Vulnerability in Linux Linux_kernel
CVE-2025-54288
Information Spoofing in devLXD Server in Canonical LXD versions 4.0 and above on Linux container platforms allows attackers with root privileges within any container to impersonate other containers and obtain their metadata, configuration…
EPSS: 0.003 (24.8th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.8 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N.
Affected products
- Linux Linux_kernel
- Canonical Lxd — versions 6.0, 5.21
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security@ubuntu.com (Exploit, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-54288?
- CVE-2025-54288 is a medium-severity vulnerability in Linux Linux_kernel, classified under Authentication Bypass by Spoofing. CVSS score: 6.8/10. Published 2025-10-02.
- How severe is CVE-2025-54288?
- Medium severity. CVSS v3 base score is 6.8 out of 10.
- Is CVE-2025-54288 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.