PT-2026-2883 · Linux+2 · Linux Kernel+2

Published 2025-01-01 · Updated 2026-05-11 · CVE-2025-71122

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An integer overflow issue was identified in the iommufd/selftest component of the Linux kernel. The issue was discovered through syzkaller testing, which revealed a potential for corruption of the reserved interval tree due to an overflow in the IOMMU TEST OP ADD RESERVED operation. This overflow could be triggered by manipulating user input within the test infrastructure, leading to a WARN ON condition. The vulnerability is present in test kernels with CONFIG IOMMUFD TEST enabled.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71122

MGASA-2026-0017

MGASA-2026-0018

USN-8177-1

USN-8177-2

USN-8179-1

USN-8179-2

USN-8179-3

USN-8179-4

USN-8183-1

USN-8183-2

USN-8184-1

USN-8185-1

USN-8185-2

USN-8203-1

USN-8204-1

USN-8245-1

USN-8257-1

USN-8258-1

USN-8260-1

USN-8261-1

USN-8265-1

Affected Products

Linux Kernel

Linuxmint

Ubuntu

References · 712

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71122.json · Exploit
• https://ubuntu.com/security/CVE-2025-71095 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40035 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68244 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68340 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68745 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-40321 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-39869 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23408 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71121 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68777 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71117 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-23129 · Vendor Advisory
• https://osv.dev/vulnerability/USN-8261-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-22124 · Vendor Advisory