USN-7906-1
- Source
- https://ubuntu.com/security/notices/USN-7906-1
- Import Source
- https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7906-1.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/USN-7906-1
- Upstream
- Related
- Published
- 2025-12-03T11:34:56.052810Z
- Modified
- 2025-12-04T10:18:12.949896Z
- Summary
- linux, linux-aws, linux-realtime vulnerabilities
- Details
-
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - x86 architecture; - Cryptographic API; - Android drivers; - TTY drivers; - F2FS file system; - 9P file system network protocol; (CVE-2025-40025, CVE-2025-40026, CVE-2025-40027, CVE-2025-40028, CVE-2025-40108, CVE-2025-40109)
- References
-
- https://ubuntu.com/security/notices/USN-7906-1
- https://ubuntu.com/security/CVE-2025-40025
- https://ubuntu.com/security/CVE-2025-40026
- https://ubuntu.com/security/CVE-2025-40027
- https://ubuntu.com/security/CVE-2025-40028
- https://ubuntu.com/security/CVE-2025-40108
- https://ubuntu.com/security/CVE-2025-40109
Affected packages
Ubuntu:25.10 / linux
Package
- Name
- linux
- Purl
- pkg:deb/ubuntu/linux@6.17.0-7.7?arch=source&distro=questing
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.17.0-7.7
Affected versions
6.*
6.14.0-15.15
6.15.0-3.3
6.15.0-4.4
6.16.0-13.13
6.16.0-16.16
6.17.0-3.3
6.17.0-4.4
6.17.0-5.5
6.17.0-6.6
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "7.7.0+6.17.0-7.7",
"binary_name": "bpftool"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-bpf-dev"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-buildinfo-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-buildinfo-6.17.0-7-generic-64k"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-cloud-tools-6.17.0-7"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-cloud-tools-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-cloud-tools-common"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-headers-6.17.0-7"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-headers-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-headers-6.17.0-7-generic-64k"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-image-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-image-unsigned-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-image-unsigned-6.17.0-7-generic-64k"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-lib-rust-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-libc-dev"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-6.17.0-7-generic-64k"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-ipu6-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-ipu7-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-iwlwifi-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-usbio-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-modules-vision-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-perf"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-source-6.17.0"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-tools-6.17.0-7"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-tools-6.17.0-7-generic"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-tools-6.17.0-7-generic-64k"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-tools-common"
},
{
"binary_version": "6.17.0-7.7",
"binary_name": "linux-tools-host"
}
]
}
Database specific
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7906-1.json"
cves_map
{
"cves": [
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40025"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40026"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40027"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40028"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40108"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40109"
}
],
"ecosystem": "Ubuntu:25.10"
}
Ubuntu:25.10 / linux-aws
Package
- Name
- linux-aws
- Purl
- pkg:deb/ubuntu/linux-aws@6.17.0-1004.4?arch=source&distro=questing
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.17.0-1004.4
Affected versions
6.*
6.14.0-1005.5
6.14.0-1007.7+25.10.2
6.16.0-1001.1
6.17.0-1001.1
6.17.0-1002.2
6.17.0-1003.3
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-aws-cloud-tools-6.17.0-1004"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-aws-headers-6.17.0-1004"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-aws-tools-6.17.0-1004"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-buildinfo-6.17.0-1004-aws"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-buildinfo-6.17.0-1004-aws-64k"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-cloud-tools-6.17.0-1004-aws"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-cloud-tools-6.17.0-1004-aws-64k"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-headers-6.17.0-1004-aws"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-headers-6.17.0-1004-aws-64k"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-image-unsigned-6.17.0-1004-aws"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-image-unsigned-6.17.0-1004-aws-64k"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-modules-6.17.0-1004-aws"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-modules-6.17.0-1004-aws-64k"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-tools-6.17.0-1004-aws"
},
{
"binary_version": "6.17.0-1004.4",
"binary_name": "linux-tools-6.17.0-1004-aws-64k"
}
]
}
Database specific
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7906-1.json"
cves_map
{
"cves": [
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40025"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40026"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40027"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40028"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40108"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40109"
}
],
"ecosystem": "Ubuntu:25.10"
}
Ubuntu:25.10 / linux-realtime
Package
- Name
- linux-realtime
- Purl
- pkg:deb/ubuntu/linux-realtime@6.17.0-1003.4?arch=source&distro=questing
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedFixed6.17.0-1003.4
Ecosystem specific
{
"availability": "No subscription required",
"binaries": [
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-buildinfo-6.17.0-1003-realtime"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-cloud-tools-6.17.0-1003-realtime"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-headers-6.17.0-1003-realtime"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-image-unsigned-6.17.0-1003-realtime"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-modules-6.17.0-1003-realtime"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-modules-iwlwifi-6.17.0-1003-realtime"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-realtime-cloud-tools-6.17.0-1003"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-realtime-headers-6.17.0-1003"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-realtime-tools-6.17.0-1003"
},
{
"binary_version": "6.17.0-1003.4",
"binary_name": "linux-tools-6.17.0-1003-realtime"
}
]
}
Database specific
source
"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-7906-1.json"
cves_map
{
"cves": [
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40025"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40026"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40027"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40028"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40108"
},
{
"severity": [
{
"type": "Ubuntu",
"score": "medium"
}
],
"id": "CVE-2025-40109"
}
],
"ecosystem": "Ubuntu:25.10"
}