Ubuntu 25.10: GPSd Critical Denial of Service Vulnerability USN-7948-1

ubuntu

January 8, 2026

Several security issues were fixed in GPSd.

Summary

Several security issues were fixed in GPSd.

Software Description:

- gpsd: Global Positioning System

Details:

It was discovered that GPSd incorrectly handled processing NMEA2000

packets. An attacker could use this issue to cause GPSd to crash, resulting

in a denial of service, or possibly execute arbitrary code.

(CVE-2025-67268)

It was discovered that GPSd incorrectly handled processing NAVCOM packets.

An attacker could possibly use this issue to cause GPSd to consume

resources, resulting in a denial of service. (CVE-2025-67269)

Topics Covered

security advisory denial of service critical Ubuntu gpsd nmea2000

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
  gpsd                            3.25-5ubuntu1.25.10.1
  libgps30t64                     3.25-5ubuntu1.25.10.1

Ubuntu 25.04
  gpsd                            3.25-5ubuntu1.25.04.1
  libgps30t64                     3.25-5ubuntu1.25.04.1

Ubuntu 24.04 LTS
  gpsd                            3.25-3ubuntu3.2
  libgps30t64                     3.25-3ubuntu3.2

Ubuntu 22.04 LTS
  gpsd                            3.22-4ubuntu2.1
  libgps28                        3.22-4ubuntu2.1

In general, a standard system update will make all the necessary changes.