CVE-2025-22019 addresses a vulnerability in the Linux kernel's bcachefs filesystem, specifically within the bch2_ioctl_subvolume_destroy() function, where incorrect dcache pruning could lead to a denial of service and missing permission checks were identified. With a CVSS score of 5.5 (MEDIUM), this local vulnerability requires low privileges and low attack complexity, allowing an attacker to cause a high availability impact. There is currently no public exploit code available, nor is there any evidence of active exploitation. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.7, < 6.12.22CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.13.10CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.14, < 6.14.2CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.