linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm-5.15, linux-intel-iot-realtime, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-nvidia-tegra-igx, linux-oracle-5.15, linux-realtime, linux-xilinx-zynqmp vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-A(FFA); - Multiple devices driver; - Media drivers; - Network drivers; - NVDIMM (Non-Volatile Memory Device) drivers; - NVME drivers; - x86 platform drivers; - TCM subsystem; - Virtio drivers; - File systems infrastructure; - SMB network file system; - LZO compression library; - Digital Audio (PCM) driver; - Tracing infrastructure; - Padata parallel execution mechanism; - CAN network layer; - Networking core; - TIPC protocol; - ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)
02 / AFFECTED SOFTWARE
Affected packages
79 explicit affected versions
71 explicit affected versions
72 explicit affected versions
64 explicit affected versions
76 explicit affected versions
29 explicit affected versions
25 explicit affected versions
18 explicit affected versions
60 explicit affected versions
59 explicit affected versions
61 explicit affected versions
40 explicit affected versions
48 explicit affected versions
64 explicit affected versions
19 explicit affected versions
61 explicit affected versions
46 explicit affected versions
70 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Cryptographic API; - Arm Firmware Framework for ARMv8-A(FFA); - Multiple devices driver; - Media drivers; - Network drivers; - NVDIMM (Non-Volatile Memory Device) drivers; - NVME drivers; - x86 platform drivers; - TCM subsystem; - Virtio drivers; - File systems infrastructure; - SMB network file system; - LZO compression library; - Digital Audio (PCM) driver; - Tracing infrastructure; - Padata parallel execution mechanism; - CAN network layer; - Networking core; - TIPC protocol; - ALSA framework; (CVE-2025-38079, CVE-2025-38048, CVE-2025-38075, CVE-2025-38077, CVE-2025-38035, CVE-2025-38037, CVE-2025-38034, CVE-2025-38058, CVE-2025-38004, CVE-2025-38031, CVE-2025-38078, CVE-2025-38044, CVE-2025-38066, CVE-2025-38052, CVE-2025-38043, CVE-2025-38065, CVE-2025-38003, CVE-2025-38061, CVE-2025-38051, CVE-2025-38072, CVE-2025-38068)
05 / REFERENCES
Further evidence
- https://ubuntu.com/security/CVE-2025-38003
- https://ubuntu.com/security/CVE-2025-38004
- https://ubuntu.com/security/CVE-2025-38031
- https://ubuntu.com/security/CVE-2025-38034
- https://ubuntu.com/security/CVE-2025-38035
- https://ubuntu.com/security/CVE-2025-38037
- https://ubuntu.com/security/CVE-2025-38043
- https://ubuntu.com/security/CVE-2025-38044
- https://ubuntu.com/security/CVE-2025-38048
- https://ubuntu.com/security/CVE-2025-38051
- https://ubuntu.com/security/CVE-2025-38052
- https://ubuntu.com/security/CVE-2025-38058
- https://ubuntu.com/security/CVE-2025-38061
- https://ubuntu.com/security/CVE-2025-38065
- https://ubuntu.com/security/CVE-2025-38066
- https://ubuntu.com/security/CVE-2025-38068
- https://ubuntu.com/security/CVE-2025-38072
- https://ubuntu.com/security/CVE-2025-38075
- https://ubuntu.com/security/CVE-2025-38077
- https://ubuntu.com/security/CVE-2025-38078
- https://ubuntu.com/security/CVE-2025-38079
- https://ubuntu.com/security/notices/USN-7704-1