========================================================================== Ubuntu Security Notice USN-7835-1 October 22, 2025
linux, linux-aws, linux-azure, linux-azure-6.8, linux-gcp, linux-gkeop, linux-ibm, linux-ibm-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux: Linux kernel - linux-aws: Linux kernel for Amazon Web Services (AWS) systems - linux-azure: Linux kernel for Microsoft Azure Cloud systems - linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems - linux-gkeop: Linux kernel for Google Container Engine (GKE) systems - linux-ibm: Linux kernel for IBM cloud systems - linux-lowlatency: Linux low latency kernel - linux-oracle: Linux kernel for Oracle Cloud systems - linux-azure-6.8: Linux kernel for Microsoft Azure cloud systems - linux-ibm-6.8: Linux kernel for IBM cloud systems - linux-lowlatency-hwe-6.8: Linux low latency kernel Details: Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - ACPI drivers; - Ublk userspace block driver; - Clock framework and drivers; - GPU drivers; - IIO subsystem; - InfiniBand drivers; - Media drivers; - MemoryStick subsystem; - Network drivers; - NTB driver; - PCI subsystem; - Remote Processor subsystem; - Thermal drivers; - Virtio Host (VHOST) subsystem; - 9P distributed file system; - File systems infrastructure; - JFS file system; - Network file system (NFS) server daemon; - NTFS3 file system; - SMB network file system; - Memory management; - RDMA verbs API; - Kernel fork() syscall; - Tracing infrastructure; - Watch queue notification mechanism; - Asynchronous Transfer Mode (ATM) subsystem; - Networking core; - IPv4 networking; - IPv6 networking; - Netfilter; - Network traffic control; - SCTP protocol; - TLS protocol; - SoC Audio for Freescale CPUs drivers; (CVE-2025-39728, CVE-2025-23136, CVE-2025-22062, CVE-2025-22035, CVE-2025-22020, CVE-2025-22083, CVE-2025-22071, CVE-2025-22060, CVE-2025-22073, CVE-2025-22044, CVE-2025-22063, CVE-2025-22079, CVE-2025-22057, CVE-2025-22095, CVE-2025-39735, CVE-2025-39682, CVE-2025-22058, CVE-2025-22021, CVE-2025-22018, CVE-2025-22056, CVE-2025-22054, CVE-2025-22080, CVE-2025-22039, CVE-2025-22019, CVE-2025-22038, CVE-2025-22028, CVE-2023-53034, CVE-2024-58092, CVE-2025-38637, CVE-2025-22089, CVE-2025-40114, CVE-2025-22068, CVE-2025-37937, CVE-2025-22070, CVE-2025-22072, CVE-2025-22086, CVE-2025-22050, CVE-2025-22040, CVE-2025-22065, CVE-2025-38575, CVE-2025-22064, CVE-2025-22033, CVE-2025-22041, CVE-2025-22090, CVE-2025-22036, CVE-2025-23138, CVE-2025-22047, CVE-2025-38240, CVE-2025-22066, CVE-2025-22042, CVE-2025-38152, CVE-2025-22055, CVE-2025-22081, CVE-2025-22045, CVE-2025-22053, CVE-2025-22075, CVE-2025-22027, CVE-2025-22025, CVE-2025-22097) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS linux-image-6.8.0-1025-gkeop 6.8.0-1025.28 linux-image-6.8.0-1038-oracle 6.8.0-1038.39 linux-image-6.8.0-1038-oracle-64k 6.8.0-1038.39 linux-image-6.8.0-1039-ibm 6.8.0-1039.39 linux-image-6.8.0-1041-aws 6.8.0-1041.43 linux-image-6.8.0-1041-aws-64k 6.8.0-1041.43 linux-image-6.8.0-1041-azure 6.8.0-1041.47+1 linux-image-6.8.0-1042-gcp 6.8.0-1042.45 linux-image-6.8.0-1042-gcp-64k 6.8.0-1042.45 linux-image-6.8.0-86-generic 6.8.0-86.87 linux-image-6.8.0-86-generic-64k 6.8.0-86.87 linux-image-6.8.0-86-lowlatency 6.8.0-86.87.1 linux-image-6.8.0-86-lowlatency-64k 6.8.0-86.87.1 linux-image-aws-6.8 6.8.0-1041.43 linux-image-aws-64k-6.8 6.8.0-1041.43 linux-image-aws-64k-lts-24.04 6.8.0-1041.43 linux-image-aws-lts-24.04 6.8.0-1041.43 linux-image-azure-6.8 6.8.0-1041.47+1 linux-image-azure-lts-24.04 6.8.0-1041.47+1 linux-image-gcp-6.8 6.8.0-1042.45 linux-image-gcp-64k-6.8 6.8.0-1042.45 linux-image-gcp-64k-lts-24.04 6.8.0-1042.45 linux-image-gcp-lts-24.04 6.8.0-1042.45 linux-image-generic 6.8.0-86.87 linux-image-generic-6.8 6.8.0-86.87 linux-image-generic-64k 6.8.0-86.87 linux-image-generic-64k-6.8 6.8.0-86.87 linux-image-generic-lpae 6.8.0-86.87 linux-image-gkeop 6.8.0-1025.28 linux-image-gkeop-6.8 6.8.0-1025.28 linux-image-ibm 6.8.0-1039.39 linux-image-ibm-6.8 6.8.0-1039.39 linux-image-ibm-classic 6.8.0-1039.39 linux-image-ibm-lts-24.04 6.8.0-1039.39 linux-image-kvm 6.8.0-86.87 linux-image-lowlatency 6.8.0-86.87.1 linux-image-lowlatency-6.8 6.8.0-86.87.1 linux-image-lowlatency-64k 6.8.0-86.87.1 linux-image-lowlatency-64k-6.8 6.8.0-86.87.1 linux-image-oracle-6.8 6.8.0-1038.39 linux-image-oracle-64k-6.8 6.8.0-1038.39 linux-image-oracle-64k-lts-24.04 6.8.0-1038.39 linux-image-oracle-lts-24.04 6.8.0-1038.39 linux-image-virtual 6.8.0-86.87 linux-image-virtual-6.8 6.8.0-86.87 Ubuntu 22.04 LTS linux-image-6.8.0-1039-ibm 6.8.0-1039.39~22.04.1 linux-image-6.8.0-1041-azure 6.8.0-1041.47~22.04.1 linux-image-6.8.0-86-lowlatency 6.8.0-86.87.1~22.04.1 linux-image-6.8.0-86-lowlatency-64k 6.8.0-86.87.1~22.04.1 linux-image-azure 6.8.0-1041.47~22.04.1 linux-image-azure-6.8 6.8.0-1041.47~22.04.1 linux-image-ibm-6.8 6.8.0-1039.39~22.04.1 linux-image-lowlatency-6.8 6.8.0-86.87.1~22.04.1 linux-image-lowlatency-64k-6.8 6.8.0-86.87.1~22.04.1 linux-image-lowlatency-64k-hwe-22.04 6.8.0-86.87.1~22.04.1 linux-image-lowlatency-hwe-22.04 6.8.0-86.87.1~22.04.1 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well. References: https://ubuntu.com/security/notices/USN-7835-1 CVE-2023-53034, CVE-2024-58092, CVE-2025-22018, CVE-2025-22019, CVE-2025-22020, CVE-2025-22021, CVE-2025-22025, CVE-2025-22027, CVE-2025-22028, CVE-2025-22033, CVE-2025-22035, CVE-2025-22036, CVE-2025-22038, CVE-2025-22039, CVE-2025-22040, CVE-2025-22041, CVE-2025-22042, CVE-2025-22044, CVE-2025-22045, CVE-2025-22047, CVE-2025-22050, CVE-2025-22053, CVE-2025-22054, CVE-2025-22055, CVE-2025-22056, CVE-2025-22057, CVE-2025-22058, CVE-2025-22060, CVE-2025-22062, CVE-2025-22063, CVE-2025-22064, CVE-2025-22065, CVE-2025-22066, CVE-2025-22068, CVE-2025-22070, CVE-2025-22071, CVE-2025-22072, CVE-2025-22073, CVE-2025-22075, CVE-2025-22079, CVE-2025-22080, CVE-2025-22081, CVE-2025-22083, CVE-2025-22086, CVE-2025-22089, CVE-2025-22090, CVE-2025-22095, CVE-2025-22097, CVE-2025-23136, CVE-2025-23138, CVE-2025-37937, CVE-2025-38152, CVE-2025-38240, CVE-2025-38575, CVE-2025-38637, CVE-2025-39682, CVE-2025-39728, CVE-2025-39735, CVE-2025-40114 Package Information: https://launchpad.net/ubuntu/+source/linux/6.8.0-86.87 https://launchpad.net/ubuntu/+source/linux-aws/6.8.0-1041.43 https://launchpad.net/ubuntu/+source/linux-azure/6.8.0-1041.47 https://launchpad.net/ubuntu/+source/linux-gcp/6.8.0-1042.45 https://launchpad.net/ubuntu/+source/linux-gkeop/6.8.0-1025.28 https://launchpad.net/ubuntu/+source/linux-ibm/6.8.0-1039.39 https://launchpad.net/ubuntu/+source/linux-lowlatency/6.8.0-86.87.1 https://launchpad.net/ubuntu/+source/linux-oracle/6.8.0-1038.39 https://launchpad.net/ubuntu/+source/linux-azure-6.8/6.8.0-1041.47~22.04.1 https://launchpad.net/ubuntu/+source/linux-ibm-6.8/6.8.0-1039.39~22.04.1https://launchpad.net/ubuntu/+source/linux-lowlatency-hwe-6.8/6.8.0-86.87.1~22.04.1
OpenPGP_signature.asc
Description: OpenPGP digital signature
