PT-2025-14597 · Linux+11 · Linux Kernel+11

Published 2025-03-14 · Updated 2026-04-20 · CVE-2025-22004

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use after free issue has been resolved in the Linux kernel, specifically in the lec send() function. The ->send() operation frees skb, so the length is saved before calling ->send() to avoid a use after free. This issue is related to the net: atm component.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2025:10379

ALSA-2025:11298

ALSA-2025:11299

ALT-PU-2025-12647

ALT-PU-2025-5353

ALT-PU-2025-5786

AZL-59629

AZL-59658

BDU:2025-11629

CESA-2025_11298

CESA-2025_11299

CVE-2025-22004

DLA-4178-1

DLA-4193-1

DSA-5900-1

ECHO-99D6-264A-6179

INFSA-2025_10379

INFSA-2025_11298

INFSA-2025_11299

MGASA-2025-0142

MGASA-2025-0146

OESA-2025-1465

OESA-2025-1878

OESA-2025-1879

OESA-2025-1880

OESA-2025-2005

OESA-2025-2006

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01620-1

OPENSUSE-SU-2025_01627-1

OPENSUSE-SU-2025_01633-1

OPENSUSE-SU-2025_01640-1

OPENSUSE-SU-2025_01707-1

RHSA-2025:10379

RHSA-2025:10829

RHSA-2025:10830

RHSA-2025:11245

RHSA-2025:11298

RHSA-2025:11299

RHSA-2025:11358

RHSA-2025:11375

RHSA-2025:11570

RHSA-2025:11571

RHSA-2025:11572

RHSA-2025:12238

RHSA-2025:12623

RHSA-2025:13061

RHSA-2025_10379

RHSA-2025_11298

RHSA-2025_11299

SUSE-SU-2025:01600-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01620-1

SUSE-SU-2025:01627-1

SUSE-SU-2025:01633-1

SUSE-SU-2025:01640-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:02099-1

SUSE-SU-2025:1573-1

SUSE-SU-2025:1574-1

SUSE-SU-2025:20343-1

SUSE-SU-2025:20344-1

SUSE-SU-2025:20354-1

SUSE-SU-2025:20355-1

SUSE-SU-2025_01600-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01620-1

SUSE-SU-2025_01627-1

SUSE-SU-2025_01633-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

SUSE-SU-2025_02099-1

USN-7585-1

USN-7585-2

USN-7585-3

USN-7585-4

USN-7585-5

USN-7585-6

USN-7585-7

USN-7591-1

USN-7591-2

USN-7591-3

USN-7591-4

USN-7591-5

USN-7591-6

USN-7592-1

USN-7593-1

USN-7597-1

USN-7597-2

USN-7598-1

USN-7602-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7640-1

USN-7655-1

USN-7764-1

USN-7764-2

USN-7765-1

USN-7766-1

USN-7767-1

USN-7767-2

USN-7779-1

USN-7790-1

USN-7800-1

USN-7801-1

USN-7801-2

USN-7801-3

USN-7802-1

USN-7809-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Debian

Linuxmint

Linux Kernel

Red Hat

Red Os

Rocky Linux

Suse

Ubuntu

References · 2287

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22004.json · Exploit
• https://osv.dev/vulnerability/BELL-CVE-2025-22004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21945 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35866 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7591-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-23155 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-22111 · Security Note
• https://osv.dev/vulnerability/USN-7809-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37819 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37740 · Vendor Advisory
• https://git.kernel.org/stable/c/326223182e4703cde99fdbd36d07d0b3de9980fb · Patch
• https://ubuntu.com/security/CVE-2025-22034 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37881 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22022 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23138 · Vendor Advisory