USN-7920-2: linux-raspi vulnerabilities

Q: Which kernel areas are addressed by this update?

The update corrects security flaws in the tracing infrastructure and Netfilter. The listed CVEs are CVE-2025-40018 and CVE-2025-40232.

Q: What Ubuntu packages are in scope?

The affected software listing includes ubuntu/linux-raspi, ubuntu/linux-image-6.17.0-1006-raspi, ubuntu/linux-image-raspi, and ubuntu/linux-image-raspi-6.17.

Q: What is the potential impact if these flaws are exploited?

An attacker could possibly use the issues to compromise the system. The provided information does not specify attacker prerequisites, exposure conditions, or mitigations other than applying the update.

Published Dec 15, 2025

Updated

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems:

Affected Software

7 affected componentsFixes available

ubuntu/linux-raspi<6.17.0-1006.6

6.17.0-1006.6

All of the following

ubuntu/linux-image-6.17.0-1006-raspi<6.17.0-1006.6

6.17.0-1006.6

Ubuntu Ubuntu=25.10

All of the following

ubuntu/linux-image-raspi<6.17.0-1006.6

6.17.0-1006.6

Ubuntu Ubuntu=25.10

All of the following

ubuntu/linux-image-raspi-6.17<6.17.0-1006.6

6.17.0-1006.6

Ubuntu Ubuntu=25.10

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.
Fixed in 6.17.0-1006.6
Upgrade
Upgrade ubuntu/linux-image-6.17.0-1006-raspi to a version that resolves this vulnerability.
Fixed in 6.17.0-1006.6
Upgrade
Upgrade ubuntu/linux-image-raspi to a version that resolves this vulnerability.
Fixed in 6.17.0-1006.6
Upgrade
Upgrade ubuntu/linux-image-raspi-6.17 to a version that resolves this vulnerability.
Fixed in 6.17.0-1006.6
Upgrade
Upgrade Linux kernel (Raspberry Pi) to a version that resolves this vulnerability.
Patch USN-7920-2

Event History

Dec 15, 2025

Advisory Published

via Ubuntu·12:00 AM

Data Sourced

via Ubuntu·12:00 AM

DescriptionAffected Software

Advisory Published

via OSV·11:05 PM

Data Sourced

via OSV·11:05 PM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

Frequently Asked Questions

Which kernel areas are addressed by this update?

The update corrects security flaws in the tracing infrastructure and Netfilter. The listed CVEs are CVE-2025-40018 and CVE-2025-40232.

What Ubuntu packages are in scope?

The affected software listing includes ubuntu/linux-raspi, ubuntu/linux-image-6.17.0-1006-raspi, ubuntu/linux-image-raspi, and ubuntu/linux-image-raspi-6.17.

What is the potential impact if these flaws are exploited?

An attacker could possibly use the issues to compromise the system. The provided information does not specify attacker prerequisites, exposure conditions, or mitigations other than applying the update.

USN-7920-2: linux-raspi vulnerabilities

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which kernel areas are addressed by this update?

What Ubuntu packages are in scope?

What is the potential impact if these flaws are exploited?

Company

Resources

Contact

Frequently Asked Questions

Which kernel areas are addressed by this update?

What Ubuntu packages are in scope?

What is the potential impact if these flaws are exploited?