Skip to content
OpenAdvisories
Unscored USN-7758-1 0 CVEs

linux, linux-aws, linux-gcp, linux-gke, linux-gkeop, linux-hwe-6.8, linux-lowlatency, linux-lowlatency-hwe-6.8, linux-oracle vulnerability

Published Sep 19, 2025 · Updated Apr 22, 2026

Summary

It was discovered that the AF_UNIX socket garbage collection implementation
in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB)
messages, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code.

Fixed packages 9

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-hwe-6.8 6.8.0-83.83~22.04.1
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency-hwe-6.8 6.8.0-83.83.1~22.04.1
Ubuntu · 24.04 LTS 24.04:LTS linux 6.8.0-83.83
Ubuntu · 24.04 LTS 24.04:LTS linux-aws 6.8.0-1038.40
Ubuntu · 24.04 LTS 24.04:LTS linux-gcp 6.8.0-1039.41
Ubuntu · 24.04 LTS 24.04:LTS linux-gke 6.8.0-1035.39
Ubuntu · 24.04 LTS 24.04:LTS linux-gkeop 6.8.0-1022.24
Ubuntu · 24.04 LTS 24.04:LTS linux-lowlatency 6.8.0-83.83.1
Ubuntu · 24.04 LTS 24.04:LTS linux-oracle 6.8.0-1035.36

References

  • report
    https://launchpad.net/bugs/2121515