PT-2025-16686 · Linux+4 · Linux Kernel+4

Jann · Published 2025-02-12 · Updated 2026-01-21 · CVE-2025-22046

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A possible issue was reported in the Linux kernel when the trampoline check ip returns an address near the bottom of the address space that is allowed to call into the syscall if uretprobes are not set up. The mmap minimum address restrictions will typically prevent creating mappings in this area, but the uretprobe syscall checks have been hardened to ensure this does not occur.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-99

Related Identifiers

BDU:2025-12312

CVE-2025-22046

USN-7594-1

USN-7594-2

USN-7594-3

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 473

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22046.json · Exploit
• https://ubuntu.com/security/CVE-2025-37824 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37881 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21972 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37859 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39688 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23140 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21992 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37806 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22116 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21951 · Vendor Advisory