CVE-2025-62526
No fix known EPSS <1%CVSS 7.9
OpenWrt Project is a Linux operating system targeting embedded devices. Prior to version 24.10.4, ubusd contains a heap buffer overflow in the event registration parsing code. This allows an attacker to modify the head and potentially execute arbitrary code in the context of the ubus daemon. The affected code is executed before running the ACL checks, all ubus clients are able to send such messages. In addition to the heap corruption, the crafted subscription also results in a bypass of the listen ACL. This is fixed in OpenWrt 24.10.4. There are no workarounds.
Products: openwrt
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu 16.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-aws-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure | no fix |
| Ubuntu 18.04 LTS | linux-azure-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-azure-edge | no fix |
| Ubuntu 18.04 LTS | linux-gcp | no fix |
| Ubuntu 18.04 LTS | linux-gcp-5.3 | no fix |
| Ubuntu 18.04 LTS | linux-gke-4.15 | no fix |
| Ubuntu 18.04 LTS | linux-gke-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-gkeop-5.4 | no fix |
| Ubuntu 18.04 LTS | linux-hwe | no fix |
| Ubuntu 18.04 LTS | linux-hwe-edge | no fix |
| Ubuntu 18.04 LTS | linux-oem | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.0 | no fix |
| Ubuntu 18.04 LTS | linux-oracle-5.3 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-aws-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-azure-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-azure-fde | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-gcp-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-gke | no fix |
| Ubuntu 20.04 LTS | linux-gke-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-gkeop | no fix |
| Ubuntu 20.04 LTS | linux-gkeop-5.15 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-hwe-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-intel-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.10 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.14 | no fix |
| Ubuntu 20.04 LTS | linux-oem-5.6 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.13 | no fix |
| Ubuntu 20.04 LTS | linux-oracle-5.8 | no fix |
| Ubuntu 20.04 LTS | linux-raspi2 | no fix |
| Ubuntu 20.04 LTS | linux-riscv | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.11 | no fix |
| Ubuntu 20.04 LTS | linux-riscv-5.8 | no fix |
| Ubuntu 22.04 LTS | linux | no fix |
| Ubuntu 22.04 LTS | linux-allwinner-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws | no fix |
| Ubuntu 22.04 LTS | linux-aws-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-aws-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-azure | no fix |
| Ubuntu 22.04 LTS | linux-azure-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-azure-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-azure-fde-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-gcp | no fix |
| Ubuntu 22.04 LTS | linux-gcp-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-gcp-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-gke | no fix |
| Ubuntu 22.04 LTS | linux-gkeop | no fix |
| Ubuntu 22.04 LTS | linux-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-ibm | no fix |
| Ubuntu 22.04 LTS | linux-ibm-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu 22.04 LTS | linux-intel-iotg | no fix |
| Ubuntu 22.04 LTS | linux-kvm | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-tegra | no fix |
| Ubuntu 22.04 LTS | linux-nvidia-tegra-igx | no fix |
| Ubuntu 22.04 LTS | linux-oem-5.17 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.0 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.1 | no fix |
| Ubuntu 22.04 LTS | linux-oem-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-raspi | no fix |
| Ubuntu 22.04 LTS | linux-realtime | no fix |
| Ubuntu 22.04 LTS | linux-riscv | no fix |
| Ubuntu 22.04 LTS | linux-riscv-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-5.19 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.2 | no fix |
| Ubuntu 22.04 LTS | linux-starfive-6.5 | no fix |
| Ubuntu 22.04 LTS | linux-xilinx-zynqmp | no fix |
| Ubuntu 24.04 LTS | linux | no fix |
| Ubuntu 24.04 LTS | linux-aws | no fix |
| Ubuntu 24.04 LTS | linux-aws-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-aws-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-azure-fde-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-azure-nvidia-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-gcp-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-gke | no fix |
| Ubuntu 24.04 LTS | linux-gkeop | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-hwe-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-ibm | no fix |
| Ubuntu 24.04 LTS | linux-lowlatency | no fix |
| Ubuntu 24.04 LTS | linux-lowlatency-hwe-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | no fix |
| Ubuntu 24.04 LTS | linux-nvidia-tegra | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.11 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-oem-6.8 | no fix |
| Ubuntu 24.04 LTS | linux-oracle | no fix |
| Ubuntu 24.04 LTS | linux-oracle-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-oracle-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-raspi | no fix |
| Ubuntu 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu 24.04 LTS | linux-realtime | no fix |
| Ubuntu 24.04 LTS | linux-riscv | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.14 | no fix |
| Ubuntu 24.04 LTS | linux-riscv-6.17 | no fix |
| Ubuntu 24.04 LTS | linux-xilinx | no fix |
| Ubuntu 25.10 | linux | no fix |
| Ubuntu 25.10 | linux-aws | no fix |
| Ubuntu 25.10 | linux-azure | no fix |
| Ubuntu 25.10 | linux-azure-fde | no fix |
| Ubuntu 25.10 | linux-gcp | no fix |
| Ubuntu 25.10 | linux-oracle | no fix |
| Ubuntu 25.10 | linux-raspi | no fix |
| Ubuntu 25.10 | linux-realtime | no fix |
| Ubuntu 25.10 | linux-riscv | no fix |
| Ubuntu Nvidia-BlueField 22.04 LTS | linux-bluefield | no fix |
| Ubuntu Pro 14.04 LTS | linux | no fix |
| Ubuntu Pro 14.04 LTS | linux-aws | no fix |
| Ubuntu Pro 14.04 LTS | linux-azure | no fix |
| Ubuntu Pro 14.04 LTS | linux-lts-xenial | no fix |
| Ubuntu Pro 16.04 LTS | linux | no fix |
| Ubuntu Pro 16.04 LTS | linux-aws | no fix |
| Ubuntu Pro 16.04 LTS | linux-aws-hwe | no fix |
| Ubuntu Pro 16.04 LTS | linux-azure | no fix |
| Ubuntu Pro 16.04 LTS | linux-gcp | no fix |
| Ubuntu Pro 16.04 LTS | linux-hwe | no fix |
| Ubuntu Pro 16.04 LTS | linux-kvm | no fix |
| Ubuntu Pro 16.04 LTS | linux-oracle | no fix |
| Ubuntu Pro 18.04 LTS | linux | no fix |
| Ubuntu Pro 18.04 LTS | linux-aws | no fix |
| Ubuntu Pro 18.04 LTS | linux-aws-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-azure-4.15 | no fix |
| Ubuntu Pro 18.04 LTS | linux-azure-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-gcp-4.15 | no fix |
| Ubuntu Pro 18.04 LTS | linux-gcp-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-hwe-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-ibm-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-kvm | no fix |
| Ubuntu Pro 18.04 LTS | linux-oracle | no fix |
| Ubuntu Pro 18.04 LTS | linux-oracle-5.4 | no fix |
| Ubuntu Pro 18.04 LTS | linux-raspi-5.4 | no fix |
| Ubuntu Pro 20.04 LTS | linux | no fix |
| Ubuntu Pro 20.04 LTS | linux-aws | no fix |
| Ubuntu Pro 20.04 LTS | linux-aws-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-azure | no fix |
| Ubuntu Pro 20.04 LTS | linux-azure-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-azure-fde-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-bluefield | no fix |
| Ubuntu Pro 20.04 LTS | linux-gcp | no fix |
| Ubuntu Pro 20.04 LTS | linux-gcp-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-hwe-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-ibm | no fix |
| Ubuntu Pro 20.04 LTS | linux-ibm-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-intel-iotg-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-iot | no fix |
| Ubuntu Pro 20.04 LTS | linux-kvm | no fix |
| Ubuntu Pro 20.04 LTS | linux-lowlatency-hwe-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-nvidia-tegra-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-oracle | no fix |
| Ubuntu Pro 20.04 LTS | linux-oracle-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-raspi | no fix |
| Ubuntu Pro 20.04 LTS | linux-riscv-5.15 | no fix |
| Ubuntu Pro 20.04 LTS | linux-xilinx-zynqmp | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-preview 22.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 18.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 20.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 22.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS-updates 24.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS 16.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 18.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-aws-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-azure-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-fips | no fix |
| Ubuntu Pro FIPS 20.04 LTS | linux-gcp-fips | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-intel-iot-realtime | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime | no fix |
| Ubuntu Pro Realtime 22.04 LTS | linux-realtime-6.8 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.14 | no fix |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime-6.17 | no fix |