PT-2025-16720 · Linux+6 · Linux Kernel+6

Published 2025-03-06 · Updated 2026-04-20 · CVE-2025-22080

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue is related to an integer overflow in the hdr first de() function within the fs/ntfs3 component of the Linux kernel. This occurs when the de off and used variables, which are obtained from the disk, are both greater than UINT MAX - 16 on 32-bit systems, causing the check to fail due to an integer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

ALT-PU-2025-12647

BDU:2025-11909

CVE-2025-22080

MGASA-2025-0142

MGASA-2025-0146

OESA-2025-2765

OESA-2025-2766

OESA-2025-2767

OPENSUSE-SU-2025_01614-1

OPENSUSE-SU-2025_01707-1

SUSE-SU-2025:01614-1

SUSE-SU-2025:01707-1

SUSE-SU-2025:01919-1

SUSE-SU-2025:01951-1

SUSE-SU-2025:01964-1

SUSE-SU-2025:01967-1

SUSE-SU-2025:20343-1

SUSE-SU-2025:20344-1

SUSE-SU-2025:20354-1

SUSE-SU-2025:20355-1

SUSE-SU-2025_01614-1

SUSE-SU-2025_01707-1

SUSE-SU-2025_01951-1

SUSE-SU-2025_01964-1

SUSE-SU-2025_01967-1

USN-7594-1

USN-7594-2

USN-7594-3

USN-7605-1

USN-7605-2

USN-7606-1

USN-7628-1

USN-7835-1

USN-7835-2

USN-7835-3

USN-7835-4

USN-7835-5

USN-7835-6

USN-7887-1

USN-7887-2

USN-7940-1

USN-7940-2

Affected Products

Alt Linux

Astra Linux

Linuxmint

Linux Kernel

Red Os

Suse

Ubuntu

References · 1927

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22080.json · Exploit
• https://ubuntu.com/security/CVE-2025-37880 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37828 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39992 · Security Note
• https://ubuntu.com/security/CVE-2025-37811 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7835-3 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37740 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37798 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23149 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7940-2 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23147 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38227 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21978 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21977 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37789 · Vendor Advisory