CVE-2025-68746 · cross-distro fix matrix

CVE-2025-68746: Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo

Affects 2 Linux releases across 50 (distro × package) combinations. First disclosed: 2026-04-17.

Fix per ecosystem

Each block below is a distro release where CVE-2025-68746 has a known fix. Run the listed command on that distro to remediate.

Ubuntu noble

Source: Ubuntu USN

linux-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime

linux-buildinfo-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-2042-raspi-realtime

linux-headers-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-headers-6.8.0-2042-raspi-realtime

linux-headers-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime

linux-headers-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-headers-raspi-realtime-6.8

linux-image-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-image-6.8.0-2042-raspi-realtime

linux-image-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-image-raspi-realtime

linux-image-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-image-raspi-realtime-6.8

linux-modules-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-modules-6.8.0-2042-raspi-realtime

linux-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime-6.8

linux-raspi-realtime-headers-6.8.0-2042→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime-headers-6.8.0-2042

linux-raspi-realtime-tools-6.8.0-2042→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-raspi-realtime-tools-6.8.0-2042

linux-tools-6.8.0-2042-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-tools-6.8.0-2042-raspi-realtime

linux-tools-raspi-realtime→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-tools-raspi-realtime

linux-tools-raspi-realtime-6.8→ fixed in6.8.0-2042.43USN-8204-1

sudo apt-get install --only-upgrade -y linux-tools-raspi-realtime-6.8

Ubuntu jammy

Source: Ubuntu USN

linux-hwe-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-hwe-6.8
```
linux-ibm-6.8→ fixed in6.8.0-1051.51~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-ibm-6.8
```
linux-buildinfo-6.8.0-1051-ibm→ fixed in6.8.0-1051.51~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-1051-ibm
```
linux-buildinfo-6.8.0-110-generic→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-110-generic
```
linux-buildinfo-6.8.0-110-generic-64k→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-buildinfo-6.8.0-110-generic-64k
```
linux-cloud-tools-6.8.0-110-generic→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-6.8.0-110-generic
```
linux-cloud-tools-generic-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-6.8
```
linux-cloud-tools-generic-hwe-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-hwe-22.04
```
linux-cloud-tools-generic-hwe-22.04-edge→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-generic-hwe-22.04-edge
```
linux-cloud-tools-virtual-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-6.8
```
linux-cloud-tools-virtual-hwe-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-hwe-22.04
```
linux-cloud-tools-virtual-hwe-22.04-edge→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-cloud-tools-virtual-hwe-22.04-edge
```
linux-generic-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-generic-6.8
```
linux-generic-64k-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-generic-64k-6.8
```
linux-generic-64k-hwe-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-generic-64k-hwe-22.04
```
linux-generic-64k-hwe-22.04-edge→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-generic-64k-hwe-22.04-edge
```
linux-generic-hwe-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-generic-hwe-22.04
```
linux-generic-hwe-22.04-edge→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-generic-hwe-22.04-edge
```
linux-headers-6.8.0-1051-ibm→ fixed in6.8.0-1051.51~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-6.8.0-1051-ibm
```
linux-headers-6.8.0-110-generic→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-6.8.0-110-generic
```
linux-headers-6.8.0-110-generic-64k→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-6.8.0-110-generic-64k
```
linux-headers-generic-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-generic-6.8
```
linux-headers-generic-64k-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-generic-64k-6.8
```
linux-headers-generic-64k-hwe-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-generic-64k-hwe-22.04
```
linux-headers-generic-64k-hwe-22.04-edge→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-generic-64k-hwe-22.04-edge
```
linux-headers-generic-hwe-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-generic-hwe-22.04
```
linux-headers-generic-hwe-22.04-edge→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-generic-hwe-22.04-edge
```
linux-headers-ibm-6.8→ fixed in6.8.0-1051.51~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-ibm-6.8
```
linux-headers-ibm-edge→ fixed in6.8.0-1051.51~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-ibm-edge
```
linux-headers-oem-22.04→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-oem-22.04
```
linux-headers-oem-22.04a→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-oem-22.04a
```
linux-headers-oem-22.04b→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-oem-22.04b
```
linux-headers-oem-22.04c→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-oem-22.04c
```
linux-headers-oem-22.04d→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-oem-22.04d
```
linux-headers-virtual-6.8→ fixed in6.8.0-110.110~22.04.1USN-8179-3
```
sudo apt-get install --only-upgrade -y linux-headers-virtual-6.8
```

Are YOU affected by CVE-2025-68746?

5-second check on your actual server. Reads /etc/os-release, uname -r, and the distro's package manager; matches against this same cross-source index live.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan View on NVD

Continuous monitoring beats manual checking

CVE-2025-68746dropped silently in your distro's update channel. Every new CVE is the same story. StackPatch runs the matcher hourly against all 5 sources and emails the exact remediation when something new applies to one of your servers. $99 lifetime, 50 founder seats, 30-day refund.

See StackPatch ($99 lifetime)