CVE-2025-22087Out-of-bounds Read in Linux

CWE-125Out-of-bounds Read19 documents6 sources
Severity
7.1HIGHNVD
OSV5.9
EPSS
0.1%
top 79.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedApr 16
Latest updateJul 8

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Fix array bounds error with may_goto may_goto uses an additional 8 bytes on the stack, which causes the interpreters[] array to go out of bounds when calculating index by stack_size. 1. If a BPF program is rewritten, re-evaluate the stack size. For non-JIT cases, reject loading directly. 2. For non-JIT cases, calculating interpreters[idx] may still cause out-of-bounds array access, and just warn about it. 3. For jit_re

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages5 packages

NVDlinux/linux_kernel6.96.12.23+2
Debianlinux/linux_kernel< 6.12.25-1+1
Ubuntulinux/linux_kernel< 6.14.0-22.22
CVEListV5linux/linux011832b97b311bb9e3c27945bc0d1089a14209c919e6817f84000d0b06f09fd69ebd56217842c122+4
debiandebian/linux< linux 6.12.25-1 (forky)

Patches

🔴Vulnerability Details

9
OSV
linux-azure, linux-azure-6.11 vulnerabilities2025-07-08
OSV
linux-aws, linux-oracle vulnerabilities2025-07-08
OSV
linux-lowlatency, linux-lowlatency-hwe-6.11 vulnerabilities2025-07-04
OSV
linux-oem-6.11 vulnerabilities2025-06-30
OSV
linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-oracle, linux-raspi, linux-realtime vulnerabilities2025-06-30

📋Vendor Advisories

9
Ubuntu
Linux kernel (Azure) vulnerabilities2025-07-08
Ubuntu
Linux kernel vulnerabilities2025-07-08
Ubuntu
Linux kernel (Low Latency) vulnerabilities2025-07-04
Ubuntu
Linux kernel vulnerabilities2025-06-30
Ubuntu
Linux kernel (OEM) vulnerabilities2025-06-30
CVE-2025-22087 — Out-of-bounds Read in Linux | cvebase