PT-2026-5507 · Linux · Linux Kernel

Published 2025-01-01 · Updated 2026-01-31 · CVE-2025-71181

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18

Description The Linux kernel contains an issue within the Rust Binder component. A missing consideration during the forward-porting of Rust Binder to version 6.18, specifically neglecting commit fb56fdf8b9a2, introduces a potential for recursive locking. This can lead to crashes, as demonstrated by warnings indicating a possible deadlock scenario involving spin locks. The issue arises from an unnecessary spin lock() call within the rust shrink free page() function. The described issue can cause crashes like the following: WARNING: possible recursive locking detected. The crash involves the kswapd0 task attempting to acquire a lock already held by itself, resulting in a deadlock.

Recommendations Update to version 6.18 or later to resolve this vulnerability.

Exploit

Fix

Improper Locking

Weakness Enumeration

CWE-667

CWE-833

Related Identifiers

BDU:2026-04133

CVE-2025-71181

Affected Products

Linux Kernel

References · 15

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71181.json · Exploit
• https://cve.org/CVERecord?id=CVE-2025-71181 · Security Note
• https://osv.dev/vulnerability/CVE-2025-71181 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-71181 · Vendor Advisory
• https://git.kernel.org/stable/c/30a98c97f7874031f2e1de19c777ce011143cba4 · Patch
• https://ubuntu.com/security/CVE-2025-71181 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-71181 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-71181 · Security Note
• https://bdu.fstec.ru/vul/2026-04133 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-71181 · Vendor Advisory
• https://git.kernel.org/stable/c/361e0ff456a8daf9753c18030533256e4133ce7a · Patch
• https://twitter.com/CVEnew/status/2017567112886190137 · Twitter Post
• https://git.kernel.org/linus/361e0ff456a8daf9753c18030533256e4133ce7a · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/VulmonFeeds/status/2017664611583930788 · Twitter Post