USN-7758-3
linux-realtime vulnerability
It was discovered that the AF_UNIX socket garbage collection implementation in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB) messages, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
What each source reports
OSVNo score
linux-realtime vulnerability
It was discovered that the AF_UNIX socket garbage collection implementation in Ubuntu Noble's 6.8 kernel did not properly handle out-of-band (OOB) messages, leading to a use-after-free vulnerability. An attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code.
- Record
USN-7758-3- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
linux-realtimeUbuntu:Pro:Realtime:24.04:LTS | before 6.8.1-1033.34, plus listed versions 6.8.0-1008.196.8.1-1001.16.8.1-1002.26.8.1-1003.36.8.1-1004.4 Show 24 moreShow less6.8.1-1005.56.8.1-1006.66.8.1-1007.76.8.1-1008.86.8.1-1009.96.8.1-1010.106.8.1-1011.116.8.1-1012.126.8.1-1013.146.8.1-1014.156.8.1-1015.166.8.1-1016.176.8.1-1017.186.8.1-1018.196.8.1-1019.206.8.1-1020.216.8.1-1021.226.8.1-1022.236.8.1-1023.246.8.1-1024.256.8.1-1025.266.8.1-1026.276.8.1-1030.316.8.1-1031.32 | 6.8.1-1033.34 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7758-3 is a vulnerability with no CVSS score yet in linux-realtime, published September 19, 2025. No source lists public exploit code. Fixed in linux-realtime 6.8.1-1033.34.