CVE-2025-22025: linux kernel before 5.10.236 (exclusive), from 5.11 (inclusive), before 5.15.180 (exclusive), from 5.16 (inclusive)…

Affected technology

linux kernel · before 5.10.236 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.180 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.134 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.87 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.23 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.13.11 (exclusive)
linux

linux kernel · from 6.14 (inclusive), before 6.14.2 (exclusive)
linux

Linux · b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before b874cdef4e67e5150e07eff0eae1cbb21fb92da1, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before cdb796137c57e68ca34518d53be53b679351eb86, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before d96587cc93ec369031bcd7658c6adc719873c9fd, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before 9a81cde8c7ce65dd90fb47ceea93a45fc1a2fbd1, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before cad3479b63661a399c9df1d0b759e1806e2df3c8, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before 63b91c8ff4589f5263873b24c052447a28e10ef7, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before 133f5e2a37ce08c82d24e8fba65e0a81deae4609, b5a1a81e5c25fb6bb3fdc1812ba69ff6ab638fcf to before 230ca758453c63bd38e4d9f4a21db698f7abada8
Linux

Linux · 2.6.35
Linux

Component: Not specified by the source
Function: nfsd4_cb_recall_release
File: fs/nfsd/nfs4state.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.