Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with… (CVE-2025-22036)
In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation. <CPU 0> <CPU 1> mpage_read_folio <<bh on stack>> do_mpage_readpage exfat_get_block bh_read __bh_read get_bh(bh) submit_bh wait_on_buffer ... end_buffer_read_sync __end_buffer_read_notouch unlock_buffer <<keep going>> ... ... ... ... <<bh is not valid out of mpage_read_folio>> . . another_function <<variable A on stack>> put_bh(bh) atomic_dec(bh->b_count) * stack corruption here * This patch returns -EAGAIN if a folio does not have buffers when bh_read needs to be called. By doing this, the caller can fallback to functions like block_read_full_folio(), create a buffer_head in the folio, and then call get_block again. Let's do not call bh_read() with on-stack buffer_head.
AI Analysis
Technical Summary
CVE-2025-22036 is a vulnerability in the Linux kernel's exfat filesystem driver that leads to random stack corruption following the get_block function call. Red Hat has issued a security advisory (RHSA-2025:10854) providing an updated kernel package for Red Hat Enterprise Linux 10 and related variants to fix this issue. The advisory indicates the update must be applied and the system rebooted for the fix to be effective. No CVSS score is provided, but the severity is rated as important by Red Hat. The vulnerability is associated with CWE-416 (Use After Free).
Potential Impact
The vulnerability causes random stack corruption in the kernel's exfat filesystem driver, which could potentially lead to system instability or other unintended behavior. Red Hat rates the security impact as important, indicating a significant but not critical risk. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official kernel update that fixes this vulnerability. Users should apply the update for Red Hat Enterprise Linux 10 as described in the advisory RHSA-2025:10854 and reboot the system to activate the fix. No additional mitigation steps are indicated by the vendor.
Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with… (CVE-2025-22036)
Description
In the Linux kernel, the following vulnerability has been resolved: exfat: fix random stack corruption after get_block When get_block is called with a buffer_head allocated on the stack, such as do_mpage_readpage, stack corruption due to buffer_head UAF may occur in the following race condition situation. <CPU 0> <CPU 1> mpage_read_folio <<bh on stack>> do_mpage_readpage exfat_get_block bh_read __bh_read get_bh(bh) submit_bh wait_on_buffer ... end_buffer_read_sync __end_buffer_read_notouch unlock_buffer <<keep going>> ... ... ... ... <<bh is not valid out of mpage_read_folio>> . . another_function <<variable A on stack>> put_bh(bh) atomic_dec(bh->b_count) * stack corruption here * This patch returns -EAGAIN if a folio does not have buffers when bh_read needs to be called. By doing this, the caller can fallback to functions like block_read_full_folio(), create a buffer_head in the folio, and then call get_block again. Let's do not call bh_read() with on-stack buffer_head.
CVSS v3.1
Score 7.8high
Affected software
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2025-22036 is a vulnerability in the Linux kernel's exfat filesystem driver that leads to random stack corruption following the get_block function call. Red Hat has issued a security advisory (RHSA-2025:10854) providing an updated kernel package for Red Hat Enterprise Linux 10 and related variants to fix this issue. The advisory indicates the update must be applied and the system rebooted for the fix to be effective. No CVSS score is provided, but the severity is rated as important by Red Hat. The vulnerability is associated with CWE-416 (Use After Free).
Potential Impact
The vulnerability causes random stack corruption in the kernel's exfat filesystem driver, which could potentially lead to system instability or other unintended behavior. Red Hat rates the security impact as important, indicating a significant but not critical risk. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released an official kernel update that fixes this vulnerability. Users should apply the update for Red Hat Enterprise Linux 10 as described in the advisory RHSA-2025:10854 and reboot the system to activate the fix. No additional mitigation steps are indicated by the vendor.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:10854
- Cve Count
- 1
Threat ID: 6a3da1e84853345fc182ed2a
Added to database: 06/25/2026, 21:47:20 UTC
Last enriched: 06/25/2026, 22:35:48 UTC
Last updated: 09/10/2026, 19:36:49 UTC
Views: 24
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.