CVE-2025-22107

Aliases:UBUNTU-CVE-2025-22107DEBIAN-CVE-2025-22107CGA-22px-xqmv-2mw8CGA-2675-rrfp-m8w9CGA-28cf-pwjc-pwvmCGA-2f7c-547g-pp76CGA-327v-m5m4-cj95CGA-33qp-q5x6-7fmgCGA-347j-wxcf-v4x2CGA-35c8-x8c3-6q8qCGA-36fp-c73h-8v92CGA-3cq7-44wh-vg73CGA-3wqx-jj8m-2chqCGA-44wx-wmpc-m57gCGA-4597-6jm3-7rg3CGA-45r2-89cf-7xfmCGA-4jpg-vw6w-7pwcCGA-56q7-7rgp-mf82CGA-5f9p-hm2m-67pjCGA-5r5r-66pj-2p7wCGA-5x5p-qphg-j3jgCGA-65q7-j7m9-f6mgCGA-65rp-rjrw-9jpfCGA-6g78-wvfc-ggrvCGA-6vp7-9c67-5f6wCGA-6xmf-9hww-wh6cCGA-7322-25mw-jwgrCGA-73w8-39fj-x4ggCGA-73wv-qjxw-59h6CGA-744m-f7x6-chrrCGA-76v5-92jx-85wrCGA-798x-6g42-525gCGA-7hg6-m4jp-89chCGA-7vwc-5r93-9q6jCGA-8257-q94r-gp23CGA-82wx-pwqr-wwxwCGA-84gv-pxc8-q2v7CGA-8554-822w-5mhrCGA-889v-9hhc-r524CGA-8hw5-vj8q-8fw4CGA-8jjf-gc8m-j56cCGA-8rhq-5h8p-c4hvCGA-8wmc-92qj-j8j4CGA-8xgg-wg2j-ggcvCGA-938w-mh29-q2qgCGA-9472-2x59-rh5wCGA-9698-g5gx-6hj5CGA-9gq4-32cj-j5wfCGA-9hwv-7wh4-r762CGA-9v2p-72r3-9jjjCGA-9wpg-86fr-6vvxCGA-c33p-3vj5-q679CGA-c5j6-6wpx-qf9jCGA-cf25-49jf-4m77CGA-cq8g-hgv7-wgx2CGA-cvvv-wgm4-9jf7CGA-f55q-wc24-5fw8CGA-f5qh-wmqj-r263CGA-f88f-xf35-4845CGA-f8c9-932h-v6h9CGA-fc7w-7gfq-56v6CGA-fph6-hm2r-v857CGA-fvr9-96fx-8v56CGA-gf5x-ppxv-vj2xCGA-gh45-xrcx-2vq4CGA-h32r-6j4w-75q2CGA-h3q5-c5h5-gjwpCGA-h4qv-qw52-hw6vCGA-h5xc-3jmx-3775CGA-hf2h-mpmx-9gj9CGA-hmjp-8rmc-37rqCGA-j4p6-765p-6cw9CGA-j786-r9h2-6g65CGA-j8w4-4p28-7gmjCGA-jc63-p5mx-4m89CGA-jq3w-27f3-hp72CGA-jvjr-mc8w-gw9cCGA-jwwg-gc78-5388CGA-m3ch-6fh2-843rCGA-m3m3-xg8h-7265CGA-m46c-wf69-7m3pCGA-m48f-m8xr-54f9CGA-m884-h35h-gv53CGA-mh6v-2xqm-gpcfCGA-mv4j-w3f9-r6cxCGA-mxcr-jgx5-5wpxCGA-p479-753g-978cCGA-pc35-wv6h-cqmgCGA-pfcp-vf58-gh5xCGA-pgwc-m5hw-2v57CGA-pjwq-3hhw-hhc3CGA-pvcv-hjxv-2466CGA-q372-893c-vm6fCGA-q5h2-x7w5-4p29CGA-q644-wxxg-9fvpCGA-q73j-8pm4-v4hcCGA-q898-prrw-799pCGA-qcc2-gchc-prwmCGA-qmg3-6h8g-87vhCGA-qqq7-mv4m-phx8CGA-qv59-68x2-ghjgCGA-qw89-rh64-489cCGA-r3jh-7v9j-jcc5CGA-r69q-cp25-gcq2CGA-r8f5-r595-6jhgCGA-r8mw-x377-c42qCGA-rcpj-r9xm-mvgjCGA-rmjf-86hm-g23jCGA-rxfh-8g7j-8m67CGA-v2h7-95f6-mx8xCGA-v48q-r34h-2v6hCGA-v65x-hp6g-j2vqCGA-v99x-3cfj-6674CGA-w3rx-f8f3-wc5rCGA-w45g-vqff-qr4gCGA-w49r-23c9-f5qmCGA-wv57-8r7f-w44gCGA-wx67-738p-p459CGA-xf9g-85pw-gfx6CGA-xh42-cvq6-pch3
Advisory lineage Upstream: 0 Downstream: 40
Modified
Published: 16 Apr 2025, 14:12
Last modified:08 Sept 2026, 08:41

Vulnerability Summary

Overall Risk (default)
medium
28/100
CVSS Score
7.1 HIGH
v3.1 (nvd)
EPSS Score
0.21% LOW
0% probability +0.18%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

16 Apr 2025, 14:12
Published
Vulnerability first disclosed
08 Sept 2026, 08:41
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry() There are actually 2 problems: - deleting the last element doesn't require the memmove of elements [i + 1, end) over it. Actually, element i+1 is out of bounds. - The memmove itself should move size - i - 1 elements, because the last element is out of bounds. The out-of-bounds element still remains out of bounds after being accessed, so the problem is only that we touch it, not that it becomes in active use. But I suppose it can lead to issues if the out-of-bounds element is part of an unmapped page.

CVSS Metrics

  • v3.1•HIGH•Score: 7.1CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS Trends

Current EPSS score: 0.21%• Percentile: 11%

Techniques & Countermeasures

  • CWE-125•Out-of-bounds Read

    The product reads data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • chainguard•linux-aws-6.12

    < 6.12.76-r0 | < 6.12.60-r4 | < 6.12.71-r0 | < 6.12.65-r1 | < 6.12.69-r0 | < 6.12.74-r0 | < 6.12.80-r0 | < 6.12.66-r0 | < 6.12.65-r0 | < 6.12.65-r2 | < 6.12.77-r1 | < 6.12.70-r0 | < 6.12.78-r0 | < 6.12.74-r1 | < 6.12.67-r0 | < 6.12.68-r1 | < 6.12.62-r2 | < 6.12.77-r2 | < 6.12.57-r2 | < 6.12.72-r1 | < 6.12.72-r0 | < 6.12.77-r0 | < 6.12.68-r0 | < 6.12.62-r0 | < 6.12.62-r1 | < 6.12.63-r0

  • chainguard•linux-azure-6.12

    < 6.12.67-r0 | < 6.12.66-r0 | < 6.12.63-r0 | < 6.12.72-r0 | < 6.12.62-r0 | < 6.12.65-r3 | < 6.12.60-r4 | < 6.12.70-r0 | < 6.12.60-r3 | < 6.12.76-r0 | < 6.12.65-r4 | < 6.12.69-r0 | < 6.12.68-r0 | < 6.12.62-r1 | < 6.12.77-r0 | < 6.12.62-r2 | < 6.12.78-r0 | < 6.12.57-r2 | < 6.12.65-r2 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.74-r1 | < 6.12.80-r0 | < 6.12.71-r0 | < 6.12.74-r0 | < 6.12.77-r1

  • chainguard•linux-gcp-6.12

    < 6.12.65-r0 | < 6.12.74-r1 | < 6.12.57-r2 | < 6.12.72-r0 | < 6.12.68-r0 | < 6.12.60-r3 | < 6.12.66-r0 | < 6.12.63-r0 | < 6.12.67-r0 | < 6.12.76-r0 | < 6.12.60-r4 | < 6.12.80-r0 | < 6.12.62-r0 | < 6.12.77-r0 | < 6.12.65-r2 | < 6.12.69-r0 | < 6.12.62-r1 | < 6.12.71-r0 | < 6.12.65-r1 | < 6.12.62-r2 | < 6.12.70-r0 | < 6.12.74-r0 | < 6.12.77-r2 | < 6.12.78-r0 | < 6.12.68-r1 | < 6.12.77-r1

  • chainguard•linux-qemu-6.12

    < 6.12.66-r0 | < 6.12.67-r0 | < 6.12.68-r0 | < 6.12.72-r0 | < 6.12.70-r0 | < 6.12.74-r1 | < 6.12.77-r1 | < 6.12.76-r0 | < 6.12.77-r0 | < 6.12.69-r0 | < 6.12.71-r0 | < 6.12.80-r0 | < 6.12.74-r0 | < 6.12.77-r2 | < 6.12.65-r1 | < 6.12.65-r2 | < 6.12.78-r0

  • chainguard•linux-vmware-6.12

    < 6.12.71-r0 | < 6.12.69-r0 | < 6.12.76-r0 | < 6.12.77-r0 | < 6.12.74-r0 | < 6.12.74-r1 | < 6.12.67-r0 | < 6.12.68-r0 | < 6.12.80-r0 | < 6.12.68-r1 | < 6.12.65-r1 | < 6.12.77-r2 | < 6.12.66-r0 | < 6.12.78-r0 | < 6.12.70-r0 | < 6.12.72-r0 | < 6.12.77-r1 | < 6.12.65-r2

  • debian•linux

    < 5.10.259-1 | < 6.1.162-1 | < 6.12.63-1 | < 6.16.3-1

  • debian•linux-6.1

    < 6.1.162-1~deb11u1

  • ubuntu•linux

    all | < 5.15.0-186.196 | < 6.8.0-106.106

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    all | < 5.15.0-1112.119 | < 6.8.0-1050.53

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1112.119~20.04.1

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    all

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-6.5

    all

  • ubuntu•linux-aws-6.8

    < 6.8.0-1050.53~22.04.1

  • ubuntu•linux-aws-fips

    all | < 5.15.0-1112.119+fips1 | < 6.8.0-1050.53+fips1

  • ubuntu•linux-azure

    all | all | < 5.15.0-1117.126 | < 6.8.0-1051.57

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1117.126~20.04.1

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    all

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.11

    all

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-6.5

    all

  • ubuntu•linux-azure-6.8

    < 6.8.0-1051.57~22.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all | < 5.15.0-1117.126 | all | all

  • ubuntu•linux-azure-fde-5.15

    < 5.15.0-1117.126~20.04.2

  • ubuntu•linux-azure-fde-5.19

    all

  • ubuntu•linux-azure-fde-6.2

    all

  • ubuntu•linux-azure-fde-6.8

    all

  • ubuntu•linux-azure-fips

    all | < 5.15.0-1117.126+fips1 | < 6.8.0-1052.58+fips1

  • ubuntu•linux-azure-nvidia

    all

  • ubuntu•linux-bluefield

    all | all | < 5.15.0-1096.98 | < 6.8.0-1017.21

  • ubuntu•linux-fips

    all | < 5.15.0-186.196+fips1 | < 6.8.0-106.106+fips1

  • ubuntu•linux-gcp

    all | all | < 5.15.0-1112.122 | < 6.8.0-1052.55

  • ubuntu•linux-gcp-5.11

    all

  • ubuntu•linux-gcp-5.13

    all

  • ubuntu•linux-gcp-5.15

    all | < 5.15.0-1112.122~20.04.1

  • ubuntu•linux-gcp-5.19

    all

  • ubuntu•linux-gcp-5.3

    all

Showing first 50 affected entries in server-rendered view.

References (37)