PT-2025-15405 · Linux+4 · Linux Kernel+4
Published
2025-03-12
·
Updated
2026-04-20
·
CVE-2025-22017
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel (affected versions not specified)
Description:
A vulnerability in the Linux kernel has been identified, related to the devlink component and its error handling in the xa alloc cyclic() function. When this function returns 1, indicating wrapping, it returns ERR PTR(1), which causes IS ERR() to be false. This can lead to the dereference of a not allocated pointer. The issue was noticed and resolved by checking if the error is lower than zero. There is no evidence of this issue being exploited in real-world scenarios.
Recommendations:
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Suse
Ubuntu