PT-2026-2890 · Linux · Linux Kernel

Published 2025-01-01 · Updated 2026-04-20 · CVE-2025-71129

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw in the BPF subsystem related to handling kfunc calls on LoongArch architecture. Specifically, the issue involves improper sign extension of arguments passed to kfunc calls, potentially leading to a kernel panic. The resolution involves a new helper function, emit abi ext(), to perform in-place sign extension according to LoongArch calling conventions. This ensures arguments are correctly extended, preventing the kernel panic scenario.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71129

ECHO-F87A-20AF-B0DC

MGASA-2026-0017

MGASA-2026-0018

OESA-2026-1566

OESA-2026-1567

OESA-2026-1570

Affected Products

Linux Kernel

References · 107

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71129.json · Exploit
• https://ubuntu.com/security/CVE-2025-71129 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23220 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71065 · Security Note
• https://osv.dev/vulnerability/MGASA-2026-0018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23038 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68192 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38627 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23163 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-71221 · Security Note
• https://advisories.mageia.org/MGASA-2026-0018.html · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23205 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22984 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68785 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-22977 · Security Note