PT-2025-16718 · Linux+4 · Linux Kernel+4

Published 2025-03-09 · Updated 2026-01-21 · CVE-2025-22078

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential issue in the Linux kernel has been resolved, related to the vchiq arm module. The problem occurs when the vchiq platform conn state changed() function is never called or fails before driver removal, causing the ka thread pointer to become invalid. This can lead to a crash when kthread stop is called.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-371

Related Identifiers

BDU:2025-12016

CVE-2025-22078

USN-7594-1

USN-7594-2

USN-7594-3

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

Affected Products

Astra Linux

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 473

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22078.json · Exploit
• https://ubuntu.com/security/CVE-2025-37824 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37881 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21972 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37859 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39688 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23140 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21992 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23159 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37842 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21939 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37806 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22116 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21951 · Vendor Advisory