Skip to content
Ubuntu 25.10: GPSd Critical Denial of Service Vulnerability USN-7948

Ubuntu 25.10: GPSd Critical Denial of Service Vulnerability USN-7948

Linuxsecurity •LinuxSecurity Advisories • January 8, 2026

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in GPSd. Software Description: - gpsd: Global Positioning System Details: It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-67268) It was discovered that GPSd incorrectly handled processing NAVCOM packets. An attacker could possibly use this issue to cause GPSd to consume resources, resulting in a denial of service. (CVE-2025-67269)

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in GPSd. Software Description: - gpsd: Global Positioning System Details: It was discovered that GPSd incorrectly handled processing NMEA2000 packets. An attacker could use this issue to cause GPSd to crash, resulting in a denial of service, or possibly execute arbitrary code. (CVE-2025-67268) It was discovered that GPSd incorrectly handled processing NAVCOM packets. An attacker could possibly use this issue to cause GPSd to consume resources, resulting in a denial of service. (CVE-2025-67269)

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 gpsd 3.25-5ubuntu1.25.10.1 libgps30t64 3.25-5ubuntu1.25.10.1 Ubuntu 25.04 gpsd 3.25-5ubuntu1.25.04.1 libgps30t64 3.25-5ubuntu1.25.04.1 Ubuntu 24.04 LTS gpsd 3.25-3ubuntu3.2 libgps30t64 3.25-3ubuntu3.2 Ubuntu 22.04 LTS gpsd 3.22-4ubuntu2.1 libgps28 3.22-4ubuntu2.1 In general, a standard system update will make all the necessary changes.

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 gpsd 3.25-5ubuntu1.25.10.1 libgps30t64 3.25-5ubuntu1.25.10.1 Ubuntu 25.04 gpsd 3.25-5ubuntu1.25.04.1 libgps30t64 3.25-5ubuntu1.25.04.1 Ubuntu 24.04 LTS gpsd 3.25-3ubuntu3.2 libgps30t64 3.25-3ubuntu3.2 Ubuntu 22.04 LTS gpsd 3.22-4ubuntu2.1 libgps28 3.22-4ubuntu2.1 In general, a standard system update will make all the necessary changes.

CVE-2025-67268, CVE-2025-67269

CVE-2025-67268, CVE-2025-67269

Extracted Entities

Attack Types (1)

Companies (1)

Platforms (1)