Skip to main content
CVE-2025-40019VulnerabilityPublished Updated

linux, linux-aws, linux-azure, linux-gcp, linux-oem-6.17, linux-oracle, linux-raspi, linux-realtime vulnerabilities

Affects Linux kernelSource GCVE Database

0
Compare

Not known to be exploited · fixed in 6.17.0-1010.10 : patch Linux kernel soon.

Data as of 3 Nov 2026, 17:43 UTC

Severity
High

Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Patch
Available – fixed in 6.17.0-1010.10, 6.17.0-12.12, 6.17.0-1006.6 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 4 Feb 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 3 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
Ubuntu 25.10linuxpkg:deb/ubuntu/linux?arch=source&distro=questingOther threatsAffected
  • <6.17.0-12.12
Fixed in
  • 6.17.0-12.12
Ubuntu 25.10linux-awspkg:deb/ubuntu/linux-aws?arch=source&distro=questingOther threatsAffected
  • <6.17.0-1006.6
Fixed in
  • 6.17.0-1006.6
Ubuntu 25.10linux-azurepkg:deb/ubuntu/linux-azure?arch=source&distro=questingOther threatsAffected
  • <6.17.0-1007.7
Fixed in
  • 6.17.0-1007.7
Ubuntu 25.10linux-gcppkg:deb/ubuntu/linux-gcp?arch=source&distro=questingOther threatsAffected
  • <6.17.0-1006.6
Fixed in
  • 6.17.0-1006.6
Ubuntu 25.10linux-oraclepkg:deb/ubuntu/linux-oracle?arch=source&distro=questingOther threatsAffected
  • <6.17.0-1006.6
Fixed in
  • 6.17.0-1006.6
Ubuntu 25.10linux-raspipkg:deb/ubuntu/linux-raspi?arch=source&distro=questingOther threatsAffected
  • <6.17.0-1007.7
Fixed in
  • 6.17.0-1007.7

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Apply the official Ubuntu security updates as detailed in the advisory USN-8014-1. After updating, reboot the system to ensure all changes take effect. Due to an ABI change in the kernel update, recompile and reinstall any third-party kernel modules. Standard system upgrades will handle this automatically unless kernel metapackages have been manually removed. No additional mitigation steps are indicated by the vendor.

Description

Multiple security vulnerabilities were discovered in the Linux kernel affecting various subsystems including the Cryptographic API and Unix domain sockets. These flaws could potentially allow an attacker to compromise affected systems. The issues impact several Linux kernel variants including linux-oem-6.17 and others. Fixes have been released in updated kernel versions, and users are advised to apply these updates and reboot to ensure protection. Due to ABI changes, recompilation of third-party kernel modules may be necessary after updating.

References

Community reviews

Loading reviews…