USN-7795-2

Details

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Ext4 file system;
Network file system (NFS) server daemon;
Packet sockets;
Network traffic control;
VMware vSockets driver; (CVE-2025-38617, CVE-2025-21796, CVE-2025-38618, CVE-2025-38477, CVE-2025-37785)

Affected Packages

linux-fips

Ubuntu Pro FIPS-updates 20.04 LTS

Fixed in:

5.4.0-1125.135

linux-gcp-fips

Ubuntu Pro FIPS-updates 20.04 LTS

Fixed in:

5.4.0-1154.163+fips1

References

REPORT

https://ubuntu.com/security/CVE-2025-21796