Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-13350

Fixed in a distro release EPSS <1%CVSS 7.1

Ubuntu Linux 6.8 GA retains the legacy AF_UNIX garbage collector but backports upstream commit 8594d9b85c07 ("af_unix: Don’t call skb_get() for OOB skb"). When orphaned MSG_OOB sockets hit unix_gc(), the garbage collector still calls kfree_skb() as if OOB SKBs held two references; on Ubuntu Linux 6.8 (Noble Numbat) kernel tree, they have only the queue reference, so the buffer is freed while still reachable and subsequent queue walks dereference freed memory, yielding a reliable local privilege escalation (LPE) caused by a use-after-free (UAF). Ubuntu builds that have already taken the new GC stack from commit 4090fa373f0e, and mainline Linux kernels shipping that infrastructure are unaffected because they no longer execute the legacy collector path. This issue affects Ubuntu Linux from 6.8.0-56.58 before 6.8.0-84.84.

Published 2026-03-05 · CVE record · OSV

Products: canonical ubuntu_linux

Distro releases

ReleasePackageFixed in
Ubuntu 16.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-aws-5.0no fix
Ubuntu 18.04 LTSlinux-aws-5.3no fix
Ubuntu 18.04 LTSlinux-azureno fix
Ubuntu 18.04 LTSlinux-azure-5.3no fix
Ubuntu 18.04 LTSlinux-azure-edgeno fix
Ubuntu 18.04 LTSlinux-gcpno fix
Ubuntu 18.04 LTSlinux-gcp-5.3no fix
Ubuntu 18.04 LTSlinux-gke-4.15no fix
Ubuntu 18.04 LTSlinux-gke-5.4no fix
Ubuntu 18.04 LTSlinux-gkeop-5.4no fix
Ubuntu 18.04 LTSlinux-hweno fix
Ubuntu 18.04 LTSlinux-hwe-edgeno fix
Ubuntu 18.04 LTSlinux-oemno fix
Ubuntu 18.04 LTSlinux-oracle-5.0no fix
Ubuntu 18.04 LTSlinux-oracle-5.3no fix
Ubuntu 20.04 LTSlinux-aws-5.11no fix
Ubuntu 20.04 LTSlinux-aws-5.13no fix
Ubuntu 20.04 LTSlinux-aws-5.8no fix
Ubuntu 20.04 LTSlinux-azure-5.11no fix
Ubuntu 20.04 LTSlinux-azure-5.13no fix
Ubuntu 20.04 LTSlinux-azure-5.8no fix
Ubuntu 20.04 LTSlinux-azure-fdeno fix
Ubuntu 20.04 LTSlinux-gcp-5.11no fix
Ubuntu 20.04 LTSlinux-gcp-5.13no fix
Ubuntu 20.04 LTSlinux-gcp-5.8no fix
Ubuntu 20.04 LTSlinux-gkeno fix
Ubuntu 20.04 LTSlinux-gke-5.15no fix
Ubuntu 20.04 LTSlinux-gkeopno fix
Ubuntu 20.04 LTSlinux-gkeop-5.15no fix
Ubuntu 20.04 LTSlinux-hwe-5.11no fix
Ubuntu 20.04 LTSlinux-hwe-5.13no fix
Ubuntu 20.04 LTSlinux-hwe-5.8no fix
Ubuntu 20.04 LTSlinux-intel-5.13no fix
Ubuntu 20.04 LTSlinux-oem-5.10no fix
Ubuntu 20.04 LTSlinux-oem-5.13no fix
Ubuntu 20.04 LTSlinux-oem-5.14no fix
Ubuntu 20.04 LTSlinux-oem-5.6no fix
Ubuntu 20.04 LTSlinux-oracle-5.11no fix
Ubuntu 20.04 LTSlinux-oracle-5.13no fix
Ubuntu 20.04 LTSlinux-oracle-5.8no fix
Ubuntu 20.04 LTSlinux-raspi2no fix
Ubuntu 20.04 LTSlinux-riscvno fix
Ubuntu 20.04 LTSlinux-riscv-5.11no fix
Ubuntu 20.04 LTSlinux-riscv-5.8no fix
Ubuntu 22.04 LTSlinux-allwinner-5.19no fix
Ubuntu 22.04 LTSlinux-aws-5.19no fix
Ubuntu 22.04 LTSlinux-aws-6.2no fix
Ubuntu 22.04 LTSlinux-aws-6.5no fix
Ubuntu 22.04 LTSlinux-aws-6.86.8.0-1039.41~22.04.1
Ubuntu 22.04 LTSlinux-azure-5.19no fix
Ubuntu 22.04 LTSlinux-azure-6.2no fix
Ubuntu 22.04 LTSlinux-azure-6.5no fix
Ubuntu 22.04 LTSlinux-azure-6.86.8.0-1040.46~22.04.1
Ubuntu 22.04 LTSlinux-azure-fde-5.19no fix
Ubuntu 22.04 LTSlinux-azure-fde-6.2no fix
Ubuntu 22.04 LTSlinux-gcp-5.19no fix
Ubuntu 22.04 LTSlinux-gcp-6.2no fix
Ubuntu 22.04 LTSlinux-gcp-6.5no fix
Ubuntu 22.04 LTSlinux-gcp-6.86.8.0-1040.42~22.04.1
Ubuntu 22.04 LTSlinux-hwe-5.19no fix
Ubuntu 22.04 LTSlinux-hwe-6.2no fix
Ubuntu 22.04 LTSlinux-hwe-6.5no fix
Ubuntu 22.04 LTSlinux-hwe-6.86.8.0-85.85~22.04.1
Ubuntu 22.04 LTSlinux-ibm-6.86.8.0-1037.37~22.04.1
Ubuntu 22.04 LTSlinux-intel-iot-realtimeno fix
Ubuntu 22.04 LTSlinux-lowlatency-hwe-5.19no fix
Ubuntu 22.04 LTSlinux-lowlatency-hwe-6.2no fix
Ubuntu 22.04 LTSlinux-lowlatency-hwe-6.5no fix
Ubuntu 22.04 LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1
Ubuntu 22.04 LTSlinux-nvidia-6.2no fix
Ubuntu 22.04 LTSlinux-nvidia-6.5no fix
Ubuntu 22.04 LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1
Ubuntu 22.04 LTSlinux-oem-5.17no fix
Ubuntu 22.04 LTSlinux-oem-6.0no fix
Ubuntu 22.04 LTSlinux-oem-6.1no fix
Ubuntu 22.04 LTSlinux-oem-6.5no fix
Ubuntu 22.04 LTSlinux-oracle-6.5no fix
Ubuntu 22.04 LTSlinux-oracle-6.86.8.0-1037.38~22.04.1
Ubuntu 22.04 LTSlinux-realtimeno fix
Ubuntu 22.04 LTSlinux-riscvno fix
Ubuntu 22.04 LTSlinux-riscv-5.19no fix
Ubuntu 22.04 LTSlinux-riscv-6.5no fix
Ubuntu 22.04 LTSlinux-riscv-6.86.8.0-84.84~22.04.1
Ubuntu 22.04 LTSlinux-starfive-5.19no fix
Ubuntu 22.04 LTSlinux-starfive-6.2no fix
Ubuntu 22.04 LTSlinux-starfive-6.5no fix
Ubuntu 24.04 LTSlinux6.8.0-84.84
Ubuntu 24.04 LTSlinux-aws6.8.0-1039.41
Ubuntu 24.04 LTSlinux-azure6.8.0-1038.44
Ubuntu 24.04 LTSlinux-azure-6.11no fix
Ubuntu 24.04 LTSlinux-azure-nvidia6.8.0-1025.27
Ubuntu 24.04 LTSlinux-gcp6.8.0-1040.42
Ubuntu 24.04 LTSlinux-gcp-6.11no fix
Ubuntu 24.04 LTSlinux-gke6.8.0-1036.40
Ubuntu 24.04 LTSlinux-gkeop6.8.0-1023.25
Ubuntu 24.04 LTSlinux-hwe-6.11no fix
Ubuntu 24.04 LTSlinux-ibm6.8.0-1037.37
Ubuntu 24.04 LTSlinux-lowlatency6.8.0-84.84.1
Ubuntu 24.04 LTSlinux-lowlatency-hwe-6.11no fix
Ubuntu 24.04 LTSlinux-nvidia6.8.0-1039.42
Ubuntu 24.04 LTSlinux-nvidia-6.11no fix
Ubuntu 24.04 LTSlinux-nvidia-lowlatency6.8.0-1039.42.1
Ubuntu 24.04 LTSlinux-nvidia-tegra6.8.0-1012.12
Ubuntu 24.04 LTSlinux-oem-6.11no fix
Ubuntu 24.04 LTSlinux-oem-6.14no fix
Ubuntu 24.04 LTSlinux-oem-6.8no fix
Ubuntu 24.04 LTSlinux-oracle6.8.0-1037.38
Ubuntu 24.04 LTSlinux-oracle-6.14no fix
Ubuntu 24.04 LTSlinux-raspi6.8.0-1039.43
Ubuntu 24.04 LTSlinux-raspi-realtimeno fix
Ubuntu 24.04 LTSlinux-realtimeno fix
Ubuntu 24.04 LTSlinux-riscvno fix
Ubuntu 24.04 LTSlinux-riscv-6.14no fix
Ubuntu 24.04 LTSlinux-xilinx6.8.0-1018.19
Ubuntu Pro FIPS-updates 24.04 LTSlinux-aws-fips6.8.0-1039.41+fips1
Ubuntu Pro FIPS-updates 24.04 LTSlinux-azure-fips6.8.0-1040.46+fips1
Ubuntu Pro FIPS-updates 24.04 LTSlinux-fips6.8.0-84.84+fips1
Ubuntu Pro FIPS-updates 24.04 LTSlinux-gcp-fips6.8.0-1040.42+fips1
Ubuntu Pro Realtime 22.04 LTSlinux-realtime-6.86.8.1-1034.35~22.04.1
Ubuntu Pro Realtime 24.04 LTSlinux-raspi-realtime6.8.0-2031.32
Ubuntu Pro Realtime 24.04 LTSlinux-realtime6.8.1-1034.35
Ubuntu Pro Realtime 24.04 LTSlinux-realtime-6.14no fix