Skip to content
OpenAdvisories
High USN-7793-1 3 CVEs

linux, linux-aws, linux-aws-5.15, linux-gcp, linux-gcp-5.15, linux-gkeop, linux-hwe-5.15, linux-ibm, linux-ibm-5.15, linux-intel-iotg, linux-intel-iotg-5.15, linux-lowlatency, linux-lowlatency-hwe-5.15, linux-nvidia, linux-nvidia-tegra, linux-nvidia-tegra-5.15, linux-oracle, linux-raspi, linux-xilinx-zynqmp vulnerabilities

Published Oct 2, 2025 · Updated Nov 3, 2026

Ecosystem: Ubuntu

Summary

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Packet sockets;
- Network traffic control;
- VMware vSockets driver;
(CVE-2025-38477, CVE-2025-38617, CVE-2025-38618)

Fixed packages 19

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS linux 5.15.0-157.167
Ubuntu · 22.04 LTS 22.04:LTS linux-aws 5.15.0-1093.100
Ubuntu · 22.04 LTS 22.04:LTS linux-gcp 5.15.0-1093.102
Ubuntu · 22.04 LTS 22.04:LTS linux-gkeop 5.15.0-1076.84
Ubuntu · 22.04 LTS 22.04:LTS linux-ibm 5.15.0-1087.90
Ubuntu · 22.04 LTS 22.04:LTS linux-intel-iotg 5.15.0-1088.94
Ubuntu · 22.04 LTS 22.04:LTS linux-lowlatency 5.15.0-157.167
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia 5.15.0-1088.89
Ubuntu · 22.04 LTS 22.04:LTS linux-nvidia-tegra 5.15.0-1046.46
Ubuntu · 22.04 LTS 22.04:LTS linux-oracle 5.15.0-1091.97
Ubuntu · 22.04 LTS 22.04:LTS linux-raspi 5.15.0-1087.90
Ubuntu · 22.04 LTS 22.04:LTS linux-xilinx-zynqmp 5.15.0-1057.61
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-aws-5.15 5.15.0-1093.100~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-gcp-5.15 5.15.0-1093.102~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-hwe-5.15 5.15.0-157.167~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-ibm-5.15 5.15.0-1087.90~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-intel-iotg-5.15 5.15.0-1088.94~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-lowlatency-hwe-5.15 5.15.0-157.167~20.04.1
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS linux-nvidia-tegra-5.15 5.15.0-1046.46~20.04.1

Vulnerabilities 3

  • High 7.8
    CVE-2025-38477

    net/sched: sch_qfq: Fix race condition on qfq_aggregate

    In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_qfq: Fix race condition on qfq_aggregate A race condition can occur when 'agg' is modified in qfq_change_agg (called during qfq_enqueue) while other threads access it concurren…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38617

    net/packet: fix a race in packet_set_ring() and packet_notifier()

    In the Linux kernel, the following vulnerability has been resolved: net/packet: fix a race in packet_set_ring() and packet_notifier() When packet_set_ring() releases po->bind_lock, another thread can run packet_notifier() and process an NETDEV_UP event. This …

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.8
    CVE-2025-38618

    vsock: Do not allow binding to VMADDR_PORT_ANY

    In the Linux kernel, the following vulnerability has been resolved: vsock: Do not allow binding to VMADDR_PORT_ANY It is possible for a vsock to autobind to VMADDR_PORT_ANY. This can cause a use-after-free when a connection is made to the bound socket. The so…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-38477
  • report
    https://ubuntu.com/security/CVE-2025-38617
  • report
    https://ubuntu.com/security/CVE-2025-38618