Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-22015

19
FAUCET Score

CVE-2025-22015 is a Linux kernel vulnerability in the memory management subsystem, specifically affecting the handling of shared memory (shmem) folios during migration. It can lead to xarray multi-index entry corruption due to incorrect determination of xarray entries to update, potentially causing a denial of service. With a CVSS score of 5.5 (Medium), it requires local access and low privileges, but has a high impact on availability. There is currently no public exploit intelligence, Metasploit modules, Nuclei templates, or ExploitDB entries available, and it has received minimal community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
>= 6.1.71, < 6.1.132CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.6.10, < 6.6.85CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.7.1, < 6.12.21CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.13, < 6.13.9CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
6.7CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:6.7:-:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.18%
Probability of exploitation in next 30 days
EPSS Percentile
8.5%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 43rd percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (6)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 10Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel
redhatvendor investigatingvia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: kernel-rt

Vendor Advisories (4)

honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
redhatCVE-2025-22015Moderate

kernel: mm/migrate: fix shmem xarray update during migration

Apr 8, 2025

References

cert-portal.siemens.com / productcert/html/ssa-019113.html
git.kernel.org / stable/c/29124ae980e2860f0eec7355949d3d3292ee81da
Patch
git.kernel.org / stable/c/49100c0b070e900f87c8fac3be9b9ef8a30fa673
Patch
git.kernel.org / stable/c/60cf233b585cdf1f3c5e52d1225606b86acd08b0
Patch
git.kernel.org / stable/c/75cfb92eb63298d717b6b0118f91ba12c4fcfeb5
Patch
git.kernel.org / stable/c/c057ee03f751d6cecf7ee64f52f6545d94082aaa
Patch
lists.debian.org / debian-lts-announce/2025/05/msg00045.html