PT-2026-2866 · Linux+2 · Linux Kernel+2

Published 2025-01-01 · Updated 2026-05-26 · CVE-2025-71105

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc4

Description The Linux kernel had an issue in the f2fs file system related to the management of slab caches for extended attributes. Specifically, the system was creating per-superblock slab caches, which could lead to issues when mounting and unmounting file systems. If two slab caches with the same size were created, the slab system would share the same core structure and cache address. Destroying one cache would not fully release the associated resources, and attempting to recreate a cache with the same name would trigger a warning. This was addressed by using a global inline xattr slab cache instead of per-superblock slab caches.

Recommendations Update to a version of the Linux kernel newer than 6.17.0-rc4.

Exploit

Fix

Related Identifiers

CVE-2025-71105

ECHO-C6C5-8FFE-41C3

MGASA-2026-0017

MGASA-2026-0018

USN-8096-1

USN-8096-2

USN-8096-3

USN-8096-4

USN-8096-5

USN-8116-1

USN-8141-1

USN-8163-1

USN-8163-2

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8243-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 850

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71105.json · Exploit
• https://ubuntu.com/security/CVE-2025-40223 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40333 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40294 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8179-4 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40040 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68222 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68233 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8116-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71150 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23020 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68311 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40325 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40106 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-41014 · Vendor Advisory