5.5

CVE-2025-22028: linux

CVSS: 5.5v3.1MediumAnalyzed
AliasesUBUNTU-CVE-2025-22028DEBIAN-CVE-2025-22028
Published 16-04-2025Last modified 23-05-2026
Open JSON

Vulnerability summary

CVE-2025-22028 is a medium (CVSS 5.5) vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.4% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (NVD)
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 18 · Related 18
SUSE-SU-2025:01982-1USN-7594-1USN-7594-2USN-7594-3USN-7605-1USN-7605-2

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 23-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: media: vimc: skip .s_stream() for stopped entities Syzbot reported [1] a warning prompted by a check in call_s_stream() that checks whether .s_stream() operation is warranted for unstarted or stopped subdevs. Add a simple fix in vimc_streamer_pipeline_terminate() ensuring that entities skip a call to .s_stream() unless they have been previously properly started. [1] Syzbot report: ------------[ cut here ]------------ WARNING: CPU: 0 PID: 5933 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x2df/0x350 drivers/media/v4l2-core/v4l2-subdev.c:460 Modules linked in: CPU: 0 UID: 0 PID: 5933 Comm: syz-executor330 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 ... Call Trace: <TASK> vimc_streamer_pipeline_terminate+0x218/0x320 drivers/media/test-drivers/vimc/vimc-streamer.c:62 vimc_streamer_pipeline_init drivers/media/test-drivers/vimc/vimc-streamer.c:101 [inline] vimc_streamer_s_stream+0x650/0x9a0 drivers/media/test-drivers/vimc/vimc-streamer.c:203 vimc_capture_start_streaming+0xa1/0x130 drivers/media/test-drivers/vimc/vimc-capture.c:256 vb2_start_streaming+0x15f/0x5a0 drivers/media/common/videobuf2/videobuf2-core.c:1789 vb2_core_streamon+0x2a7/0x450 drivers/media/common/videobuf2/videobuf2-core.c:2348 vb2_streamon drivers/media/common/videobuf2/videobuf2-v4l2.c:875 [inline] vb2_ioctl_streamon+0xf4/0x170 drivers/media/common/videobuf2/videobuf2-v4l2.c:1118 __video_do_ioctl+0xaf0/0xf00 drivers/media/v4l2-core/v4l2-ioctl.c:3122 video_usercopy+0x4d2/0x1620 drivers/media/v4l2-core/v4l2-ioctl.c:3463 v4l2_ioctl+0x1ba/0x250 drivers/media/v4l2-core/v4l2-dev.c:366 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:906 [inline] __se_sys_ioctl fs/ioctl.c:892 [inline] __x64_sys_ioctl+0x190/0x200 fs/ioctl.c:892 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x250 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7f2b85c01b19 ...

CVSS metrics

4 scores · 3 sources · 2 versions

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu137 products
  • linuxAll versions (No fix recorded) | < 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ adc589d2a20808fb99d46a78175cd023f2040338, < a505075730d23ccc19fc4ac382a0ed73b630c057 | ≥ adc589d2a20808fb99d46a78175cd023f2040338, < 845e9286ff99ee88cfdeb2b748f730003a512190 | ≥ adc589d2a20808fb99d46a78175cd023f2040338, < 6f6064dab4dcfb7e34a395040a0c9dc22cc8765d | ≥ adc589d2a20808fb99d46a78175cd023f2040338, < 7a58d4c4cf8ff60ab1f93399deefaf6057da91c7 | ≥ adc589d2a20808fb99d46a78175cd023f2040338, < 36cef585e2a31e4ddf33a004b0584a7a572246de | 77fbb561bb09f56877dd84318212da393909975f | 73236bf581e96eb48808fea522351ed81e24c9cc | e7ae48ae47227c0302b9f4b15a5bf45934a55673 | ≥ 4.14.108, < 4.15 | ≥ 4.19.31, < 4.20 | ≥ 5.0.4, < 5.1 | 5.1
  • linux_kernel≥ 4.14.108, < 4.15 | ≥ 4.19.31, < 4.20 | ≥ 5.0.4, < 6.6.89 | ≥ 6.7, < 6.12.23 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.25-1

3 vendors · 140 products

References

27 links
Show all 27 references