What is CVE-2025-54290?

CVE-2025-54290 is a medium-severity vulnerability in Linux Linux_kernel, classified under Information Disclosure. CVSS score: 5.3/10. Published 2025-10-02.

How severe is CVE-2025-54290?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Linux Linux_kernel

CVE-2025-54290

Information disclosure in image export API in Canonical LXD before 6.5 and 5.21.4 on Linux allows network attackers to determine project existence without authentication via crafted requests using wildcard fingerprints.

Vulnerability class: Information Disclosure

EPSS: 0.003 (23.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Linux Linux_kernel
Canonical Lxd — versions 6.0, 5.21

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

security@ubuntu.com (Exploit, Vendor Advisory)

Frequently asked questions

What is CVE-2025-54290?: CVE-2025-54290 is a medium-severity vulnerability in Linux Linux_kernel, classified under Information Disclosure. CVSS score: 5.3/10. Published 2025-10-02.
How severe is CVE-2025-54290?: Medium severity. CVSS v3 base score is 5.3 out of 10.