PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-71072 Linux CVE debrief

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-01-13T16:16:06.633Z and has not been modified since then. The NVD entry is currently Modified. The Linux kernel vulnerability CVE-2025-71072 relates to shmem recovery on rename failures. Maple_tree insertions can fail under serious memory shortage; simple_offset_rename() and simple_offset_rename_exchange() do not recover well from such failures. Shmem_whiteout() expects progress to d_move() after success. The issue is fixed by preinserting the target into the tree for new_dir in shmem_rename2(), ensuring mtree_store() can't fail if the index is already a singleton. This vulnerability could potentially allow for privilege escalation in Linux systems. System administrators should review the official advisory and assess their exposure. Patches are available for various kernel versions. Monitoring system logs for unusual rename operations is also recommended.

Vendor
Linux
Product
Unknown
CVSS
HIGH 8.2
CISA KEV
Not listed in stored evidence
Original CVE published
2026-01-13
Original CVE updated
2026-07-30
Advisory published
2026-01-13
Advisory updated
2026-07-30

Who should care

Linux system administrators and users, especially those with high-risk systems or sensitive data, should be aware of this vulnerability. They should review the official advisory, assess their exposure, and apply patches or mitigations as necessary. Additionally, they should monitor system logs for unusual rename operations and prioritize patching for high-risk systems. Inventory of Linux systems for exposure, focusing on versions 6.6.1 to 6.12.64 and 6.13 to 6.18.3, is also recommended.

Technical summary

The Linux kernel vulnerability CVE-2025-71072 relates to shmem recovery on rename failures. Maple_tree insertions can fail under serious memory shortage; simple_offset_rename() and simple_offset_rename_exchange() do not recover well from such failures. Shmem_whiteout() expects progress to d_move() after success. The issue is fixed by preinserting the target into the tree for new_dir in shmem_rename2(), ensuring mtree_store() can't fail if the index is already a singleton.

Defensive priority

Linux kernel vulnerability in shmem leading to potential privilege escalation; prioritize patching for high-risk systems.

Recommended defensive actions

  • Apply patches from https://git.kernel.org/stable/c/4642686699a46718d7f2fb5acd1e9d866a9d9cca
  • Apply patches from https://git.kernel.org/stable/c/4b0fe71fb3965d0db83cdfc2f4fe0b3227d70113
  • Apply patches from https://git.kernel.org/stable/c/e1b4c6a58304fd490124cc2b454d80edc786665c
  • Inventory Linux systems for exposure, focusing on versions 6.6.1 to 6.12.64 and 6.13 to 6.18.3
  • Monitor for unusual rename operations in system logs

Evidence notes

The Linux kernel vulnerability CVE-2025-71072 relates to shmem recovery on rename failures. Maple_tree insertions can fail under serious memory shortage; simple_offset_rename() and simple_offset_rename_exchange() do not recover well from such failures. Shmem_whiteout() expects progress to d_move() after success. The issue is fixed by preinserting the target into the tree for new_dir in shmem_rename2(), ensuring mtree_store() can't fail if the index is already a singleton.

Official resources

AI-assisted PatchSiren debrief based on the supplied source corpus. The CVE record was published on 2026-01-13T16:16:06.633Z and has not been modified since then.