PT-2026-2903 · Linux+1 · Linux Kernel+1

Published 2025-01-01 · Updated 2026-05-22 · CVE-2025-71142

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contained an issue within the cpuset subsystem where a warning was triggered when disabling a remote partition. This occurred when CPUs were taken offline, leading to a scenario where partitions shared CPUs with the top cpuset. Specifically, the warning indicated that the effective CPUs were not a subset of the available CPUs for the partition. The issue stemmed from a lack of partition invalidation when subpartitions CPUs became empty during the CPU hotplug process. The warning message included details such as the function triggering the warning (remote partition disable), register values, and a call trace. The provided reproduction steps involved creating a cpuset hierarchy, setting CPU exclusivity, and then taking a CPU offline, which triggered the warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-71142

OPENSUSE-SU-2026:20287-1

SUSE-SU-2026:0447-1

SUSE-SU-2026:0472-1

SUSE-SU-2026:0587-1

SUSE-SU-2026:20555-1

SUSE-SU-2026:20599-1

SUSE-SU-2026:20615-1

USN-8277-1

USN-8277-2

Affected Products

Linux Kernel

Ubuntu

References · 577

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71142.json · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2026:20287-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23394 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20599-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8277-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-43077 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:20615-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31504 · Vendor Advisory
• https://git.kernel.org/stable/c/5d8b9d38a7676be7bb5e7d57f92156a98dab39fb · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-71142 · Security Note
• https://ubuntu.com/security/CVE-2026-43078 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71152 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2026:0447-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23351 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-8277-2 · Vendor Advisory