vulnerability

Ubuntu: (Multiple Advisories) (CVE-2025-38083): Linux kernel vulnerability

Severity
4
CVSS
(AV:L/AC:M/Au:S/C:N/I:N/A:C)
Published
Jun 20, 2025
Added
Jun 26, 2025
Modified
Dec 18, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

net_sched: prio: fix a race in prio_tune()

Gerrard Tai reported a race condition in PRIO, whenever SFQ perturb timer
fires at the wrong time.

The race is as follows:

CPU 0 CPU 1
[1]: lock root
[2]: qdisc_tree_flush_backlog()
[3]: unlock root
|
| [5]: lock root
| [6]: rehash
| [7]: qdisc_tree_reduce_backlog()
|
[4]: qdisc_put()

This can be abused to underflow a parent's qlen.

Calling qdisc_purge_queue() instead of qdisc_tree_flush_backlog()
should fix the race, because all packets will be purged from the qdisc
before releasing the lock.

Solutions

ubuntu-upgrade-linux-image-5-15-0-1031-nvidia-tegra-igxubuntu-upgrade-linux-image-5-15-0-1031-nvidia-tegra-igx-rtubuntu-upgrade-linux-image-5-15-0-1042-nvidia-tegraubuntu-upgrade-linux-image-5-15-0-1042-nvidia-tegra-rtubuntu-upgrade-linux-image-5-15-0-1053-xilinx-zynqmpubuntu-upgrade-linux-image-5-15-0-1071-gkeopubuntu-upgrade-linux-image-5-15-0-1081-ibmubuntu-upgrade-linux-image-5-15-0-1082-intel-iot-realtimeubuntu-upgrade-linux-image-5-15-0-1083-nvidiaubuntu-upgrade-linux-image-5-15-0-1083-nvidia-lowlatencyubuntu-upgrade-linux-image-5-15-0-1083-raspiubuntu-upgrade-linux-image-5-15-0-1084-intel-iotgubuntu-upgrade-linux-image-5-15-0-1085-kvmubuntu-upgrade-linux-image-5-15-0-1086-gkeubuntu-upgrade-linux-image-5-15-0-1086-oracleubuntu-upgrade-linux-image-5-15-0-1088-gcpubuntu-upgrade-linux-image-5-15-0-1088-gcp-fipsubuntu-upgrade-linux-image-5-15-0-1089-awsubuntu-upgrade-linux-image-5-15-0-1089-aws-64kubuntu-upgrade-linux-image-5-15-0-1089-aws-fipsubuntu-upgrade-linux-image-5-15-0-1089-realtimeubuntu-upgrade-linux-image-5-15-0-1094-azureubuntu-upgrade-linux-image-5-15-0-1094-azure-fipsubuntu-upgrade-linux-image-5-15-0-145-fipsubuntu-upgrade-linux-image-5-15-0-145-lowlatencyubuntu-upgrade-linux-image-5-15-0-145-lowlatency-64kubuntu-upgrade-linux-image-5-15-0-151-genericubuntu-upgrade-linux-image-5-15-0-151-generic-64kubuntu-upgrade-linux-image-5-15-0-151-generic-lpaeubuntu-upgrade-linux-image-5-4-0-1053-iotubuntu-upgrade-linux-image-5-4-0-1067-xilinx-zynqmpubuntu-upgrade-linux-image-5-4-0-1095-ibmubuntu-upgrade-linux-image-5-4-0-1108-bluefieldubuntu-upgrade-linux-image-5-4-0-1123-fipsubuntu-upgrade-linux-image-5-4-0-1132-raspiubuntu-upgrade-linux-image-5-4-0-1136-kvmubuntu-upgrade-linux-image-5-4-0-1147-oracleubuntu-upgrade-linux-image-5-4-0-1148-oracleubuntu-upgrade-linux-image-5-4-0-1149-awsubuntu-upgrade-linux-image-5-4-0-1149-aws-fipsubuntu-upgrade-linux-image-5-4-0-1152-gcpubuntu-upgrade-linux-image-5-4-0-1152-gcp-fipsubuntu-upgrade-linux-image-5-4-0-1154-azureubuntu-upgrade-linux-image-5-4-0-1155-azure-fipsubuntu-upgrade-linux-image-5-4-0-220-genericubuntu-upgrade-linux-image-5-4-0-220-generic-lpaeubuntu-upgrade-linux-image-5-4-0-220-lowlatencyubuntu-upgrade-linux-image-6-14-0-1007-realtimeubuntu-upgrade-linux-image-6-14-0-1008-oemubuntu-upgrade-linux-image-6-14-0-1010-awsubuntu-upgrade-linux-image-6-14-0-1010-aws-64kubuntu-upgrade-linux-image-6-14-0-1010-azureubuntu-upgrade-linux-image-6-14-0-1010-oracleubuntu-upgrade-linux-image-6-14-0-1010-oracle-64kubuntu-upgrade-linux-image-6-14-0-1010-raspiubuntu-upgrade-linux-image-6-14-0-1012-gcpubuntu-upgrade-linux-image-6-14-0-1012-gcp-64kubuntu-upgrade-linux-image-6-14-0-27-genericubuntu-upgrade-linux-image-6-14-0-27-generic-64kubuntu-upgrade-linux-image-6-8-0-1016-gkeopubuntu-upgrade-linux-image-6-8-0-1022-azure-nvidiaubuntu-upgrade-linux-image-6-8-0-1029-gkeubuntu-upgrade-linux-image-6-8-0-1030-ibmubuntu-upgrade-linux-image-6-8-0-1030-oracleubuntu-upgrade-linux-image-6-8-0-1030-oracle-64kubuntu-upgrade-linux-image-6-8-0-1032-nvidiaubuntu-upgrade-linux-image-6-8-0-1032-nvidia-64kubuntu-upgrade-linux-image-6-8-0-1032-nvidia-lowlatencyubuntu-upgrade-linux-image-6-8-0-1032-nvidia-lowlatency-64kubuntu-upgrade-linux-image-6-8-0-1032-oemubuntu-upgrade-linux-image-6-8-0-1032-raspiubuntu-upgrade-linux-image-6-8-0-1033-awsubuntu-upgrade-linux-image-6-8-0-1033-aws-64kubuntu-upgrade-linux-image-6-8-0-1034-azureubuntu-upgrade-linux-image-6-8-0-1034-azure-fdeubuntu-upgrade-linux-image-6-8-0-1034-gcpubuntu-upgrade-linux-image-6-8-0-1034-gcp-64kubuntu-upgrade-linux-image-6-8-0-2028-raspi-realtimeubuntu-upgrade-linux-image-6-8-0-65-genericubuntu-upgrade-linux-image-6-8-0-65-generic-64kubuntu-upgrade-linux-image-6-8-0-65-lowlatencyubuntu-upgrade-linux-image-6-8-0-65-lowlatency-64kubuntu-upgrade-linux-image-6-8-0-71-genericubuntu-upgrade-linux-image-6-8-0-71-generic-64kubuntu-upgrade-linux-image-6-8-1-1026-realtimeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-5-15ubuntu-upgrade-linux-image-aws-5-4ubuntu-upgrade-linux-image-aws-6-14ubuntu-upgrade-linux-image-aws-6-8ubuntu-upgrade-linux-image-aws-64kubuntu-upgrade-linux-image-aws-64k-5-15ubuntu-upgrade-linux-image-aws-64k-6-14ubuntu-upgrade-linux-image-aws-64k-6-8ubuntu-upgrade-linux-image-aws-64k-lts-22-04ubuntu-upgrade-linux-image-aws-64k-lts-24-04ubuntu-upgrade-linux-image-aws-fipsubuntu-upgrade-linux-image-aws-fips-5-15ubuntu-upgrade-linux-image-aws-fips-5-4ubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-aws-lts-24-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-5-15ubuntu-upgrade-linux-image-azure-5-4ubuntu-upgrade-linux-image-azure-6-14ubuntu-upgrade-linux-image-azure-6-8ubuntu-upgrade-linux-image-azure-cvmubuntu-upgrade-linux-image-azure-fdeubuntu-upgrade-linux-image-azure-fde-6-8ubuntu-upgrade-linux-image-azure-fde-lts-24-04ubuntu-upgrade-linux-image-azure-fipsubuntu-upgrade-linux-image-azure-fips-5-15ubuntu-upgrade-linux-image-azure-fips-5-4ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-azure-lts-24-04ubuntu-upgrade-linux-image-azure-nvidiaubuntu-upgrade-linux-image-azure-nvidia-6-8ubuntu-upgrade-linux-image-azure-nvidia-lts-24-04ubuntu-upgrade-linux-image-bluefieldubuntu-upgrade-linux-image-bluefield-5-4ubuntu-upgrade-linux-image-fipsubuntu-upgrade-linux-image-fips-5-15ubuntu-upgrade-linux-image-fips-5-4ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-5-15ubuntu-upgrade-linux-image-gcp-5-4ubuntu-upgrade-linux-image-gcp-6-14ubuntu-upgrade-linux-image-gcp-6-8ubuntu-upgrade-linux-image-gcp-64kubuntu-upgrade-linux-image-gcp-64k-6-14ubuntu-upgrade-linux-image-gcp-64k-6-8ubuntu-upgrade-linux-image-gcp-64k-lts-24-04ubuntu-upgrade-linux-image-gcp-fipsubuntu-upgrade-linux-image-gcp-fips-5-15ubuntu-upgrade-linux-image-gcp-fips-5-4ubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-gcp-lts-22-04ubuntu-upgrade-linux-image-gcp-lts-24-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-5-15ubuntu-upgrade-linux-image-generic-5-4ubuntu-upgrade-linux-image-generic-6-14ubuntu-upgrade-linux-image-generic-6-8ubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-5-15ubuntu-upgrade-linux-image-generic-64k-6-14ubuntu-upgrade-linux-image-generic-64k-6-8ubuntu-upgrade-linux-image-generic-64k-hwe-20-04ubuntu-upgrade-linux-image-generic-64k-hwe-22-04ubuntu-upgrade-linux-image-generic-64k-hwe-24-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-20-04ubuntu-upgrade-linux-image-generic-hwe-22-04ubuntu-upgrade-linux-image-generic-hwe-24-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-5-15ubuntu-upgrade-linux-image-generic-lpae-5-4ubuntu-upgrade-linux-image-generic-lpae-hwe-20-04ubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gke-6-8ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-gkeop-6-8ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-5-15ubuntu-upgrade-linux-image-ibm-5-4ubuntu-upgrade-linux-image-ibm-6-8ubuntu-upgrade-linux-image-ibm-classicubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-ibm-lts-24-04ubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-intel-iot-realtimeubuntu-upgrade-linux-image-intel-iot-realtime-5-15ubuntu-upgrade-linux-image-intel-iotgubuntu-upgrade-linux-image-intel-iotg-5-15ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-kvm-5-15ubuntu-upgrade-linux-image-kvm-5-4ubuntu-upgrade-linux-image-laptop-23-10ubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-5-15ubuntu-upgrade-linux-image-lowlatency-5-4ubuntu-upgrade-linux-image-lowlatency-6-8ubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-5-15ubuntu-upgrade-linux-image-lowlatency-64k-6-8ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-hwe-22-04ubuntu-upgrade-linux-image-nvidiaubuntu-upgrade-linux-image-nvidia-5-15ubuntu-upgrade-linux-image-nvidia-6-8ubuntu-upgrade-linux-image-nvidia-64kubuntu-upgrade-linux-image-nvidia-64k-6-8ubuntu-upgrade-linux-image-nvidia-64k-hwe-22-04ubuntu-upgrade-linux-image-nvidia-hwe-22-04ubuntu-upgrade-linux-image-nvidia-lowlatencyubuntu-upgrade-linux-image-nvidia-lowlatency-5-15ubuntu-upgrade-linux-image-nvidia-lowlatency-6-8ubuntu-upgrade-linux-image-nvidia-lowlatency-64kubuntu-upgrade-linux-image-nvidia-lowlatency-64k-6-8ubuntu-upgrade-linux-image-nvidia-tegraubuntu-upgrade-linux-image-nvidia-tegra-5-15ubuntu-upgrade-linux-image-nvidia-tegra-igxubuntu-upgrade-linux-image-nvidia-tegra-igx-5-15ubuntu-upgrade-linux-image-nvidia-tegra-igx-rtubuntu-upgrade-linux-image-nvidia-tegra-igx-rt-5-15ubuntu-upgrade-linux-image-nvidia-tegra-rtubuntu-upgrade-linux-image-nvidia-tegra-rt-5-15ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-20-04ubuntu-upgrade-linux-image-oem-20-04bubuntu-upgrade-linux-image-oem-20-04cubuntu-upgrade-linux-image-oem-20-04dubuntu-upgrade-linux-image-oem-22-04ubuntu-upgrade-linux-image-oem-22-04aubuntu-upgrade-linux-image-oem-22-04bubuntu-upgrade-linux-image-oem-22-04cubuntu-upgrade-linux-image-oem-22-04dubuntu-upgrade-linux-image-oem-24-04ubuntu-upgrade-linux-image-oem-24-04aubuntu-upgrade-linux-image-oem-24-04cubuntu-upgrade-linux-image-oem-6-14ubuntu-upgrade-linux-image-oem-6-8ubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-5-15ubuntu-upgrade-linux-image-oracle-5-4ubuntu-upgrade-linux-image-oracle-6-14ubuntu-upgrade-linux-image-oracle-6-8ubuntu-upgrade-linux-image-oracle-64kubuntu-upgrade-linux-image-oracle-64k-6-14ubuntu-upgrade-linux-image-oracle-64k-6-8ubuntu-upgrade-linux-image-oracle-64k-lts-24-04ubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-oracle-lts-22-04ubuntu-upgrade-linux-image-oracle-lts-24-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-5-15ubuntu-upgrade-linux-image-raspi-5-4ubuntu-upgrade-linux-image-raspi-6-14ubuntu-upgrade-linux-image-raspi-6-8ubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi-realtimeubuntu-upgrade-linux-image-raspi-realtime-6-8ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-realtimeubuntu-upgrade-linux-image-realtime-5-15ubuntu-upgrade-linux-image-realtime-6-14ubuntu-upgrade-linux-image-realtime-6-8-1ubuntu-upgrade-linux-image-snapdragon-5-4ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-5-15ubuntu-upgrade-linux-image-virtual-5-4ubuntu-upgrade-linux-image-virtual-6-14ubuntu-upgrade-linux-image-virtual-6-8ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-20-04ubuntu-upgrade-linux-image-virtual-hwe-22-04ubuntu-upgrade-linux-image-virtual-hwe-24-04ubuntu-upgrade-linux-image-xilinx-zynqmpubuntu-upgrade-linux-image-xilinx-zynqmp-5-15ubuntu-upgrade-linux-image-xilinx-zynqmp-5-4

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.