Summary
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Unix domain sockets;
(CVE-2025-40019, CVE-2025-40214)
Fixed packages 8
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 24.04 LTS 24.04:LTS | linux-oem-6.17 | 6.17.0-1010.10 |
| Ubuntu · 25.10 | linux | 6.17.0-12.12 |
| Ubuntu · 25.10 | linux-aws | 6.17.0-1006.6 |
| Ubuntu · 25.10 | linux-azure | 6.17.0-1007.7 |
| Ubuntu · 25.10 | linux-gcp | 6.17.0-1006.6 |
| Ubuntu · 25.10 | linux-oracle | 6.17.0-1006.6 |
| Ubuntu · 25.10 | linux-raspi | 6.17.0-1007.7 |
| Ubuntu · 25.10 | linux-realtime | 6.17.0-1005.6 |
Vulnerabilities 2
-
High 7.8
af_unix: Initialise scc_index in unix_add_edge().
In the Linux kernel, the following vulnerability has been resolved: af_unix: Initialise scc_index in unix_add_edge(). Quang Le reported that the AF_UNIX GC could garbage-collect a receive queue of an alive in-flight socket, with a nice repro. The repro consis…
-
Unscored —CVE-2025-40019 Public exploit
crypto: essiv - Check ssize for decryption and in-place encryption
In the Linux kernel, the following vulnerability has been resolved: crypto: essiv - Check ssize for decryption and in-place encryption Move the ssize check to the start in essiv_aead_crypt so that it's also checked for decryption and in-place encryption.