CVE-2025-22081: linux Integer Overflow or Wraparound
CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-22081DEBIAN-CVE-2025-22081
Published 16-04-2025Last modified 05-08-2026
Vulnerability summary
CVE-2025-22081 is a high (CVSS 7.8) Integer Overflow or Wraparound vulnerability in linux. EPSS estimates a 0.21% chance of exploitation in the next 30 days, higher than 11% of scored vulnerabilities.
CVSS score
7.8/10
010
High · v3.1 (CVE.org)EPSS score
0.21%
0%100%
Low · 0.00 pp in 30 daysKEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded
Advisory lineage
Upstream 0 · Downstream 34 · Related 30DLA-4193-1DSA-5907-1MGASA-2025-0142MGASA-2025-0146USN-7591-1USN-7591-2USN-7591-3USN-7591-4USN-7591-5USN-7591-6USN-7592-1USN-7593-1USN-7594-1USN-7594-2USN-7594-3USN-7597-1USN-7597-2USN-7598-1USN-7602-1USN-7605-1USN-7605-2USN-7606-1USN-7628-1USN-7655-1USN-7835-1USN-7835-2USN-7835-3USN-7835-4USN-7835-5USN-7835-6USN-7887-1USN-7887-2USN-7940-1USN-7940-2
Timeline
- 16-04-2025PublishedVulnerability first disclosed.
- 05-08-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Fix a couple integer overflows on 32bit systems On 32bit systems the "off + sizeof(struct NTFS_DE)" addition can have an integer wrapping issue. Fix it by using size_add().
CVSS metrics
5 scores · 4 sources · 2 versionsMedium 6.0Preferred score · OSV · Ubuntu (Ecosystem advisory) · calculated from vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:NSourcesSingle source
High 7.8Preferred score · CVE.org (CNA)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSources4 sources · 5.5–7.8
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
- NVDNIST5.5MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HDiffers
EPSS trend
Probability
0.21%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
0.00 pp
From 0.21% on 19-09-2026
19-09-202619-10-2026
EPSS score0.21%
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Ubuntu125 products
- linux< 5.15.0-142.152 | < 6.8.0-86.87
- linux-allwinner-5.19All versions (No fix recorded)
- linux-aws< 5.15.0-1086.93 | < 6.8.0-1041.43
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Linux2 products
- linux≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 0922d86a7a6032cb1694eab0b44b861bd33ba8d5 | ≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 1a14e9718a19d2e88de004a1360bfd7a86ed1395 | ≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 0dfe700fbd3525f30a36ffbe390a5b9319bd009a | ≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 284c9549386e9883855fb82b730303bb2edea9de | ≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 0538f52410b619737e663167b6a2b2d0bc1a589d | ≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 4d0f4f42922a832388a0c2fe5204c0a1037ff786 | ≥ 82cae269cfa953032fbb8980a7d554d60fb00b17, < 5ad414f4df2294b28836b5b7b69787659d6aa708 | 5.15
- linux_kernel≥ 5.15, < 5.15.180 | ≥ 5.16, < 6.1.134 | ≥ 6.2, < 6.6.87 | ≥ 6.7, < 6.12.23 | ≥ 6.13, < 6.13.11 | ≥ 6.14, < 6.14.2
Debian1 product
- linux< 6.1.135-1 | < 6.12.25-1
3 vendors · 128 products
