StackPatch is liveSee product

Back to CVE digest
CVE-2025-68736 · cross-distro fix matrix

CVE-2025-68736: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo

Affects 1 Linux release across 50 (distro × package) combinations. First disclosed: 2026-04-17.

Fix per ecosystem

Each block below is a distro release where CVE-2025-68736 has a known fix. Run the listed command on that distro to remediate.

Ubuntu noble

Source: Ubuntu USN

  • linux-aws-6.17→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-6.17
  • linux-hwe-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-hwe-6.17
  • linux-oracle-6.17→ fixed in6.17.0-1011.11~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-oracle-6.17
  • linux-aws→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws
  • linux-aws-6.17-cloud-tools-6.17.0-1012→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-6.17-cloud-tools-6.17.0-1012
  • linux-aws-6.17-headers-6.17.0-1012→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-6.17-headers-6.17.0-1012
  • linux-aws-6.17-tools-6.17.0-1012→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-6.17-tools-6.17.0-1012
  • linux-aws-64k→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-64k
  • linux-aws-64k-6.17→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-64k-6.17
  • linux-aws-64k-edge→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-64k-edge
  • linux-aws-edge→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-aws-edge
  • linux-buildinfo-6.17.0-1011-oracle→ fixed in6.17.0-1011.11~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-buildinfo-6.17.0-1011-oracle
  • linux-buildinfo-6.17.0-1011-oracle-64k→ fixed in6.17.0-1011.11~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-buildinfo-6.17.0-1011-oracle-64k
  • linux-buildinfo-6.17.0-1012-aws→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-buildinfo-6.17.0-1012-aws
  • linux-buildinfo-6.17.0-1012-aws-64k→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-buildinfo-6.17.0-1012-aws-64k
  • linux-buildinfo-6.17.0-22-generic→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-buildinfo-6.17.0-22-generic
  • linux-buildinfo-6.17.0-22-generic-64k→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-buildinfo-6.17.0-22-generic-64k
  • linux-cloud-tools-6.17.0-1012-aws→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-6.17.0-1012-aws
  • linux-cloud-tools-6.17.0-1012-aws-64k→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-6.17.0-1012-aws-64k
  • linux-cloud-tools-6.17.0-22-generic→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-6.17.0-22-generic
  • linux-cloud-tools-generic-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-6.17
  • linux-cloud-tools-generic-hwe-24.04→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-hwe-24.04
  • linux-cloud-tools-generic-hwe-24.04-edge→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-hwe-24.04-edge
  • linux-cloud-tools-virtual-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-6.17
  • linux-cloud-tools-virtual-hwe-24.04→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-hwe-24.04
  • linux-cloud-tools-virtual-hwe-24.04-edge→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-hwe-24.04-edge
  • linux-generic-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-generic-6.17
  • linux-generic-64k-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-generic-64k-6.17
  • linux-generic-64k-hwe-24.04→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-generic-64k-hwe-24.04
  • linux-generic-64k-hwe-24.04-edge→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-generic-64k-hwe-24.04-edge
  • linux-generic-hwe-24.04→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-generic-hwe-24.04
  • linux-generic-hwe-24.04-edge→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-generic-hwe-24.04-edge
  • linux-headers-6.17.0-1011-oracle→ fixed in6.17.0-1011.11~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-6.17.0-1011-oracle
  • linux-headers-6.17.0-1011-oracle-64k→ fixed in6.17.0-1011.11~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-6.17.0-1011-oracle-64k
  • linux-headers-6.17.0-1012-aws→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-6.17.0-1012-aws
  • linux-headers-6.17.0-1012-aws-64k→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-6.17.0-1012-aws-64k
  • linux-headers-6.17.0-22-generic→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-6.17.0-22-generic
  • linux-headers-6.17.0-22-generic-64k→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-6.17.0-22-generic-64k
  • linux-headers-aws→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-aws
  • linux-headers-aws-6.17→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-aws-6.17
  • linux-headers-aws-64k→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-aws-64k
  • linux-headers-aws-64k-6.17→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-aws-64k-6.17
  • linux-headers-aws-64k-edge→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-aws-64k-edge
  • linux-headers-aws-edge→ fixed in6.17.0-1012.12~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-aws-edge
  • linux-headers-generic-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-generic-6.17
  • linux-headers-generic-64k-6.17→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-generic-64k-6.17
  • linux-headers-generic-64k-hwe-24.04→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-generic-64k-hwe-24.04
  • linux-headers-generic-64k-hwe-24.04-edge→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-generic-64k-hwe-24.04-edge
  • linux-headers-generic-hwe-24.04→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-generic-hwe-24.04
  • linux-headers-generic-hwe-24.04-edge→ fixed in6.17.0-22.22~24.04.1USN-8183-2
    sudo apt-get install --only-upgrade -y linux-headers-generic-hwe-24.04-edge
Are YOU affected by CVE-2025-68736?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash
Form-based quickscan View on NVD
Continuous monitoring beats manual checking

CVE-2025-68736dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.

See StackPatch ($99 lifetime)