PT-2025-16711 · Linux+5 · Linux Kernel+5

Published 2025-03-13 · Updated 2026-05-22 · CVE-2025-22071

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A leak in the spufs create context() function has been fixed. The issue was missed in previous leak fixes from 2008 and occurs when trying to set affinity and spufs mkdir() fails, requiring a drop of the reference to the neighbor.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

BDU:2025-12040

CVE-2025-22071

DLA-4193-1

DSA-5907-1

ECHO-81DC-76E9-9151

MGASA-2025-0142

MGASA-2025-0146

OESA-2026-2417

OESA-2026-2418

USN-7585-1

USN-7585-2

USN-7585-3

USN-7585-4

USN-7585-5

USN-7585-6

USN-7585-7

USN-7591-1

USN-7591-2

USN-7591-3

USN-7591-4

USN-7591-5

USN-7591-6

USN-7592-1

USN-7593-1

USN-7594-1

USN-7594-2

USN-7594-3

USN-7597-1

USN-7597-2

USN-7598-1

USN-7602-1

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7640-1

USN-7655-1

USN-7835-1

USN-7835-2

USN-7835-3

USN-7835-4

USN-7835-5

USN-7835-6

USN-7887-1

USN-7887-2

USN-7940-1

USN-7940-2

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 895

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22071.json · Exploit
• https://ubuntu.com/security/CVE-2025-39755 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22126 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21968 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22033 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-37766 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40062 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39756 · Security Note
• https://ubuntu.com/security/notices/USN-7598-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39955 · Security Note
• https://git.kernel.org/stable/c/239ea3c34673b3244a499fd65771c47e5bffcbb0 · Patch
• https://ubuntu.com/security/CVE-2025-21989 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22004 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22101 · Vendor Advisory