Security readout for executives and security teams
Plain-English summary
This Linux kernel flaw can make a CPU appear stuck when the HNS RoCE RDMA driver handles very large memory registrations. The business impact is availability risk on specialized servers using that hardware and driver, not broad internet exposure based on the supplied evidence.
Executive priority
Treat this as a targeted availability issue. It should be prioritized for RDMA-enabled infrastructure, HPC, storage, or virtualization hosts using HNS RoCE, but it is not supported as an actively exploited emergency in the supplied sources.
Technical view
The RDMA/hns driver loops while allocating and mapping buffer-table pages for very large memory regions, such as over 100GB. Without rescheduling inside the loop, the kernel watchdog can report soft lockups in hns_roce paths reached through ib_uverbs_reg_mr. Stable kernel commits add cond_resched() at a threshold.
Likely exposure
Exposure is likely limited to Linux systems using the hns_roce/HNS RDMA driver and workloads that register very large memory regions. General Linux servers without this RDMA hardware or driver path are less likely to be affected.
Exploitation context
The bundle marks KEV as false and provides no cited evidence of active exploitation or public exploit tooling. The demonstrated condition is a soft lockup during large MR allocation and mapping, which points primarily to denial-of-service or reliability impact.
Researcher notes
The source bundle lacks CVSS, CWE, and detailed version-range semantics. Analysis should center on driver reachability, kernel provenance, and whether untrusted or tenant-controlled workloads can trigger large RDMA memory registrations.
Mitigation direction
- Apply vendor or stable kernel updates containing the referenced RDMA/hns fixes.
- Debian users should review the listed LTS advisories and update affected kernel packages.
- Prioritize hosts using HNS RoCE RDMA hardware or very large memory registrations.
- If patching is delayed, consult vendor guidance before relying on operational workarounds.
Validation and detection
- Inventory Linux hosts using the hns_roce or HNS RDMA driver.
- Map running kernel builds to vendor advisories or the referenced stable commits.
- Check system logs for watchdog soft lockups with hns_roce or ib_uverbs_reg_mr traces.
- Confirm updated kernels include the RDMA/hns cond_resched() fix.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2025-22010 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
Vulnerability timeline
Timeline events are normalized from CVE metadata, CNA source timelines, ADP timelines, and KEV metadata when present.
- CVE reservedCVE Program
The CVE ID was reserved by the assigning CNA.
- CVE publishedCVE Program
The CVE record was published.
- CVE updatedCVE Program
The CVE record metadata indicates this as the latest update time.
ADP provider summaries
Source materials
- CVE List V5 sourceCVE List V5
- https://git.kernel.org/stable/c/461eb4ddede266df8f181f578732bb01742c3fd6CVE reference, Linux
- https://git.kernel.org/stable/c/efe544462fc0b499725364f90bd0f8bbf16f861aCVE reference, Linux
- https://git.kernel.org/stable/c/4104b0023ff66b5df900d23dbf38310893deca79CVE reference, Linux
- https://git.kernel.org/stable/c/975355faba56c0751292ed15a90c3e2c7dc0aad6CVE reference, Linux
- https://git.kernel.org/stable/c/13a52f6c9ff99f7d88f81da535cb4e85eade662bCVE reference, Linux
- https://git.kernel.org/stable/c/9ab20fec7a1ce3057ad86afd27bfd08420b7cd11CVE reference, Linux
- https://git.kernel.org/stable/c/25655580136de59ec89f09089dd28008ea440fc9CVE reference, Linux
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.htmlCVE reference, CVE
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.htmlCVE reference, CVE
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.