CVE-2022-25265: Linux Kernel

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

In the Linux kernel through 5.16.10, certain binary files may have the exec-all attribute if they were built in approximately 2003 (e.g., with GCC 3.2.2 and Linux kernel 2.4.20). This can cause execution of bytes located in supposedly non-executable regions of a file.

Affected products

• Linux Linux Kernel: up to and including 5.16.10
• Netapp Baseboard Management Controller Firmware: affected versions not specified
• Netapp h300e Firmware: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500e Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700e Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified

Published 2022-02-16. Last modified 2026-06-17.