Summary
It was discovered that GPSd incorrectly handled processing NMEA2000
packets. An attacker could use this issue to cause GPSd to crash, resulting
in a denial of service, or possibly execute arbitrary code.
(CVE-2025-67268)
It was discovered that GPSd incorrectly handled processing NAVCOM packets.
An attacker could possibly use this issue to cause GPSd to consume
resources, resulting in a denial of service. (CVE-2025-67269)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | gpsd | 3.22-4ubuntu2.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | gpsd | 3.25-3ubuntu3.2 |
| Ubuntu · 25.10 | gpsd | 3.25-5ubuntu1.25.10.1 |