Input validation error in Linux kernel - CVE-2025-71220

Vulnerability identifier: #VU122950

CSH Severity: Low

CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2025-71220

CWE-ID: CWE-20

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to perform a denial of service (DoS) attack.

The vulnerability exists due to improper input validation within the create_smb2_pipe() function in fs/smb/server/smb2pdu.c. A local user can perform a denial of service (DoS) attack.

Linux kernel
Debian Linux
Ubuntu
openEuler
linux (Ubuntu package)
linux-kvm (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-azure (Ubuntu package)
linux-raspi (Ubuntu package)
linux-oracle (Ubuntu package)
linux-lowlatency (Ubuntu package)
linux-gke (Ubuntu package)
linux-aws-5.15 (Ubuntu package)
linux-lowlatency-hwe-5.15 (Ubuntu package)
linux-hwe-5.15 (Ubuntu package)
linux-fips (Ubuntu package)
linux-azure-5.15 (Ubuntu package)
linux-ibm-5.15 (Ubuntu package)
linux-realtime (Ubuntu package)
linux-nvidia (Ubuntu package)
linux-nvidia-tegra (Ubuntu package)
linux-gkeop (Ubuntu package)
linux-intel-iotg (Ubuntu package)
linux-nvidia-tegra-igx (Ubuntu package)
linux-azure-fde-5.15 (Ubuntu package)
linux-ibm (Ubuntu package)
linux-intel-iotg-5.15 (Ubuntu package)
linux-oracle-5.15 (Ubuntu package)
linux-gcp-5.15 (Ubuntu package)
linux-nvidia-tegra-5.15 (Ubuntu package)
linux-xilinx-zynqmp (Ubuntu package)
linux-intel-iot-realtime (Ubuntu package)
linux-gcp-fips (Ubuntu package)
linux-aws-fips (Ubuntu package)
linux-azure-fips (Ubuntu package)
linux-lowlatency-hwe-6.8 (Ubuntu package)
linux-nvidia-lowlatency (Ubuntu package)
linux-nvidia-6.8 (Ubuntu package)
linux-ibm-6.8 (Ubuntu package)
linux-raspi-realtime (Ubuntu package)
linux-realtime-6.8 (Ubuntu package)
kernel-headers
python3-perf-debuginfo
python3-perf
perf-debuginfo
perf
kernel-tools-devel
kernel-tools-debuginfo
kernel-tools
kernel-source
kernel-devel
kernel-debugsource
kernel-debuginfo
bpftool-debuginfo
bpftool
kernel
kernel-extra-modules
linux (Debian package)

Install update from vendor's repository.

linux (Ubuntu package) - addressed in versions 5.15.0-185.195, 6.8.0-117.117
linux-kvm (Ubuntu package) - update to 5.15.0-1103.108
linux-aws (Ubuntu package) - addressed in versions 5.15.0-1111.118, 6.8.0-1055.58
linux-gcp (Ubuntu package) - addressed in versions 5.15.0-1111.121, 6.8.0-1058.61
linux-azure (Ubuntu package) - addressed in versions 5.15.0-1116.125, 6.8.0-1056.62
linux-raspi (Ubuntu package) - addressed in versions 5.15.0-1105.108, 6.8.0-1056.60
linux-oracle (Ubuntu package) - update to 5.15.0-1108.114
linux-lowlatency (Ubuntu package) - addressed in versions 5.15.0-183.193, 6.8.0-117.117.1
linux-gke (Ubuntu package) - addressed in versions 5.15.0-1107.113, 6.8.0-1054.60
linux-aws-5.15 (Ubuntu package) - update to 5.15.0-1111.118~20.04.1
linux-lowlatency-hwe-5.15 (Ubuntu package) - update to 5.15.0-183.193~20.04.1
linux-hwe-5.15 (Ubuntu package) - update to 5.15.0-185.195~20.04.1
linux-fips (Ubuntu package) - addressed in versions 5.15.0-185.195+fips1, 6.8.0-116.116+fips1
linux-azure-5.15 (Ubuntu package) - update to 5.15.0-1116.125~20.04.1
linux-ibm-5.15 (Ubuntu package) - update to 5.15.0-1105.109~20.04.1
linux-realtime (Ubuntu package) - addressed in versions 5.15.0-1110.119, 6.8.1-1051.52
linux-nvidia (Ubuntu package) - addressed in versions 5.15.0-1106.107, 6.8.0-1054.57
linux-nvidia-tegra (Ubuntu package) - addressed in versions 5.15.0-1063.63, 6.8.0-1024.24
linux-gkeop (Ubuntu package) - addressed in versions 5.15.0-1094.102, 6.8.0-1041.44
linux-intel-iotg (Ubuntu package) - update to 5.15.0-1106.112
linux-nvidia-tegra-igx (Ubuntu package) - update to 5.15.0-1052.52
linux-azure-fde-5.15 (Ubuntu package) - update to 5.15.0-1116.125~20.04.1
linux-ibm (Ubuntu package) - addressed in versions 5.15.0-1105.109, 6.8.0-1055.56
linux-intel-iotg-5.15 (Ubuntu package) - update to 5.15.0-1106.112~20.04.1
linux-oracle-5.15 (Ubuntu package) - update to 5.15.0-1108.114~20.04.1
linux-gcp-5.15 (Ubuntu package) - update to 5.15.0-1111.121~20.04.1
linux-nvidia-tegra-5.15 (Ubuntu package) - update to 5.15.0-1063.63~20.04.1
linux-xilinx-zynqmp (Ubuntu package) - update to 5.15.0-1074.78
linux-intel-iot-realtime (Ubuntu package) - update to 5.15.0-1103.105
linux-gcp-fips (Ubuntu package) - addressed in versions 5.15.0-1111.121+fips1, 6.8.0-1058.61+fips1
linux-aws-fips (Ubuntu package) - addressed in versions 5.15.0-1111.118+fips1, 6.8.0-1055.58+fips1
linux-azure-fips (Ubuntu package) - update to 5.15.0-1116.125+fips1
linux-lowlatency-hwe-6.8 (Ubuntu package) - update to 6.8.0-117.117.1~22.04.1
linux-nvidia-lowlatency (Ubuntu package) - update to 6.8.0-1054.57.1
linux-nvidia-6.8 (Ubuntu package) - update to 6.8.0-1054.57~22.04.1
linux-ibm-6.8 (Ubuntu package) - update to 6.8.0-1055.56~22.04.1
linux-raspi-realtime (Ubuntu package) - update to 6.8.0-2045.46
linux-realtime-6.8 (Ubuntu package) - update to 6.8.1-1051.52~22.04.1
kernel-headers - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
python3-perf-debuginfo - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
python3-perf - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
perf-debuginfo - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
perf - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-tools-devel - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-tools-debuginfo - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-tools - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-source - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-devel - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-debugsource - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-debuginfo - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
bpftool-debuginfo - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
bpftool - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel - addressed in versions 6.6.0-142.0.0.124, 6.6.0-142.0.0.136, 6.6.0-142.0.0.137
kernel-extra-modules - update to 6.6.0-142.0.0.137
linux (Debian package) - addressed in versions 6.1.164-1, 6.12.73-1

• https://git.kernel.org/stable/c/04dd114b682a4ccaeba2c2bad049c8b50ce740d8
• https://git.kernel.org/stable/c/2b7b4df87fe6f2db6ee45f475de6b37b8b8e5d29
• https://git.kernel.org/stable/c/7c28f8eef5ac5312794d8a52918076dcd787e53b
• https://git.kernel.org/stable/c/a2c68e256fb7a4ac34154c6e865a1389acca839f
• https://git.kernel.org/stable/c/ac18761b530b5dd40f59af8a25902282e5512854
• https://git.kernel.org/stable/c/fdda836fcee6fdbcccc24e3679097efb583f581f

• Input validation error in Linux kernel smb server
• Debian update for linux
• Debian update for linux
• openEuler 24.03 LTS update for kernel
• openEuler 24.03 LTS SP2 update for kernel
• openEuler 24.03 LTS SP1 update for kernel
• Ubuntu update for linux
• Ubuntu update for linux-nvidia
• Ubuntu update for linux-fips
• Ubuntu update for linux-nvidia-tegra
• Ubuntu update for linux-nvidia-6.8
• Ubuntu update for linux-azure
• Ubuntu update for linux
• Ubuntu update for linux-oracle-5.15
• Ubuntu update for linux-xilinx-zynqmp
• Ubuntu update for linux-raspi
• Ubuntu update for linux-gcp-5.15
• Ubuntu update for linux-azure-fips