CVE-2025-30696

What it actually does

High-privileged network attacker can trigger a hang or repeatable crash in the MySQL Server process via the Server: PS component, resulting in complete denial of service.

Why it matters to the business

Database service interruptions can halt application operations, delay transactions, and require manual restarts, affecting availability for organizations using the listed Ubuntu packages.

How an attack unfolds

An attacker with high database privileges connects over supported network protocols and sends crafted requests that exercise the vulnerable PS code path, causing the server to hang or crash.

How to fix it

Upgrade affected packages to the fixed versions: linux (Ubuntu 24.04 LTS) to 6.8.0-45.45, linux-aws (Ubuntu 24.04 LTS) to 6.8.0-1016.17, or linux-gcp (Ubuntu 24.04 LTS) to 6.8.0-1015.17. Apply updates promptly given the published date and slight EPSS increase.

How to confirm the fix worked

Confirm package versions match or exceed the listed fixed releases using package managers, then verify MySQL Server starts and remains stable under load without the prior crash behavior.

Typical attack path

1. Obtain high-privileged database credentials
2. Establish network connection to MySQL using supported protocols
3. Issue malicious requests targeting the Server: PS component
4. Trigger server hang or crash resulting in denial of service

How to detect it

Review database and system logs for unexpected MySQL process terminations or hangs around the time of suspected activity; correlate with privileged login events.

What your security team should do

• Prioritize patching all listed Ubuntu packages within the next maintenance window
• Restrict network access to MySQL to only trusted sources
• Monitor for availability alerts on affected database instances
• Review privileged account access controls to limit potential attackers