Back Linuxsecurity Ubuntu 25.10 24.04 LTS Security Notice USN-8094
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-realtime: Linux kernel for Real-time systems - linux-gcp-6.17: Linux kernel for Google Cloud Platform (GCP) systems Details: Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED
A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 24.04 LTS Summary: Several security issues were fixed in the Linux kernel. Software Description: - linux-realtime: Linux kernel for Real-time systems - linux-gcp-6.17: Linux kernel for Google Cloud Platform (GCP) systems Details: Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module (LSM). An unprivileged local attacker could use these issues to load, replace, and remove arbitrary AppArmor profiles causing denial of service, exposure of sensitive information (kernel memory), local privilege escalation, or possibly escape a container. (LP: #2143853) It was discovered that some AMD Zen 5 processors supporting RDSEED instruction did not properly handle entropy, potentially resulting in the consumption of insufficiently random values. A local attacker could possibly use this issue to influence the values returned by the RDSEED
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 linux-image-6.17.0-1008-realtime 6.17.0-1008.9 linux-image-realtime 6.17.0-1008.9 linux-image-realtime-6.17 6.17.0-1008.9 linux-image-realtime-hwe-24.04 6.17.0-1008.9 Ubuntu 24.04 LTS linux-image-6.17.0-1009-gcp 6.17.0-1009.9~24.04.3 linux-image-6.17.0-1009-gcp-64k 6.17.0-1009.9~24.04.3 linux-image-gcp 6.17.0-1009.9~24.04.3 linux-image-gcp-6.17 6.17.0-1009.9~24.04.3 linux-image-gcp-64k 6.17.0-1009.9~24.04.3 linux-image-gcp-64k-6.17 6.17.0-1009.9~24.04.3 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 linux-image-6.17.0-1008-realtime 6.17.0-1008.9 linux-image-realtime 6.17.0-1008.9 linux-image-realtime-6.17 6.17.0-1008.9 linux-image-realtime-hwe-24.04 6.17.0-1008.9 Ubuntu 24.04 LTS linux-image-6.17.0-1009-gcp 6.17.0-1009.9~24.04.3 linux-image-6.17.0-1009-gcp-64k 6.17.0-1009.9~24.04.3 linux-image-gcp 6.17.0-1009.9~24.04.3 linux-image-gcp-6.17 6.17.0-1009.9~24.04.3 linux-image-gcp-64k 6.17.0-1009.9~24.04.3 linux-image-gcp-64k-6.17 6.17.0-1009.9~24.04.3 After a standard system update you need to reboot your computer to make all the necessary changes. ATTENTION: Due to an unavoidable ABI change the kernel updates have been given a new version number, which requires you to recompile and reinstall all third party kernel modules you might have installed. Unless you manually uninstalled the standard kernel metapackages (e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual, linux-powerpc), a standard system upgrade will automatically perform this as well.
CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249, CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253, CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258, CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262, CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266, CVE-2025-40290, CVE-2025-40345, CVE-2025-62626, CVE-2025-68212, CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217, CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221, CVE-2025-68222, CVE-2025-68223, CVE-2025-68225, CVE-2025-68227, CVE-2025-68228, CVE-2025-68229, CVE-2025-68230, CVE-2025-68231, CVE-2025-68232, CVE-2025-68233, CVE-2025-68234, CVE-2025-68235, CVE-2025-68236, CVE-2025-68237, CVE-2025-68238, CVE-2025-68254, CVE-2025-68255, CVE-2025-68256, CVE-2025-68257, CVE-2025-68258, CVE-2025-68259, CVE-2025-68261, CVE-2025-68262, CVE-2025-68263, CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68281, CVE-2025-68282, CVE-2025-68283, CVE-2025-68284, CVE-2025-68285, CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289, CVE-2025-68290, CVE-2025-68292, CVE-2025-68293, CVE-2025-68294, CVE-2025-68295, CVE-2025-68296, CVE-2025-68297, CVE-2025-68298, CVE-2025-68299, CVE-2025-68300, CVE-2025-68301, CVE-2025-68302, CVE-2025-68303, CVE-2025-68304, CVE-2025-68305, CVE-2025-68306, CVE-2025-68307, CVE-2025-68308, CVE-2025-68323, CVE-2025-68324, CVE-2025-68325, CVE-2025-68326, CVE-2025-68327, CVE-2025-68328, CVE-2025-68329, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332, CVE-2025-68333, CVE-2025-68334, CVE-2025-68335, CVE-2025-68336, CVE-2025-68337, CVE-2025-68338, CVE-2025-68339, CVE-2025-68340, CVE-2025-68341, CVE-2025-68342, CVE-2025-68343, CVE-2025-68344, CVE-2025-68345, CVE-2025-68346, CVE-2025-68347, CVE-2025-68348, CVE-2025-68349, CVE-2025-68352, CVE-2025-68354, CVE-2025-68356, CVE-2025-68358, CVE-2025-68359, CVE-2025-68360, CVE-2025-68361, CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366, CVE-2025-68367, CVE-2025-68369, CVE-2025-68370, CVE-2025-68371, CVE-2025-68372, CVE-2025-68373, CVE-2025-68374, CVE-2025-68375, CVE-2025-68376, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380, CVE-2025-68724, CVE-2025-68726, CVE-2025-68727, CVE-2025-68728, CVE-2025-68729, CVE-2025-68730, CVE-2025-68732, CVE-2025-68733, CVE-2025-68735, CVE-2025-68738, CVE-2025-68739, CVE-2025-68740, CVE-2025-68741, CVE-2025-68742, CVE-2025-68743, CVE-2025-68744, CVE-2025-68746, CVE-2025-68747, CVE-2025-68748, CVE-2025-68749, CVE-2025-68751, CVE-2025-68752, CVE-2025-68753, CVE-2025-68754, CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758, CVE-2025-68759, CVE-2025-68760, CVE-2025-68762, CVE-2025-68763, CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-71128
CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249,
CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253,
CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258,
CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262,
CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266,
CVE-2025-40290, CVE-2025-40345, CVE-2025-62626, CVE-2025-68212,
CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217,
CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,
CVE-2025-68222, CVE-2025-68223, CVE-2025-68225, CVE-2025-68227,
CVE-2025-68228, CVE-2025-68229, CVE-2025-68230, CVE-2025-68231,
CVE-2025-68232, CVE-2025-68233, CVE-2025-68234, CVE-2025-68235,
CVE-2025-68236, CVE-2025-68237, CVE-2025-68238, CVE-2025-68254,
CVE-2025-68255, CVE-2025-68256, CVE-2025-68257, CVE-2025-68258,
CVE-2025-68259, CVE-2025-68261, CVE-2025-68262, CVE-2025-68263,
CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68281,
CVE-2025-68282, CVE-2025-68283, CVE-2025-68284, CVE-2025-68285,
CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289,
CVE-2025-68290, CVE-2025-68292, CVE-2025-68293, CVE-2025-68294,
CVE-2025-68295, CVE-2025-68296, CVE-2025-68297, CVE-2025-68298,
CVE-2025-68299, CVE-2025-68300, CVE-2025-68301, CVE-2025-68302,
CVE-2025-68303, CVE-2025-68304, CVE-2025-68305, CVE-2025-68306,
CVE-2025-68307, CVE-2025-68308, CVE-2025-68323, CVE-2025-68324,
CVE-2025-68325, CVE-2025-68326, CVE-2025-68327, CVE-2025-68328,
CVE-2025-68329, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332,
CVE-2025-68333, CVE-2025-68334, CVE-2025-68335, CVE-2025-68336,
CVE-2025-68337, CVE-2025-68338, CVE-2025-68339, CVE-2025-68340,
CVE-2025-68341, CVE-2025-68342, CVE-2025-68343, CVE-2025-68344,
CVE-2025-68345, CVE-2025-68346, CVE-2025-68347, CVE-2025-68348,
CVE-2025-68349, CVE-2025-68352, CVE-2025-68354, CVE-2025-68356,
CVE-2025-68358, CVE-2025-68359, CVE-2025-68360, CVE-2025-68361,
CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,
CVE-2025-68367, CVE-2025-68369, CVE-2025-68370, CVE-2025-68371,
CVE-2025-68372, CVE-2025-68373, CVE-2025-68374, CVE-2025-68375,
CVE-2025-68376, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380,
CVE-2025-68724, CVE-2025-68726, CVE-2025-68727, CVE-2025-68728,
CVE-2025-68729, CVE-2025-68730, CVE-2025-68732, CVE-2025-68733,
CVE-2025-68735, CVE-2025-68738, CVE-2025-68739, CVE-2025-68740,
CVE-2025-68741, CVE-2025-68742, CVE-2025-68743, CVE-2025-68744,
CVE-2025-68746, CVE-2025-68747, CVE-2025-68748, CVE-2025-68749,
CVE-2025-68751, CVE-2025-68752, CVE-2025-68753, CVE-2025-68754,
CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758,
CVE-2025-68759, CVE-2025-68760, CVE-2025-68762, CVE-2025-68763,
CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-71128
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
