PT-2025-22225 · Linux+5 · Linux Kernel+5

Published 2025-05-09 · Updated 2026-05-26 · CVE-2025-37964

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A bug in the Linux kernel's mm switching code causes TLB flushes to be suppressed in certain situations. This occurs due to a flaw in the should flush tlb() function, which fails to send an IPI in a specific window. The issue arises from a lazy update of mm cpumask() and overly aggressive culling of mm cpumask(), leading to skipped TLB flushes for CPUs that need them. The problem is resolved by widening the window where should flush tlb() sends an IPI, ensuring that CPUs are targeted with an IPI when necessary.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-399

Related Identifiers

BDU:2025-12020

CVE-2025-37964

DLA-4271-1

DSA-5925-1

ECHO-3CC7-43A9-2EFF

MGASA-2025-0182

MGASA-2025-0183

USN-7654-1

USN-7654-2

USN-7654-3

USN-7654-4

USN-7654-5

USN-7655-1

USN-7686-1

USN-7699-1

USN-7699-2

USN-7711-1

USN-7712-1

USN-7712-2

USN-7721-1

Affected Products

Astra Linux

Debian

Linuxmint

Linux Kernel

Red Os

Ubuntu

References · 394

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/37xxx/CVE-2025-37964.json · Exploit
• https://ubuntu.com/security/CVE-2025-37996 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37966 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-38541 · Vendor Advisory
• https://linux.oracle.com/errata/ELSA-2025-20530.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22025 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-53034 · Vendor Advisory
• https://osv.dev/vulnerability/USN-7654-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37955 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38083 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-46787 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37971 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-37767 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-35790 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-38016 · Vendor Advisory