Skip to content
OpenAdvisories
Unscored USN-7758-4 0 CVEs

linux-oracle-6.8 vulnerability

Published Sep 19, 2025 · Updated Feb 10, 2026

Summary

It was discovered that the AF_UNIX socket garbage collection implementation
in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB)
messages, leading to a use-after-free vulnerability. An attacker could use
this to cause a denial of service (system crash) or possibly execute
arbitrary code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle-6.8 6.8.0-1035.36~22.04.1

References

  • report
    https://launchpad.net/bugs/2121515