Critical Vulnerabilities in Linux Kernel Packages: USN-7611-1
Summary
USN-7611-1: linux, linux-gcp, linux-raspi, linux-realtime vulnerabilities. Affects linux versions < 6.14.0-23.23. Fixed in 6.14.0-23.23. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Ubuntu operating system, responsible for managing hardware resources and providing essential services for all other software. It is known for its stability, performance, and security features. However, recent vulnerabilities have been discovered that could potentially compromise systems running specific versions of the kernel, including linux, linux-gcp, linux-raspi, and linux-realtime.
Vulnerability Detail
Several security issues were identified in the Linux kernel, specifically affecting subsystems such as Netfilter and Network traffic control. These vulnerabilities, tracked under CVE-2025-37890, CVE-2025-37932, CVE-2025-37997, CVE-2025-38000, and CVE-2025-38001, could allow an attacker to exploit the system, leading to unauthorized access or control. The vulnerabilities stem from flaws in the kernel's handling of network traffic, which could be leveraged to execute arbitrary code or disrupt service.
How To Fix
Minimum fixed version
6.14.0-23.23
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can limit access to the affected subsystems or disable specific network features until the system can be updated. However, this is not a permanent solution and should only be used until the patch is applied.
Conclusion
The recent vulnerabilities in the Linux kernel packages pose significant risks to system security. It is crucial for users to update their systems to the latest patched versions to mitigate these risks. Utilizing tools like Vulert can help in monitoring and managing vulnerabilities effectively.
See every vulnerability recorded for linux →
FAQ
The vulnerabilities include issues in Netfilter and Network traffic control subsystems, which could allow unauthorized access or control of the system.
You can use the Vulert platform to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without needing to sign up.
If immediate updates are not possible, consider applying temporary workarounds such as limiting access to affected subsystems.
While specific exploits may not be publicly available, the vulnerabilities are serious enough that they could be exploited by attackers to gain unauthorized access.
Regularly check for updates and vulnerabilities, ideally on a weekly basis, to ensure your system remains secure.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
