Back Linuxsecurity

Ubuntu 25.10: Unbound Critical Regression Fix CVE-2025-11411 USN-7855

Linuxsecurity •LinuxSecurity Advisories • December 2, 2025

A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 25.10 - Ubuntu 25.04 - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: USN-7855-1 introduced a regression in Unbound Software Description: - unbound: validating, recursive, caching DNS resolver Details: USN-7855-1 fixed vulnerabilities in Unbound. It was discovered that the fix for CVE-2025-11411 was incomplete. This update fixes the problem. Original advisory details: Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan discovered that Unbound incorrectly handled certain promiscuous NS RRSets. A remote attacker could possibly use this issue to perform a domain hijack attack.

The problem can be corrected by updating your system to the following package versions: Ubuntu 25.10 libunbound8 1.22.0-2ubuntu2.2 unbound 1.22.0-2ubuntu2.2 Ubuntu 25.04 libunbound8 1.22.0-1ubuntu1.3 unbound 1.22.0-1ubuntu1.3 Ubuntu 24.04 LTS libunbound8 1.19.2-1ubuntu3.7 unbound 1.19.2-1ubuntu3.7 Ubuntu 22.04 LTS libunbound8 1.13.1-1ubuntu5.14 unbound 1.13.1-1ubuntu5.14 In general, a standard system update will make all the necessary changes.

CVE-2025-11411,

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Unbound Domain Hijack Vulnerability and Fix A vulnerability in Unbound was identified that could allow remote attackers to hijack domains by sending specially crafted network traffic. The issue was discovered by researchers Yuxiao Wu, Yunyi Zhang, Baojun Liu, and Haixin Duan, who found that Unbound incorrectly handled certain promiscuous NS RRSets. An initial fix was released but was later found to be incomplete, prompting a subsequent update. 3 sources 22

Extracted Entities

Attack Types (1)

Domain Hijack

CVEs (1)

CVE-2025-11411