vulnerability

Ubuntu: (Multiple Advisories) (CVE-2025-38352): Linux kernel vulnerabilities

Severity
7
CVSS
(AV:L/AC:M/Au:N/C:C/I:C/A:C)
Published
Jul 22, 2025
Added
Jul 28, 2025
Modified
Feb 2, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()

If an exiting non-autoreaping task has already passed exit_notify() and
calls handle_posix_cpu_timers() from IRQ, it can be reaped by its parent
or debugger right after unlock_task_sighand().

If a concurrent posix_cpu_timer_del() runs at that moment, it won't be
able to detect timer->it.cpu.firing != 0: cpu_timer_task_rcu() and/or
lock_task_sighand() will fail.

Add the tsk->exit_state check into run_posix_cpu_timers() to fix this.

This fix is not needed if CONFIG_POSIX_CPU_TIMERS_TASK_WORK=y, because
exit_task_work() is called before exit_notify(). But the check still
makes sense, task_work_add(&tsk->posix_cputimers_work.work) will fail
anyway in this case.

Solutions

ubuntu-upgrade-linux-image-3-13-0-210-genericubuntu-upgrade-linux-image-3-13-0-210-lowlatencyubuntu-upgrade-linux-image-4-15-0-1141-fipsubuntu-upgrade-linux-image-4-15-0-1148-oracleubuntu-upgrade-linux-image-4-15-0-1168-kvmubuntu-upgrade-linux-image-4-15-0-1179-gcpubuntu-upgrade-linux-image-4-15-0-1186-awsubuntu-upgrade-linux-image-4-15-0-1194-azureubuntu-upgrade-linux-image-4-15-0-2087-gcp-fipsubuntu-upgrade-linux-image-4-15-0-2104-azure-fipsubuntu-upgrade-linux-image-4-15-0-2124-aws-fipsubuntu-upgrade-linux-image-4-15-0-243-genericubuntu-upgrade-linux-image-4-15-0-243-lowlatencyubuntu-upgrade-linux-image-4-4-0-1119-fipsubuntu-upgrade-linux-image-4-4-0-1149-awsubuntu-upgrade-linux-image-4-4-0-1150-kvmubuntu-upgrade-linux-image-4-4-0-1187-awsubuntu-upgrade-linux-image-4-4-0-274-genericubuntu-upgrade-linux-image-4-4-0-274-lowlatencyubuntu-upgrade-linux-image-5-15-0-1034-nvidia-tegra-igxubuntu-upgrade-linux-image-5-15-0-1034-nvidia-tegra-igx-rtubuntu-upgrade-linux-image-5-15-0-1045-nvidia-tegraubuntu-upgrade-linux-image-5-15-0-1045-nvidia-tegra-rtubuntu-upgrade-linux-image-5-15-0-1056-xilinx-zynqmpubuntu-upgrade-linux-image-5-15-0-1075-gkeopubuntu-upgrade-linux-image-5-15-0-1085-intel-iot-realtimeubuntu-upgrade-linux-image-5-15-0-1086-ibmubuntu-upgrade-linux-image-5-15-0-1086-raspiubuntu-upgrade-linux-image-5-15-0-1087-intel-iotgubuntu-upgrade-linux-image-5-15-0-1087-nvidiaubuntu-upgrade-linux-image-5-15-0-1087-nvidia-lowlatencyubuntu-upgrade-linux-image-5-15-0-1088-kvmubuntu-upgrade-linux-image-5-15-0-1089-gkeubuntu-upgrade-linux-image-5-15-0-1090-oracleubuntu-upgrade-linux-image-5-15-0-1092-awsubuntu-upgrade-linux-image-5-15-0-1092-aws-64kubuntu-upgrade-linux-image-5-15-0-1092-aws-fipsubuntu-upgrade-linux-image-5-15-0-1092-gcpubuntu-upgrade-linux-image-5-15-0-1092-gcp-fipsubuntu-upgrade-linux-image-5-15-0-1092-realtimeubuntu-upgrade-linux-image-5-15-0-1096-azureubuntu-upgrade-linux-image-5-15-0-1096-azure-fipsubuntu-upgrade-linux-image-5-15-0-156-fipsubuntu-upgrade-linux-image-5-15-0-156-genericubuntu-upgrade-linux-image-5-15-0-156-generic-64kubuntu-upgrade-linux-image-5-15-0-156-generic-lpaeubuntu-upgrade-linux-image-5-15-0-156-lowlatencyubuntu-upgrade-linux-image-5-15-0-156-lowlatency-64kubuntu-upgrade-linux-image-5-4-0-1056-iotubuntu-upgrade-linux-image-5-4-0-1070-xilinx-zynqmpubuntu-upgrade-linux-image-5-4-0-1098-ibmubuntu-upgrade-linux-image-5-4-0-1126-fipsubuntu-upgrade-linux-image-5-4-0-1135-raspiubuntu-upgrade-linux-image-5-4-0-1139-kvmubuntu-upgrade-linux-image-5-4-0-1150-oracleubuntu-upgrade-linux-image-5-4-0-1152-awsubuntu-upgrade-linux-image-5-4-0-1152-aws-fipsubuntu-upgrade-linux-image-5-4-0-1155-gcpubuntu-upgrade-linux-image-5-4-0-1155-gcp-fipsubuntu-upgrade-linux-image-5-4-0-1156-azureubuntu-upgrade-linux-image-5-4-0-1157-azure-fipsubuntu-upgrade-linux-image-5-4-0-223-genericubuntu-upgrade-linux-image-5-4-0-223-generic-lpaeubuntu-upgrade-linux-image-5-4-0-223-lowlatencyubuntu-upgrade-linux-image-6-14-0-1012-azureubuntu-upgrade-linux-image-6-14-0-1012-oemubuntu-upgrade-linux-image-6-14-0-1012-realtimeubuntu-upgrade-linux-image-6-14-0-1013-awsubuntu-upgrade-linux-image-6-14-0-1013-aws-64kubuntu-upgrade-linux-image-6-14-0-1013-oracleubuntu-upgrade-linux-image-6-14-0-1013-oracle-64kubuntu-upgrade-linux-image-6-14-0-1014-raspiubuntu-upgrade-linux-image-6-14-0-1016-gcpubuntu-upgrade-linux-image-6-14-0-1016-gcp-64kubuntu-upgrade-linux-image-6-14-0-32-genericubuntu-upgrade-linux-image-6-14-0-32-generic-64kubuntu-upgrade-linux-image-6-8-0-1019-xilinxubuntu-upgrade-linux-image-6-8-0-1026-gkeopubuntu-upgrade-linux-image-6-8-0-1029-azure-nvidiaubuntu-upgrade-linux-image-6-8-0-1039-gkeubuntu-upgrade-linux-image-6-8-0-1039-gke-64kubuntu-upgrade-linux-image-6-8-0-1039-oracleubuntu-upgrade-linux-image-6-8-0-1039-oracle-64kubuntu-upgrade-linux-image-6-8-0-1040-ibmubuntu-upgrade-linux-image-6-8-0-1042-awsubuntu-upgrade-linux-image-6-8-0-1042-aws-64kubuntu-upgrade-linux-image-6-8-0-1042-nvidiaubuntu-upgrade-linux-image-6-8-0-1042-nvidia-64kubuntu-upgrade-linux-image-6-8-0-1042-nvidia-lowlatencyubuntu-upgrade-linux-image-6-8-0-1042-nvidia-lowlatency-64kubuntu-upgrade-linux-image-6-8-0-1042-raspiubuntu-upgrade-linux-image-6-8-0-1043-gcpubuntu-upgrade-linux-image-6-8-0-1043-gcp-64kubuntu-upgrade-linux-image-6-8-0-1044-azureubuntu-upgrade-linux-image-6-8-0-1044-azure-fipsubuntu-upgrade-linux-image-6-8-0-2033-raspi-realtimeubuntu-upgrade-linux-image-6-8-0-87-genericubuntu-upgrade-linux-image-6-8-0-87-generic-64kubuntu-upgrade-linux-image-6-8-0-87-lowlatencyubuntu-upgrade-linux-image-6-8-0-87-lowlatency-64kubuntu-upgrade-linux-image-6-8-1-1037-realtimeubuntu-upgrade-linux-image-awsubuntu-upgrade-linux-image-aws-4-15ubuntu-upgrade-linux-image-aws-5-15ubuntu-upgrade-linux-image-aws-5-4ubuntu-upgrade-linux-image-aws-6-14ubuntu-upgrade-linux-image-aws-6-8ubuntu-upgrade-linux-image-aws-64kubuntu-upgrade-linux-image-aws-64k-5-15ubuntu-upgrade-linux-image-aws-64k-6-14ubuntu-upgrade-linux-image-aws-64k-6-8ubuntu-upgrade-linux-image-aws-64k-lts-22-04ubuntu-upgrade-linux-image-aws-64k-lts-24-04ubuntu-upgrade-linux-image-aws-fipsubuntu-upgrade-linux-image-aws-fips-4-15ubuntu-upgrade-linux-image-aws-fips-5-15ubuntu-upgrade-linux-image-aws-fips-5-4ubuntu-upgrade-linux-image-aws-hweubuntu-upgrade-linux-image-aws-lts-18-04ubuntu-upgrade-linux-image-aws-lts-20-04ubuntu-upgrade-linux-image-aws-lts-22-04ubuntu-upgrade-linux-image-aws-lts-24-04ubuntu-upgrade-linux-image-azureubuntu-upgrade-linux-image-azure-4-15ubuntu-upgrade-linux-image-azure-5-15ubuntu-upgrade-linux-image-azure-5-4ubuntu-upgrade-linux-image-azure-6-14ubuntu-upgrade-linux-image-azure-6-8ubuntu-upgrade-linux-image-azure-cvmubuntu-upgrade-linux-image-azure-fipsubuntu-upgrade-linux-image-azure-fips-4-15ubuntu-upgrade-linux-image-azure-fips-5-15ubuntu-upgrade-linux-image-azure-fips-5-4ubuntu-upgrade-linux-image-azure-fips-6-8ubuntu-upgrade-linux-image-azure-lts-18-04ubuntu-upgrade-linux-image-azure-lts-20-04ubuntu-upgrade-linux-image-azure-lts-22-04ubuntu-upgrade-linux-image-azure-lts-24-04ubuntu-upgrade-linux-image-azure-nvidia-6-8ubuntu-upgrade-linux-image-azure-nvidia-lts-24-04ubuntu-upgrade-linux-image-fipsubuntu-upgrade-linux-image-fips-5-15ubuntu-upgrade-linux-image-fips-5-4ubuntu-upgrade-linux-image-gcpubuntu-upgrade-linux-image-gcp-4-15ubuntu-upgrade-linux-image-gcp-5-15ubuntu-upgrade-linux-image-gcp-5-4ubuntu-upgrade-linux-image-gcp-6-14ubuntu-upgrade-linux-image-gcp-6-8ubuntu-upgrade-linux-image-gcp-64kubuntu-upgrade-linux-image-gcp-64k-6-14ubuntu-upgrade-linux-image-gcp-64k-6-8ubuntu-upgrade-linux-image-gcp-64k-lts-24-04ubuntu-upgrade-linux-image-gcp-fipsubuntu-upgrade-linux-image-gcp-fips-4-15ubuntu-upgrade-linux-image-gcp-fips-5-15ubuntu-upgrade-linux-image-gcp-fips-5-4ubuntu-upgrade-linux-image-gcp-lts-18-04ubuntu-upgrade-linux-image-gcp-lts-20-04ubuntu-upgrade-linux-image-gcp-lts-22-04ubuntu-upgrade-linux-image-gcp-lts-24-04ubuntu-upgrade-linux-image-genericubuntu-upgrade-linux-image-generic-5-15ubuntu-upgrade-linux-image-generic-5-4ubuntu-upgrade-linux-image-generic-6-14ubuntu-upgrade-linux-image-generic-6-8ubuntu-upgrade-linux-image-generic-64kubuntu-upgrade-linux-image-generic-64k-5-15ubuntu-upgrade-linux-image-generic-64k-6-14ubuntu-upgrade-linux-image-generic-64k-6-8ubuntu-upgrade-linux-image-generic-64k-hwe-22-04ubuntu-upgrade-linux-image-generic-64k-hwe-24-04ubuntu-upgrade-linux-image-generic-hwe-16-04ubuntu-upgrade-linux-image-generic-hwe-18-04ubuntu-upgrade-linux-image-generic-hwe-22-04ubuntu-upgrade-linux-image-generic-hwe-24-04ubuntu-upgrade-linux-image-generic-lpaeubuntu-upgrade-linux-image-generic-lpae-5-15ubuntu-upgrade-linux-image-generic-lpae-5-4ubuntu-upgrade-linux-image-generic-lts-trustyubuntu-upgrade-linux-image-generic-lts-xenialubuntu-upgrade-linux-image-gkeubuntu-upgrade-linux-image-gke-5-15ubuntu-upgrade-linux-image-gke-6-8ubuntu-upgrade-linux-image-gke-64kubuntu-upgrade-linux-image-gke-64k-6-8ubuntu-upgrade-linux-image-gkeopubuntu-upgrade-linux-image-gkeop-5-15ubuntu-upgrade-linux-image-gkeop-6-8ubuntu-upgrade-linux-image-ibmubuntu-upgrade-linux-image-ibm-5-15ubuntu-upgrade-linux-image-ibm-5-4ubuntu-upgrade-linux-image-ibm-6-8ubuntu-upgrade-linux-image-ibm-classicubuntu-upgrade-linux-image-ibm-lts-20-04ubuntu-upgrade-linux-image-ibm-lts-24-04ubuntu-upgrade-linux-image-intelubuntu-upgrade-linux-image-intel-iot-realtimeubuntu-upgrade-linux-image-intel-iot-realtime-5-15ubuntu-upgrade-linux-image-intel-iotgubuntu-upgrade-linux-image-intel-iotg-5-15ubuntu-upgrade-linux-image-kvmubuntu-upgrade-linux-image-kvm-5-15ubuntu-upgrade-linux-image-kvm-5-4ubuntu-upgrade-linux-image-lowlatencyubuntu-upgrade-linux-image-lowlatency-5-15ubuntu-upgrade-linux-image-lowlatency-5-4ubuntu-upgrade-linux-image-lowlatency-6-8ubuntu-upgrade-linux-image-lowlatency-64kubuntu-upgrade-linux-image-lowlatency-64k-5-15ubuntu-upgrade-linux-image-lowlatency-64k-6-8ubuntu-upgrade-linux-image-lowlatency-64k-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-64k-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-hwe-16-04ubuntu-upgrade-linux-image-lowlatency-hwe-18-04ubuntu-upgrade-linux-image-lowlatency-hwe-20-04ubuntu-upgrade-linux-image-lowlatency-hwe-22-04ubuntu-upgrade-linux-image-lowlatency-lts-xenialubuntu-upgrade-linux-image-nvidiaubuntu-upgrade-linux-image-nvidia-5-15ubuntu-upgrade-linux-image-nvidia-6-8ubuntu-upgrade-linux-image-nvidia-64kubuntu-upgrade-linux-image-nvidia-64k-6-8ubuntu-upgrade-linux-image-nvidia-64k-hwe-22-04ubuntu-upgrade-linux-image-nvidia-hwe-22-04ubuntu-upgrade-linux-image-nvidia-lowlatencyubuntu-upgrade-linux-image-nvidia-lowlatency-5-15ubuntu-upgrade-linux-image-nvidia-lowlatency-6-8ubuntu-upgrade-linux-image-nvidia-lowlatency-64kubuntu-upgrade-linux-image-nvidia-lowlatency-64k-6-8ubuntu-upgrade-linux-image-nvidia-tegraubuntu-upgrade-linux-image-nvidia-tegra-5-15ubuntu-upgrade-linux-image-nvidia-tegra-igxubuntu-upgrade-linux-image-nvidia-tegra-igx-5-15ubuntu-upgrade-linux-image-nvidia-tegra-igx-rtubuntu-upgrade-linux-image-nvidia-tegra-igx-rt-5-15ubuntu-upgrade-linux-image-nvidia-tegra-rtubuntu-upgrade-linux-image-nvidia-tegra-rt-5-15ubuntu-upgrade-linux-image-oemubuntu-upgrade-linux-image-oem-22-04ubuntu-upgrade-linux-image-oem-22-04aubuntu-upgrade-linux-image-oem-22-04bubuntu-upgrade-linux-image-oem-22-04cubuntu-upgrade-linux-image-oem-22-04dubuntu-upgrade-linux-image-oem-24-04ubuntu-upgrade-linux-image-oem-24-04aubuntu-upgrade-linux-image-oem-24-04bubuntu-upgrade-linux-image-oem-24-04cubuntu-upgrade-linux-image-oem-6-14ubuntu-upgrade-linux-image-oem-osp1ubuntu-upgrade-linux-image-oracleubuntu-upgrade-linux-image-oracle-4-15ubuntu-upgrade-linux-image-oracle-5-15ubuntu-upgrade-linux-image-oracle-5-4ubuntu-upgrade-linux-image-oracle-6-14ubuntu-upgrade-linux-image-oracle-6-8ubuntu-upgrade-linux-image-oracle-64kubuntu-upgrade-linux-image-oracle-64k-6-14ubuntu-upgrade-linux-image-oracle-64k-6-8ubuntu-upgrade-linux-image-oracle-64k-lts-24-04ubuntu-upgrade-linux-image-oracle-lts-18-04ubuntu-upgrade-linux-image-oracle-lts-20-04ubuntu-upgrade-linux-image-oracle-lts-22-04ubuntu-upgrade-linux-image-oracle-lts-24-04ubuntu-upgrade-linux-image-raspiubuntu-upgrade-linux-image-raspi-5-15ubuntu-upgrade-linux-image-raspi-5-4ubuntu-upgrade-linux-image-raspi-6-14ubuntu-upgrade-linux-image-raspi-6-8ubuntu-upgrade-linux-image-raspi-hwe-18-04ubuntu-upgrade-linux-image-raspi-nolpaeubuntu-upgrade-linux-image-raspi-realtimeubuntu-upgrade-linux-image-raspi-realtime-6-8ubuntu-upgrade-linux-image-raspi2ubuntu-upgrade-linux-image-realtimeubuntu-upgrade-linux-image-realtime-5-15ubuntu-upgrade-linux-image-realtime-6-14ubuntu-upgrade-linux-image-realtime-6-8-1ubuntu-upgrade-linux-image-realtime-hwe-22-04ubuntu-upgrade-linux-image-realtime-hwe-24-04ubuntu-upgrade-linux-image-serverubuntu-upgrade-linux-image-snapdragon-5-4ubuntu-upgrade-linux-image-snapdragon-hwe-18-04ubuntu-upgrade-linux-image-virtualubuntu-upgrade-linux-image-virtual-5-15ubuntu-upgrade-linux-image-virtual-5-4ubuntu-upgrade-linux-image-virtual-6-14ubuntu-upgrade-linux-image-virtual-6-8ubuntu-upgrade-linux-image-virtual-hwe-16-04ubuntu-upgrade-linux-image-virtual-hwe-18-04ubuntu-upgrade-linux-image-virtual-hwe-22-04ubuntu-upgrade-linux-image-virtual-hwe-24-04ubuntu-upgrade-linux-image-virtual-lts-xenialubuntu-upgrade-linux-image-xilinxubuntu-upgrade-linux-image-xilinx-6-8ubuntu-upgrade-linux-image-xilinx-zynqmpubuntu-upgrade-linux-image-xilinx-zynqmp-5-15ubuntu-upgrade-linux-image-xilinx-zynqmp-5-4

References

    Title
    NEW

    Explore Exposure Command

    Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.