Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-22018

18
FAUCET Score

CVE-2025-22018 is a Null Pointer Dereference vulnerability in the Linux kernel's ATM subsystem, specifically within the MPOA_cache_impos_rcvd() function. This flaw allows an attacker to trigger a system crash (denial of service) if both 'entry' and 'holding_time' parameters are NULL when the function receives a message. Rated with a CVSS score of 5.5 (Medium), this vulnerability has a local attack vector and low attack complexity, requiring local access and privileges to exploit. The primary impact is a high availability loss, as it can lead to a system crash. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) or significant community discussion has been identified. The vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog.

Impacted Technologies

VendorProductVersion(s)CPE
>= 2.6.12, < 5.4.292CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.5, < 5.10.236CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.11, < 5.15.180CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 5.16, < 6.1.133CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
>= 6.2, < 6.6.86CPE matchmatch criteria
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

5.5MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
Exploitability Score
1.8
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.19%
Probability of exploitation in next 30 days
EPSS Percentile
8.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0019 is in the 44th percentile among its peer group of 15,940 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

autodeskpatch availablevia llm_extracted
View patch
freepbxpatch availablevia llm_extracted
View patch
honeywellpatch availablevia llm_extracted
View patch
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.85.1-4 on Azure Linux 3.0Fixed in: 6.6.92.2-1
microsoftpatch availablevia msrc
Product: 19734-17084Fixed in: 6.6.92.2-1
microsoftpatch availablevia msrc
Product: 19529-17084Fixed in: 6.6.92.2-1
microsoftpatch availablevia msrc
Product: azl3 kernel 6.6.92.2-1 on Azure Linux 3.0Fixed in: 6.6.92.2-1
grafanavendor investigatingvia llm_extracted
View patch

Vendor Advisories (6)

grafanallm-grafana-3bfe68bd8f94bc6dCRITICAL

HP ThinPro 8.1 SP9 Security Updates

Feb 2, 2026
honeywellllm-honeywell-c82b5cfda9df97a3CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
autodeskllm-autodesk-c365b674a2ff5a3aCRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
freepbxllm-freepbx-e54908c7967265f6CRITICAL

HP ThinPro 8.1 SP8 Security Updates

Oct 27, 2025
redhatCVE-2025-22018Moderate

kernel: atm: Fix NULL pointer dereference

Apr 16, 2025
microsoft2025-Apr/CVE-2025-22018Moderate

atm: Fix NULL pointer dereference

Apr 8, 2025

References

git.kernel.org / stable/c/09691f367df44fe93255274d80a439f9bb3263fc
Patch
git.kernel.org / stable/c/0ef6e49881b6b50ac454cb9d6501d009fdceb6fc
Patch
git.kernel.org / stable/c/14c7aca5ba2740973de27c1bb8df77b4dcb6f775
Patch
git.kernel.org / stable/c/1505f9b720656b17865e4166ab002960162bf679
Patch
git.kernel.org / stable/c/3c23bb2c894e9ef2727682f98c341b20f78c9013
Patch
git.kernel.org / stable/c/9da6b6340dbcf0f60ae3ec6a7d6438337c32518a
Patch
git.kernel.org / stable/c/ab92f51c7f53a08f1a686bfb80690ebb3672357d
Patch
git.kernel.org / stable/c/bf2986fcf82a449441f9ee4335df19be19e83970
Patch
git.kernel.org / stable/c/d7f1e4a53a51cc6ba833afcb40439f18dab61c1f
Patch
lists.debian.org / debian-lts-announce/2025/05/msg00030.html
lists.debian.org / debian-lts-announce/2025/05/msg00045.html