SECUFOCUSNOW
Home›CVE index›CVE-2025-22036
Review reviewHigh

CVE-2025-22036

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation. <CPU 0> <CPU 1> mpage_read_folio <<bh on stack>> do_mpage_readpage exfat_get_block bh_read __bh_read get_bh(bh) submit_bh wait_on_buffer ... end_buffer_read_sync __end_buffer_read_notouch unlock_buffer <<keep going>> ... ... ... ... <<bh is not valid out of mpage_read_folio>> . . another_f...

CVSS
7
EPSS
0.19%
8.58% percentile
CISA KEV
Not listed
Published
2025.04.17
PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability0.19%
Technical severityCVSS 7

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation. <CPU 0> <CPU 1> mpage_read_folio <<bh on stack>> do_mpage_readpage exfat_get_block bh_read __bh_read get_bh(bh) submit_bh wait_on_buffer ... end_buffer_read_sync __end_buffer_read_notouch unlock_buffer <<keep going>> ... ... ... ... <<bh is not valid out of mpage_read_folio>> . . another_f...

Affected product and versions

Product
Linux Linux, linux kernel
Affected versions
>= 11a347fb6cef62ce47e84b97c45f2b2497c7593b < 49b0a6ab8e528a0c1c50e37cef9b9c7c121365f2, >= 11a347fb6cef62ce47e84b97c45f2b2497c7593b < f7447286363dc1e410bf30b87d75168f3519f9cc, >= 11a347fb6cef62ce47e84b97c45f2b2497c7593b < f807a6bf2005740fa26b4f59c4a003dc966b9afd, >= 11a347fb6cef62ce47e84b97c45f2b2497c7593b < 1bb7ff4204b6d4927e982cd256286c09ed4fd8ca, >= 6.8, >= 6.8 < 6.12.23, >= 6.13 < 6.13.11, >= 6.14 < 6.14.2
Fixed versions
6.12.23, 6.13.11, 6.14.2

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux Linux, linux kernel and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
CWE-362, CWE-416