7.8

CVE-2025-22057: linux

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-22057DEBIAN-CVE-2025-22057
Published 16-04-2025Last modified 15-10-2026
Open JSON

Vulnerability summary

CVE-2025-22057 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 10.9% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 30 · Related 28
MGASA-2025-0142MGASA-2025-0146SUSE-SU-2025:01919-1SUSE-SU-2025:01951-1SUSE-SU-2025:01964-1SUSE-SU-2025:01965-1

Timeline

  1. 16-04-2025
    PublishedVulnerability first disclosed.
  2. 15-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: net: decrease cached dst counters in dst_release Upstream fix ac888d58869b ("net: do not delay dst_entries_add() in dst_release()") moved decrementing the dst count from dst_destroy to dst_release to avoid accessing already freed data in case of netns dismantle. However in case CONFIG_DST_CACHE is enabled and OvS+tunnels are used, this fix is incomplete as the same issue will be seen for cached dsts: Unable to handle kernel paging request at virtual address ffff5aabf6b5c000 Call trace: percpu_counter_add_batch+0x3c/0x160 (P) dst_release+0xec/0x108 dst_cache_destroy+0x68/0xd8 dst_destroy+0x13c/0x168 dst_destroy_rcu+0x1c/0xb0 rcu_do_batch+0x18c/0x7d0 rcu_core+0x174/0x378 rcu_core_si+0x18/0x30 Fix this by invalidating the cache, and thus decrementing cached dst counters, in dst_release too.

CVSS metrics

5 scores · 4 sources · 2 versions

EPSS trend

Probability

0.21%

Chance of exploitation in the next 30 days

Percentile

11%

Versus all other CVEs

30-day change

0.00 pp

From 0.21% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu137 products
  • linuxAll versions (No fix recorded) | < 6.8.0-86.87
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 6.8.0-1041.43
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8, < ccc331fd5bcae131d2627d5ef099d4a1f6540aea | ≥ d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8, < 92a5c18513117be69bc00419dd1724c1940f8fcd | ≥ d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8, < 836415a8405c9665ae55352fc5ba865c242f5e4f | ≥ d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8, < e833e7ad64eb2f63867f65303be49ca30ee8819e | ≥ d71785ffc7e7cae3fbdc4ea8a9d05b7a1c59f7b8, < 3a0a3ff6593d670af2451ec363ccb7b18aec0c0a | 4.6
  • linux_kernel≥ 4.6, < 6.6.87 | ≥ 6.7, < 6.12.23 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2
Debian1 product
  • linuxAll versions (No fix recorded) | < 6.12.25-1

3 vendors · 140 products

References

27 links
Show all 27 references