PT-2025-16669 · Linux+2 · Linux Kernel+2

Published

2025-04-16

·

Updated

2025-06-16

·

CVE-2025-22029

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A race condition exists in the Linux kernel related to the usage of fs struct->in exec. The issue arises when check unsafe exec() sets fs->in exec under cred guard mutex, and then execve() clears fs->in exec lockless. If execve() fails, a race can occur where one thread sets fs->in exec to 1, fails, drops cred guard mutex, and another thread sets fs->in exec to 1 before the first thread clears fs->in exec. This can lead to a situation where the second thread continues with fs->in exec equal to 0.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2025-22029
MGASA-2025-0142
MGASA-2025-0146
OPENSUSE-SU-2025_01614-1
OPENSUSE-SU-2025_01707-1
SUSE-SU-2025:01614-1
SUSE-SU-2025:01707-1
SUSE-SU-2025:01919-1
SUSE-SU-2025:01964-1
SUSE-SU-2025:01967-1
SUSE-SU-2025:1573-1
SUSE-SU-2025:20343-1
SUSE-SU-2025:20344-1
SUSE-SU-2025:20354-1
SUSE-SU-2025:20355-1
SUSE-SU-2025_01614-1
SUSE-SU-2025_01707-1
SUSE-SU-2025_01964-1
SUSE-SU-2025_01967-1

Affected Products

Debian
Linux Kernel
Suse