PT-2025-16757 · Linux+4 · Linux Kernel+4

Published 2025-03-18 · Updated 2026-03-13 · CVE-2025-22117

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability in the Linux kernel has been resolved, specifically in the ice vc fdir parse raw() function. The issue involved using an untrusted value of pkt len without proper verification, potentially allowing it to exceed the VIRTCHNL MAX SIZE RAW PACKET value.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2026-04888

CVE-2025-22117

SUSE-SU-2025:01967-1

SUSE-SU-2025_01967-1

USN-7594-1

USN-7594-2

USN-7594-3

Affected Products

Astra Linux

Debian

Linux Kernel

Suse

Ubuntu

References · 1160

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22117.json · Exploit
• https://ubuntu.com/security/CVE-2025-22098 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22080 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37842 · Vendor Advisory
• https://git.kernel.org/stable/c/362f704ba73a359db9cded567e891d9a8f081875 · Patch
• https://ubuntu.com/security/CVE-2025-37866 · Vendor Advisory
• https://git.kernel.org/stable/c/1388dd564183a5a18ec4a966748037736b5653c5 · Patch
• https://ubuntu.com/security/CVE-2025-23158 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23140 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22064 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23137 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37796 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22107 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39930 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22021 · Vendor Advisory