Update11/22/2025

USN-7879-1: Linux kernel vulnerabilities

Ubuntu Desktop
Canonical

USN-7879-1: Linux kernel vulnerabilities

Publication date: 21 November 2025
Overview: Several security issues were fixed in the Linux kernel.

Packages

linux - Linux kernel
linux-aws - Linux kernel for Amazon Web Services (AWS) systems
linux-gcp - Linux kernel for Google Cloud Platform (GCP) systems
linux-hwe-6.14 - Linux hardware enablement (HWE) kernel
linux-oracle - Linux kernel for Oracle Cloud systems
linux-realtime - Linux kernel for Real-time systems

Details
It was discovered that improper initialization of CPU cache memory could
allow a local attacker with hypervisor access to overwrite SEV-SNP guest
memory resulting in loss of data integrity. (CVE-2024-36331)

Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:

ARM64 architecture;
PowerPC architecture;
S390 architecture;
x86 architecture;
Network block device driver;
Character device driver;
Clock framework and drivers;
Data acquisition framework and drivers;
Hardware crypto device drivers;
Device frequency scaling framework;
DMA engine subsystem;
EDAC drivers;
GPU drivers;
HID subsystem;
Hardware monitoring drivers;
I2C subsystem;
IIO subsystem;
IIO ADC drivers;
InfiniBand drivers;
Input Device core drivers;
Multiple devices driver;
Media drivers;
Network drivers;
Mellanox network drivers;
PCI subsystem;
PHY drivers;
Pin controllers subsystem;
x86 platform drivers;
Power supply drivers;
Powercap sysfs driver;
Voltage and Current Regulator drivers;
S/390 drivers;
ASPEED SoC drivers;
SPI subsystem;
small TFT LCD display modules;
Media staging drivers;
USB Gadget drivers;
vDPA drivers;
VFIO drivers;
Framebuffer layer;
Xen hypervisor drivers;
BTRFS file system;
Ceph distributed file system;
EFI Variable file system;
File systems infrastructure;
F2FS file system;
GFS2 file system;
Network file systems library;
Network file system (NFS) client;
Network file system (NFS) server daemon;
NILFS2 file system;
NTFS3 file system;
Proc file system;
SMB network file system;
DRM display driver;
io_uring subsystem;
Internal shared memory driver;
padata parallel execution mechanism;
Networking subsytem;
Bluetooth subsystem;
Netfilter;
UDP network protocol;
Tracing infrastructure;
BPF subsystem;
Perf events;
Padata parallel execution mechanism;
Codetag library;
KASAN memory debugging framework;
Memory management;
802.1Q VLAN protocol;
Appletalk network protocol;
Asynchronous Transfer Mode (ATM) subsystem;
Networking core;
IPv4 networking;
IPv6 networking;
MAC80211 subsystem;
Multipath TCP;
Netlink;
RxRPC session sockets;
Network traffic control;
SMC sockets;
Sun RPC protocol;
TIPC protocol;
TLS protocol;
VMware vSockets driver;
Wireless networking;
XFRM subsystem;
ADI SoundPort AD1816A based soundcard drivers;
MediaTek ASoC drivers;
SOF drivers;
USB sound devices;
KVM subsystem

Update instructions
The problem can be corrected by updating your system to the following package versions:

25.04 plucky

linux-image-6.14.0-1016-realtime – 6.14.0-1016.16
linux-image-6.14.0-1017-aws – 6.14.0-1017.17
linux-image-6.14.0-1017-aws-64k – 6.14.0-1017.17
linux-image-6.14.0-1017-oracle – 6.14.0-1017.17
linux-image-6.14.0-1017-oracle-64k – 6.14.0-1017.17
linux-image-6.14.0-1020-gcp – 6.14.0-1020.21
linux-image-6.14.0-1020-gcp-64k – 6.14.0-1020.21
linux-image-6.14.0-36-generic – 6.14.0-36.36
linux-image-6.14.0-36-generic-64k – 6.14.0-36.36
linux-image-aws – 6.14.0-1017.17
linux-image-aws-6.14 – 6.14.0-1017.17
linux-image-aws-64k – 6.14.0-1017.17
linux-image-aws-64k-6.14 – 6.14.0-1017.17
linux-image-gcp – 6.14.0-1020.21
linux-image-gcp-6.14 – 6.14.0-1020.21
linux-image-gcp-64k – 6.14.0-1020.21
linux-image-gcp-64k-6.14 – 6.14.0-1020.21
linux-image-generic – 6.14.0-36.36
linux-image-generic-6.14 – 6.14.0-36.36
linux-image-generic-64k – 6.14.0-36.36
linux-image-generic-64k-6.14 – 6.14.0-36.36
linux-image-oem-24.04 – 6.14.0-36.36
linux-image-oem-24.04a – 6.14.0-36.36
linux-image-oracle – 6.14.0-1017.17
linux-image-oracle-6.14 – 6.14.0-1017.17
linux-image-oracle-64k – 6.14.0-1017.17
linux-image-oracle-64k-6.14 – 6.14.0-1017.17
linux-image-realtime – 6.14.0-1016.16
linux-image-realtime-6.14 – 6.14.0-1016.16
linux-image-virtual – 6.14.0-36.36
linux-image-virtual-6.14 – 6.14.0-36.36

24.04 LTS noble

linux-image-6.14.0-36-generic – 6.14.0-36.36~24.04.1
linux-image-6.14.0-36-generic-64k – 6.14.0-36.36~24.04.1
linux-image-generic-6.14 – 6.14.0-36.36~24.04.1
linux-image-generic-64k-6.14 – 6.14.0-36.36~24.04.1
linux-image-generic-64k-hwe-24.04 – 6.14.0-36.36~24.04.1
linux-image-generic-hwe-24.04 – 6.14.0-36.36~24.04.1
linux-image-virtual-6.14 – 6.14.0-36.36~24.04.1
linux-image-virtual-hwe-24.04 – 6.14.0-36.36~24.04.1