USN-8014-1

Details

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Cryptographic API;
Unix domain sockets; (CVE-2025-40019, CVE-2025-40214)

Affected Packages

linux-oem-6.17

Ubuntu 24.04 LTS

Fixed in:

6.17.0-1010.10

linux

Ubuntu 25.10

Fixed in:

6.17.0-12.12

linux-aws

Ubuntu 25.10

Fixed in:

6.17.0-1006.6

linux-azure

Ubuntu 25.10

Fixed in:

6.17.0-1007.7

linux-gcp

Ubuntu 25.10

Fixed in:

6.17.0-1006.6

linux-oracle

Ubuntu 25.10

Fixed in:

6.17.0-1006.6

linux-raspi

Ubuntu 25.10

Fixed in:

6.17.0-1007.7

linux-realtime

Ubuntu 25.10

Fixed in:

6.17.0-1005.6

References

REPORT

https://ubuntu.com/security/CVE-2025-40019

REPORT

https://ubuntu.com/security/CVE-2025-40214

ADVISORY

https://ubuntu.com/security/notices/USN-8014-1