Skip to main content
CVE-2025-38561VulnerabilityPublished Updated

linux, linux-aws, linux-azure, linux-azure-5.15, linux-gcp, linux-gke, linux-gkeop, linux-hwe-5.15, linux-ibm

Affects Linux kernelSource GCVE Database

0
Compare

Not known to be exploited · fixed in 5.15.0-1103.112~20.04.1 : patch Linux kernel soon.

Data as of 3 Nov 2026, 17:43 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Patch
Available – fixed in 5.15.0-1103.112~20.04.1, 5.15.0-168.178~20.04.1, 5.15.0-1093.96~20.04.1 +14

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 4 Feb 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 3 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
Ubuntu 22.04 LTSlinuxpkg:deb/ubuntu/linux?arch=source&distro=jammyOther threatsAffected
  • <5.15.0-168.178
Fixed in
  • 5.15.0-168.178
Ubuntu 22.04 LTSlinux-awspkg:deb/ubuntu/linux-aws?arch=source&distro=jammyOther threatsAffected
  • <5.15.0-1099.106
Fixed in
  • 5.15.0-1099.106
Ubuntu 22.04 LTSlinux-azurepkg:deb/ubuntu/linux-azure?arch=source&distro=jammyOther threatsAffected
  • <5.15.0-1103.112
Fixed in
  • 5.15.0-1103.112
Ubuntu 22.04 LTSlinux-gcppkg:deb/ubuntu/linux-gcp?arch=source&distro=jammyOther threatsAffected
  • <5.15.0-1099.108
Fixed in
  • 5.15.0-1099.108
Ubuntu 22.04 LTSlinux-gkepkg:deb/ubuntu/linux-gke?arch=source&distro=jammyOther threatsAffected
  • <5.15.0-1095.101
Fixed in
  • 5.15.0-1095.101
Ubuntu 22.04 LTSlinux-gkeoppkg:deb/ubuntu/linux-gkeop?arch=source&distro=jammyOther threatsAffected
  • <5.15.0-1082.90
Fixed in
  • 5.15.0-1082.90

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

A patch is available and users should apply the official Ubuntu security updates as described in USN-8013-1. After updating, a system reboot is required to complete the installation of the fixes. Due to an ABI change, recompilation and reinstallation of any third-party kernel modules is necessary. Users should follow the update instructions provided by Ubuntu to ensure full remediation.

Description

Several security vulnerabilities were discovered in the Linux kernel affecting subsystems including the Cryptographic API and SMB network file system. These flaws could potentially allow an attacker to compromise the system. Multiple Linux kernel variants, including those for cloud platforms and hardware enablement, are affected. Fixes have been released and are available through official Ubuntu security updates. Users are advised to update and reboot their systems to apply the patches. Due to ABI changes, recompilation of third-party kernel modules may be required.

References

Community reviews

Loading reviews…