CVE-2025-22018
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 16, 2025
Updated: May 6, 2025
CWE ID 476
Summary
CVE-2025-22018 is a Linux kernel vulnerability that involves a NULL pointer dereference in the 'atm' subsystem's MPOA cache. This issue occurs when both the 'entry' and 'holding_time' variables are NULL, allowing a reference to 'entry' in the 'eg_cache_put()' function. The result is a null-pointer dereference, which can lead to a kernel panic and potential system instability. The vulnerability was discovered during a memory error scan using KASAN, with the affected code located in 'eg_cache_remove_entry()'.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.