PT-2025-15400 · Linux+1 · Linux Kernel+1

Published 2025-04-08 · Updated 2025-04-08 · CVE-2025-22012

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue concerns the pagetable walker cache coherency in the Linux kernel, which is not consistent across all SDM845/850 devices. This inconsistency leads to lock-ups and resets. The problem seems to be related to a change introduced in the firmware development, possibly in the hypervisor stack, after the initial software release. The change was intended to accommodate certain devices but has caused issues. Reports indicate that the problem affects devices like the Lenovo Yoga C630, while others, such as the Dragonboard 845c, are not significantly affected.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Stack Overflow

Improper Locking

Weakness Enumeration

CWE-121

CWE-667

Related Identifiers

BDU:2025-14109

CVE-2025-22012

Affected Products

Astra Linux

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22012.json · Exploit
• https://cve.org/CVERecord?id=CVE-2025-22012 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-22012 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-22012 · Vendor Advisory
• https://git.kernel.org/stable/c/f00db31d235946853fb430de8c6aa1295efc8353 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-22012 · Security Note
• https://ubuntu.com/security/CVE-2025-22012 · Vendor Advisory
• https://git.kernel.org/stable/c/9e6e9fc90258a318d30b417bcccda908bb82ee9d · Patch
• https://bdu.fstec.ru/vul/2025-14109 · Security Note
• https://lore.kernel.org/linux-cve-announce/2025040843-CVE-2025-22012-e03f@gregkh · Note
• https://t.me/cvetracker/21107 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1909704551344579022 · Twitter Post
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://t.me/cvedetector/22449 · Telegram Post
• https://twitter.com/vuldb/status/1909572702652055591 · Twitter Post