Ubuntu 25.10 Linux Kernel Critical Denial of Service Escalation USN-8094-1

ubuntu

March 16, 2026

Several security issues were fixed in the Linux kernel.

Summary

Several security issues were fixed in the Linux kernel.

Software Description:

- linux: Linux kernel

- linux-aws: Linux kernel for Amazon Web Services (AWS) systems

- linux-gcp: Linux kernel for Google Cloud Platform (GCP) systems

- linux-oracle: Linux kernel for Oracle Cloud systems

- linux-aws-6.17: Linux kernel for Amazon Web Services (AWS) systems

- linux-hwe-6.17: Linux hardware enablement (HWE) kernel

- linux-oracle-6.17: Linux kernel for Oracle Cloud systems

Details:

Qualys discovered that several vulnerabilities existed in the AppArmor

Linux kernel Security Module (LSM). An unprivileged local attacker could

use these issues to load, replace, and remove arbitrary AppArmor profiles

causing denial of service, exposure of sensitive information (kernel

memory), local privilege escalation, or possibly escape a container.

(LP: #2143853)

It was discovered that some AMD Zen 5 processors supporting RDSEED

instruction did not properly handle entropy, potentially resulting in the

co...

Read the Full Advisory

Topics Covered

security advisory denial of service critical local privilege escalation Ubuntu linux

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 25.10
   linux-image-6.17.0-1009-aws     6.17.0-1009.9
   linux-image-6.17.0-1009-aws-64k  6.17.0-1009.9
   linux-image-6.17.0-1009-gcp     6.17.0-1009.9
   linux-image-6.17.0-1009-gcp-64k  6.17.0-1009.9
   linux-image-6.17.0-1009-oracle  6.17.0-1009.9
   linux-image-6.17.0-1009-oracle-64k  6.17.0-1009.9
   linux-image-6.17.0-19-generic   6.17.0-19.19
   linux-image-6.17.0-19-generic-64k  6.17.0-19.19
   linux-image-aws                 6.17.0-1009.9
   linux-image-aws-6.17            6.17.0-1009.9
   linux-image-aws-64k             6.17.0-1009.9
   linux-image-aws-64k-6.17        6.17.0-1009.9
   linux-image-gcp                 6.17.0-1009.9
   linux-image-gcp-6.17            6.17.0-1009.9
   linux-image-gcp-64k             6.17.0-1009.9
   linux-image-gcp-64k-6.17        6.17.0-1009.9
   linux-image-generic             6.17.0-19.19
   linux-image-generic-6.17        6.17.0-19.19
   linux-image-generic-64k         6.17.0-19.19
   linux-image-generic-64k-6.17    6.17.0-19.19
   linux-image-oracle              6.17.0-1009.9
   linux-image-oracle-6.17         6.17.0-1009.9
   linux-image-oracle-64k          6.17.0-1009.9
   linux-image-oracle-64k-6.17     6.17.0-1009.9
   linux-image-virtual             6.17.0-19.19
   linux-image-virtual-6.17        6.17.0-19.19

Ubuntu 24.04 LTS
   linux-image-6.17.0-1009-aws     6.17.0-1009.9~24.04.2
   linux-image-6.17.0-1009-aws-64k  6.17.0-1009.9~24.04.2
   linux-image-6.17.0-1009-oracle  6.17.0-1009.9~24.04.1
   linux-image-6.17.0-1009-oracle-64k  6.17.0-1009.9~24.04.1
   linux-image-6.17.0-19-generic   6.17.0-19.19~24.04.2
   linux-image-6.17.0-19-generic-64k  6.17.0-19.19~24.04.2
   linux-image-aws                 6.17.0-1009.9~24.04.2
   linux-image-aws-6.17            6.17.0-1009.9~24.04.2
   linux-image-aws-64k             6.17.0-1009.9~24.04.2
   linux-image-aws-64k-6.17        6.17.0-1009.9~24.04.2
   linux-image-generic-6.17        6.17.0-19.19~24.04.2
   linux-image-generic-64k-6.17    6.17.0-19.19~24.04.2
   linux-image-generic-64k-hwe-24.04  6.17.0-19.19~24.04.2
   linux-image-generic-hwe-24.04   6.17.0-19.19~24.04.2
   linux-image-oracle              6.17.0-1009.9~24.04.1
   linux-image-oracle-6.17         6.17.0-1009.9~24.04.1
   linux-image-oracle-64k          6.17.0-1009.9~24.04.1
   linux-image-oracle-64k-6.17     6.17.0-1009.9~24.04.1
   linux-image-virtual-6.17        6.17.0-19.19~24.04.2
   linux-image-virtual-hwe-24.04   6.17.0-19.19~24.04.2

After a standard system update you need to reboot your computer to make
all the necessary changes.

ATTENTION: Due to an unavoidable ABI change the kernel updates have
been given a new version number, which requires you to recompile and
reinstall all third party kernel modules you might have installed.
Unless you manually uninstalled the standard kernel metapackages
(e.g. linux-generic, linux-generic-lts-RELEASE, linux-virtual,
linux-powerpc), a standard system upgrade will automatically perform
this as well.

References

https://ubuntu.com/security/notices/USN-8094-1

https://launchpad.net/bugs/2143853

CVE-2025-40246, CVE-2025-40247, CVE-2025-40248, CVE-2025-40249,

CVE-2025-40250, CVE-2025-40251, CVE-2025-40252, CVE-2025-40253,

CVE-2025-40254, CVE-2025-40255, CVE-2025-40257, CVE-2025-40258,

CVE-2025-40259, CVE-2025-40260, CVE-2025-40261, CVE-2025-40262,

CVE-2025-40263, CVE-2025-40264, CVE-2025-40265, CVE-2025-40266,

CVE-2025-40290, CVE-2025-40345, CVE-2025-62626, CVE-2025-68212,

CVE-2025-68213, CVE-2025-68214, CVE-2025-68215, CVE-2025-68217,

CVE-2025-68218, CVE-2025-68219, CVE-2025-68220, CVE-2025-68221,

CVE-2025-68222, CVE-2025-68223, CVE-2025-68225, CVE-2025-68227,

CVE-2025-68228, CVE-2025-68229, CVE-2025-68230, CVE-2025-68231,

CVE-2025-68232, CVE-2025-68233, CVE-2025-68234, CVE-2025-68235,

CVE-2025-68236, CVE-2025-68237, CVE-2025-68238, CVE-2025-68254,

CVE-2025-68255, CVE-2025-68256, CVE-2025-68257, CVE-2025-68258,

CVE-2025-68259, CVE-2025-68261, CVE-2025-68262, CVE-2025-68263,

CVE-2025-68264, CVE-2025-68265, CVE-2025-68266, CVE-2025-68281,

CVE-2025-68282, CVE-2025-68283, CVE-2025-68284, CVE-2025-68285,

CVE-2025-68286, CVE-2025-68287, CVE-2025-68288, CVE-2025-68289,

CVE-2025-68290, CVE-2025-68292, CVE-2025-68293, CVE-2025-68294,

CVE-2025-68295, CVE-2025-68296, CVE-2025-68297, CVE-2025-68298,

CVE-2025-68299, CVE-2025-68300, CVE-2025-68301, CVE-2025-68302,

CVE-2025-68303, CVE-2025-68304, CVE-2025-68305, CVE-2025-68306,

CVE-2025-68307, CVE-2025-68308, CVE-2025-68323, CVE-2025-68324,

CVE-2025-68325, CVE-2025-68326, CVE-2025-68327, CVE-2025-68328,

CVE-2025-68329, CVE-2025-68330, CVE-2025-68331, CVE-2025-68332,

CVE-2025-68333, CVE-2025-68334, CVE-2025-68335, CVE-2025-68336,

CVE-2025-68337, CVE-2025-68338, CVE-2025-68339, CVE-2025-68340,

CVE-2025-68341, CVE-2025-68342, CVE-2025-68343, CVE-2025-68344,

CVE-2025-68345, CVE-2025-68346, CVE-2025-68347, CVE-2025-68348,

CVE-2025-68349, CVE-2025-68352, CVE-2025-68354, CVE-2025-68356,

CVE-2025-68358, CVE-2025-68359, CVE-2025-68360, CVE-2025-68361,

CVE-2025-68362, CVE-2025-68363, CVE-2025-68364, CVE-2025-68366,

CVE-2025-68367, CVE-2025-68369, CVE-2025-68370, CVE-2025-68371,

CVE-2025-68372, CVE-2025-68373, CVE-2025-68374, CVE-2025-68375,

CVE-2025-68376, CVE-2025-68378, CVE-2025-68379, CVE-2025-68380,

CVE-2025-68724, CVE-2025-68726, CVE-2025-68727, CVE-2025-68728,

CVE-2025-68729, CVE-2025-68730, CVE-2025-68732, CVE-2025-68733,

CVE-2025-68735, CVE-2025-68738, CVE-2025-68739, CVE-2025-68740,

CVE-2025-68741, CVE-2025-68742, CVE-2025-68743, CVE-2025-68744,

CVE-2025-68746, CVE-2025-68747, CVE-2025-68748, CVE-2025-68749,

CVE-2025-68751, CVE-2025-68752, CVE-2025-68753, CVE-2025-68754,

CVE-2025-68755, CVE-2025-68756, CVE-2025-68757, CVE-2025-68758,

CVE-2025-68759, CVE-2025-68760, CVE-2025-68762, CVE-2025-68763,

CVE-2025-68764, CVE-2025-68765, CVE-2025-68766, CVE-2025-71128

Severity

critical

Lowest

Low

Medium

High

Critical

Ubuntu Security Notice USN-8094-1

Topics Covered

security advisory denial of service critical local privilege escalation Ubuntu linux

Package Information

https://launchpad.net/ubuntu/+source/linux/6.17.0-19.19

https://launchpad.net/ubuntu/+source/linux-aws/6.17.0-1009.9

https://launchpad.net/ubuntu/+source/linux-gcp/6.17.0-1009.9

https://launchpad.net/ubuntu/+source/linux-oracle/6.17.0-1009.9

https://launchpad.net/ubuntu/+source/linux-aws-6.17/6.17.0-1009.9~24.04.2

https://launchpad.net/ubuntu/+source/linux-hwe-6.17/6.17.0-19.19~24.04.2

https://launchpad.net/ubuntu/+source/linux-oracle-6.17/6.17.0-1009.9~24.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Ubuntu 25.10 Linux Kernel Critical Denial of Service Escalation USN-8094-1

Summary

Topics Covered

Update Instructions

References

Topics Covered

Package Information

Get the latest News and Insights

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!

Ubuntu 25.10 Linux Kernel Critical Denial of Service Escalation USN-8094-1

Summary

Topics Covered

Update Instructions

References

Topics Covered

Package Information

Get the latest News and Insights

Related Articles

Powered By

Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases

QUICK LINKS

subscribe to newsletters!