api.test.osv.dev/v1/vulns/USN-7906-1
Upstream
Related
Published
2025-12-03T11:34:56.052810Z
Modified
2025-12-04T10:18:12.949896Z
Summary
linux, linux-aws, linux-realtime vulnerabilities
Details

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - Android drivers; - TTY drivers; - F2FS file system; - 9P file system network protocol; (CVE-2025-40025, CVE-2025-40026, CVE-2025-40027, CVE-2025-40028, CVE-2025-40108, CVE-2025-40109)

References

Affected packages

Ubuntu:25.10 / linux

Package

Name
linux
Purl
pkg:deb/ubuntu/linux@6.17.0-7.7?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-7.7

Affected versions

6.*

6.14.0-15.15
6.15.0-3.3
6.15.0-4.4
6.16.0-13.13
6.16.0-16.16
6.17.0-3.3
6.17.0-4.4
6.17.0-5.5
6.17.0-6.6

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "bpftool",
            "binary_version": "7.7.0+6.17.0-7.7"
        },
        {
            "binary_name": "linux-bpf-dev",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-7-generic-64k",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-7",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-cloud-tools-common",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-headers-6.17.0-7",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-headers-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-headers-6.17.0-7-generic-64k",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-image-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-7-generic-64k",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-lib-rust-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-libc-dev",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-6.17.0-7-generic-64k",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-ipu6-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-ipu7-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-usbio-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-modules-vision-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-perf",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-source-6.17.0",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-tools-6.17.0-7",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-tools-6.17.0-7-generic",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-tools-6.17.0-7-generic-64k",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-tools-common",
            "binary_version": "6.17.0-7.7"
        },
        {
            "binary_name": "linux-tools-host",
            "binary_version": "6.17.0-7.7"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40025"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40026"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40027"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40028"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40108"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40109"
        }
    ]
}

Ubuntu:25.10 / linux-aws

Package

Name
linux-aws
Purl
pkg:deb/ubuntu/linux-aws@6.17.0-1004.4?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1004.4

Affected versions

6.*

6.14.0-1005.5
6.14.0-1007.7+25.10.2
6.16.0-1001.1
6.17.0-1001.1
6.17.0-1002.2
6.17.0-1003.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-aws-cloud-tools-6.17.0-1004",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-aws-headers-6.17.0-1004",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-aws-tools-6.17.0-1004",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1004-aws",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-buildinfo-6.17.0-1004-aws-64k",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1004-aws",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1004-aws-64k",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-headers-6.17.0-1004-aws",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-headers-6.17.0-1004-aws-64k",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1004-aws",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1004-aws-64k",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-modules-6.17.0-1004-aws",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-modules-6.17.0-1004-aws-64k",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-tools-6.17.0-1004-aws",
            "binary_version": "6.17.0-1004.4"
        },
        {
            "binary_name": "linux-tools-6.17.0-1004-aws-64k",
            "binary_version": "6.17.0-1004.4"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40025"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40026"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40027"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40028"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40108"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40109"
        }
    ]
}

Ubuntu:25.10 / linux-realtime

Package

Name
linux-realtime
Purl
pkg:deb/ubuntu/linux-realtime@6.17.0-1003.4?arch=source&distro=questing

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
6.17.0-1003.4

Affected versions

6.*

6.14.0-1002.2
6.17.0-1001.2
6.17.0-1002.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "binary_name": "linux-buildinfo-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-cloud-tools-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-headers-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-image-unsigned-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-modules-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-modules-iwlwifi-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-realtime-cloud-tools-6.17.0-1003",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-realtime-headers-6.17.0-1003",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-realtime-tools-6.17.0-1003",
            "binary_version": "6.17.0-1003.4"
        },
        {
            "binary_name": "linux-tools-6.17.0-1003-realtime",
            "binary_version": "6.17.0-1003.4"
        }
    ]
}

Database specific

cves_map

{
    "ecosystem": "Ubuntu:25.10",
    "cves": [
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40025"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40026"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40027"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40028"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40108"
        },
        {
            "severity": [
                {
                    "score": "medium",
                    "type": "Ubuntu"
                }
            ],
            "id": "CVE-2025-40109"
        }
    ]
}