PT-2026-2870 · Linux+2 · Linux Kernel+2

Published 2025-01-01 · Updated 2026-05-11 · CVE-2025-71109

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel's ftrace functionality on MIPS architecture. A buffer overflow can occur when the kernel is located beyond 32 bits, due to the use of the UASM i LA mostly macro generating more than two instructions. This can lead to corruption of variables in the read mostly section, such as the cpu primary thread mask variable, potentially causing a system hang during boot. The issue arises from an assumption in the ftrace code that no more than two instructions would be generated. The fix prevents instruction generation if it could exceed two instructions in length.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2025-71109

ECHO-C145-1AD7-8FAB

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 704

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71109.json · Exploit
• https://ubuntu.com/security/CVE-2025-71095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68745 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40321 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39869 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23408 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71121 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68777 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23129 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8261-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22124 · Vendor Advisory