CVE-2025-71072 addresses a vulnerability in the Linux kernel's shmem (shared memory) component, specifically concerning recovery mechanisms during rename failures. The issue arises when maple_tree insertions fail due to low memory, leading to improper handling by simple_offset_rename() and simple_offset_rename_exchange() functions. While no CVSS score is provided, its FAUCET Risk Score is 39/100, and its EPSS score is very low, indicating a minimal likelihood of exploitation. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, though it has garnered some community discussion with 10 mentions.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 6.6.1, < 6.12.64CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
>= 6.13, < 6.18.3CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | ||
6.6CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.6:-:*:*:*:*:*:* | ||
6.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.19:rc1:*:*:*:*:*:* | ||
6.19CPE matchmatch criteria | cpe:2.3:o:linux:linux_kernel:6.19:rc2:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Linux kernel (NVIDIA Tegra) vulnerabilities
May 11, 2026Linux kernel (Xilinx) vulnerabilities
May 7, 2026Linux kernel (Azure FIPS) vulnerabilities
May 7, 2026Linux kernel (Azure) vulnerabilities
May 7, 2026Linux kernel (Raspberry Pi) vulnerabilities
May 7, 2026Linux kernel vulnerabilities
May 7, 2026Linux kernel (GCP) vulnerabilities
May 7, 2026Linux kernel (Low Latency NVIDIA) vulnerabilities
Apr 28, 2026Linux kernel (Raspberry Pi Real-time) vulnerabilities
Apr 23, 2026Linux kernel (Oracle) vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel vulnerabilities
Apr 23, 2026Linux kernel (NVIDIA) vulnerabilities
Apr 17, 2026Linux kernel (FIPS) vulnerabilities
Apr 17, 2026Linux kernel (Real-time) vulnerabilities
Apr 17, 2026Linux kernel (GCP) vulnerabilities
Apr 17, 2026Linux kernel vulnerabilities
Apr 16, 2026Linux kernel vulnerabilities
Apr 16, 2026shmem: fix recovery on rename failures
Jan 13, 2026kernel: shmem: fix recovery on rename failures
Jan 13, 2026