Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U H N H 7.1 .0022 13.5 —
AFFECTED Product Versions Fixed Linux 011832b97b311bb9e3c27945bc0d1089a14209c9 – — Linux 6.9 – 6.12.23
TIMELINE Dec 29 Reserved by Linux Apr 16 Published (CNA: Linux) Jul 30 RESCORED — CVE-2025-22087 (Linux). CVSS 7.8 → 7.1 (NVD).
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix array bounds error with may_goto may_goto uses an additional 8 bytes on the stack, which causes the interpreters[] array to go out of bounds when calculating index by stack_size. 1. If a BPF program is rewritten, re-evaluate the stack size. For non-JIT cases, reject loading directly. 2. For non-JIT cases, calculating interpreters[idx] may still cause out-of-bounds array access, and just warn about it. 3. For jit_requested cases, the execution of bpf_func also needs to be warned. So move the definition of function __bpf_prog_ret0_warn out of the macro definition CONFIG_BPF_JIT_ALWAYS_ON.
| Date | Event | Detail |
|---|---|---|
| December 29, 2024 | Reserved | Reserved by Linux |
| April 16, 2025 | Published | Published (CNA: Linux) |
| July 30, 2026 | RESCORED | RESCORED — CVE-2025-22087 (Linux). CVSS 7.8 → 7.1 (NVD). |
Authoritative record: CVE-2025-22087 at cve.org
Vendors: linux
Weaknesses: CWE-125
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-22087 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.