EUVD-2025-11220

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Fixed NULL pointer dereference in Linux kernel when creating subdirectories with ACLs set.

Reporter	Title	Published	Views	Family All 197
AstraLinux	Astra Linux - уязвимость в linux-5.10	3 May 202623:59	–	astralinux
CNNVD	Linux kernel 安全漏洞	16 Apr 202500:00	–	cnnvd
CVE	CVE-2025-22070	16 Apr 202514:12	–	cve
Cvelist	CVE-2025-22070 fs/9p: fix NULL pointer dereference on mkdir	16 Apr 202514:12	–	cvelist
Debian CVE	CVE-2025-22070	16 Apr 202514:12	–	debiancve
Oracle linux	Unbreakable Enterprise kernel security update	17 Jul 202500:00	–	oraclelinux
Hewlett-Packard	HP ThinPro 8.1 SP9 Security Updates	2 Feb 202600:00	–	hp
Microsoft CVE	fs/9p: fix NULL pointer dereference on mkdir	3 Sep 202523:03	–	mscve
NVD	CVE-2025-22070	16 Apr 202515:16	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-7594-1)	25 Jun 202500:00	–	openvas

[
  {
    "enisaIdVendor": [
      {
        "id": "b712e9fb-c691-35bd-af47-2b8bbf8a03ac",
        "vendor": {
          "name": "Linux"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0c34f548-a8ec-3d6f-a84a-965c2e9a2199",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.12.23"
      },
      {
        "id": "0ced1b15-5b9c-32f2-b471-74f80c611eab",
        "product": {
          "name": "Linux"
        },
        "product_version": "dafbe689736f62c696ac64809b17bdc752cfbe76 <2139dea5c53e3bb63ac49a6901c85e525a80ee8a"
      },
      {
        "id": "178a8025-6789-3f5c-a50d-8ec144aa24ed",
        "product": {
          "name": "Linux"
        },
        "product_version": "dafbe689736f62c696ac64809b17bdc752cfbe76 <6517b395cb1e43fbf3962dd93e6fb4a5e5ab100e"
      },
      {
        "id": "2bbd0516-ee2e-3be5-9415-a1a8fda4d690",
        "product": {
          "name": "Linux"
        },
        "product_version": "dafbe689736f62c696ac64809b17bdc752cfbe76 <3f61ac7c65bdb26accb52f9db66313597e759821"
      },
      {
        "id": "65c48169-3ff4-3704-87e4-435f8624eda3",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.13.11"
      },
      {
        "id": "702da86f-651b-3593-9b61-7808bf53e571",
        "product": {
          "name": "Linux"
        },
        "product_version": "6.0"
      },
      {
        "id": "ab599fff-f98c-37b0-bd4a-0e78ddb8c6e7",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 0"
      },
      {
        "id": "bb11f0b6-920b-3b7b-aec7-9d6113b866c1",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.15-rc1"
      },
      {
        "id": "bf142edf-18e1-33be-96b6-c31a0573df18",
        "product": {
          "name": "Linux"
        },
        "product_version": "dafbe689736f62c696ac64809b17bdc752cfbe76 <8522051c58d68146b93e8a5ba9987e83b3d64e7b"
      },
      {
        "id": "f3952b6f-46b4-329e-8374-15c0c1cf76c7",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.15"
      },
      {
        "id": "f945029c-4a90-3b33-92ac-191a52fd4fad",
        "product": {
          "name": "Linux"
        },
        "product_version": "patch: 6.14.2"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-22070
git	www.git.kernel.org/stable/c/2139dea5c53e3bb63ac49a6901c85e525a80ee8a
git	www.git.kernel.org/stable/c/3f61ac7c65bdb26accb52f9db66313597e759821
git	www.git.kernel.org/stable/c/6517b395cb1e43fbf3962dd93e6fb4a5e5ab100e
git	www.git.kernel.org/stable/c/8522051c58d68146b93e8a5ba9987e83b3d64e7b

03 Oct 2025 20:07Current

7.2High risk

Vulners AI Score7.2

CVSS 3.15.5

EPSS0.00017

SSVC