PT-2026-2593 · Linux+2 · Linux Kernel+2

Published

2026-01-13

·

Updated

2026-06-16

·

CVE-2025-71072

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains a flaw related to shmem recovery during rename failures. Maple tree insertions can fail under memory pressure, and the simple offset rename() and simple offset rename exchange() functions do not handle these failures effectively. Additionally, shmem whiteout() relies on shmem rename2() progressing to d move(), which may not occur if shmem rename2() fails after a successful shmem whiteout() call. The issue is addressed by ensuring mtree store() does not fail when attempting to store an existing singleton index in the tree and by preinserting the target into the tree in shmem rename2().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Related Identifiers

AZL-74420
CVE-2025-71072
OESA-2026-1759
OESA-2026-1760
OESA-2026-1761
USN-8177-1
USN-8177-2
USN-8179-1
USN-8179-2
USN-8179-3
USN-8179-4
USN-8183-1
USN-8183-2
USN-8184-1
USN-8185-1
USN-8185-2
USN-8203-1
USN-8204-1
USN-8245-1
USN-8257-1
USN-8258-1
USN-8260-1
USN-8261-1
USN-8265-1
USN-8440-1

Affected Products

Linuxmint
Linux Kernel
Ubuntu