CVE & CISA-KEV Catalog

CVE-2025-71142

MEDIUM
5.5
CVSS v3
NVD

Description

In the Linux kernel, the following vulnerability has been resolved: cpuset: fix warning when disabling remote partition A warning was triggered as follows: WARNING: kernel/cgroup/cpuset.c:1651 at remote_partition_disable+0xf7/0x110 RIP: 0010:remote_partition_disable+0xf7/0x110 RSP: 0018:ffffc90001947d88 EFLAGS: 00000206 RAX: 0000000000007fff RBX: ffff888103b6e000 RCX: 0000000000006f40 RDX: 0000000000006f00 RSI: ffffc90001947da8 RDI: ffff888103b6e000 RBP: ffff888103b6e000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000001 R11: ffff88810b2e2728 R12: ffffc90001947da8 R13: 0000000000000000 R14: ffffc90001947da8 R15: ffff8881081f1c00 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f55c8bbe0b2 CR3: 000000010b14c000 CR4: 00000000000006f0 Call Trace: <TASK> update_prstate+0x2d3/0x580 cpuset_partition_write+0x94/0xf0 kernfs_fop_write_iter+0x147/0x200 vfs_write+0x35d/0x500 ksys_write+0x66/0xe0 do_syscall_64+0x6b/0x390 entry_SYSCALL_64_after_hwframe+0x4b/0x53 RIP: 0033:0x7f55c8cd4887 Reproduction steps (on a 16-CPU machine): # cd /sys/fs/cgroup/ # mkdir A1 # echo +cpuset > A1/cgroup.subtree_control # echo "0-14" > A1/cpuset.cpus.exclusive # mkdir A1/A2 # echo "0-14" > A1/A2/cpuset.cpus.exclusive # echo "root" > A1/A2/cpuset.cpus.partition # echo 0 > /sys/devices/system/cpu/cpu15/online # echo member > A1/A2/cpuset.cpus.partition When CPU 15 is offlined, subpartitions_cpus gets cleared because no CPUs remain available for the top_cpuset, forcing partitions to share CPUs with the top_cpuset. In this scenario, disabling the remote partition triggers a warning stating that effective_xcpus is not a subset of subpartitions_cpus. Partitions should be invalidated in this case to inform users that the partition is now invalid(cpus are shared with top_cpuset). To fix this issue: 1. Only emit the warning only if subpartitions_cpus is not empty and the effective_xcpus is not a subset of subpartitions_cpus. 2. During the CPU hotplug process, invalidate partitions if subpartitions_cpus is empty.

How to fix

Remediation Available
linuxDebian
Fixed in:6.18.5-1CVE-2025-71142
linuxUbuntu
Fixed in:6.17.0-29.29USN-8277-1
linux-awsUbuntu
Fixed in:6.17.0-1015.15USN-8277-1
linux-aws-6.17Ubuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
linux-azureUbuntu
Fixed in:6.17.0-1015.15USN-8310-1
linux-azure-6.17Ubuntu
Fixed in:6.17.0-1015.15~24.04.1USN-8310-1
linux-gcpUbuntu
Fixed in:6.17.0-1018.19USN-8374-1
linux-gcp-6.17Ubuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
linux-hwe-6.17Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
linux-image-6.17.0-1013-realtimeUbuntu
Fixed in:6.17.0-1013.15~24.04.1USN-8277-1
Fixed in:6.17.0-1013.15USN-8277-1
linux-image-6.17.0-1014-oracleUbuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
Fixed in:6.17.0-1014.14USN-8277-1
linux-image-6.17.0-1014-oracle-64kUbuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
Fixed in:6.17.0-1014.14USN-8277-1
linux-image-6.17.0-1015-awsUbuntu
Fixed in:6.17.0-1015.15USN-8277-1
linux-image-6.17.0-1015-aws-64kUbuntu
Fixed in:6.17.0-1015.15USN-8277-1
linux-image-6.17.0-1015-azureUbuntu
Fixed in:6.17.0-1015.15~24.04.1USN-8310-1
Fixed in:6.17.0-1015.15USN-8310-1
linux-image-6.17.0-1017-awsUbuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
linux-image-6.17.0-1017-aws-64kUbuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
linux-image-6.17.0-1017-raspiUbuntu
Fixed in:6.17.0-1017.17USN-8277-1
linux-image-6.17.0-1018-gcpUbuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
Fixed in:6.17.0-1018.19USN-8374-1
linux-image-6.17.0-1018-gcp-64kUbuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
Fixed in:6.17.0-1018.19USN-8374-1
linux-image-6.17.0-1023-oemUbuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-6.17.0-1026-nvidiaUbuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-image-6.17.0-1026-nvidia-64kUbuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-image-6.17.0-29-genericUbuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
Fixed in:6.17.0-29.29USN-8277-1
linux-image-6.17.0-29-generic-64kUbuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
Fixed in:6.17.0-29.29USN-8277-1
linux-image-awsUbuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
Fixed in:6.17.0-1015.15USN-8277-1
linux-image-aws-6.17Ubuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
Fixed in:6.17.0-1015.15USN-8277-1
linux-image-aws-64kUbuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
Fixed in:6.17.0-1015.15USN-8277-1
linux-image-aws-64k-6.17Ubuntu
Fixed in:6.17.0-1017.17~24.04.1USN-8374-1
Fixed in:6.17.0-1015.15USN-8277-1
linux-image-azureUbuntu
Fixed in:6.17.0-1015.15~24.04.1USN-8310-1
Fixed in:6.17.0-1015.15USN-8310-1
linux-image-azure-6.17Ubuntu
Fixed in:6.17.0-1015.15~24.04.1USN-8310-1
Fixed in:6.17.0-1015.15USN-8310-1
linux-image-gcpUbuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
Fixed in:6.17.0-1018.19USN-8374-1
linux-image-gcp-6.17Ubuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
Fixed in:6.17.0-1018.19USN-8374-1
linux-image-gcp-64kUbuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
Fixed in:6.17.0-1018.19USN-8374-1
linux-image-gcp-64k-6.17Ubuntu
Fixed in:6.17.0-1018.19~24.04.1USN-8374-1
Fixed in:6.17.0-1018.19USN-8374-1
linux-image-genericUbuntu
Fixed in:6.17.0-29.29USN-8277-1
linux-image-generic-6.17Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
Fixed in:6.17.0-29.29USN-8277-1
linux-image-generic-64kUbuntu
Fixed in:6.17.0-29.29USN-8277-1
linux-image-generic-64k-6.17Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
Fixed in:6.17.0-29.29USN-8277-1
linux-image-generic-64k-hwe-24.04Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
linux-image-generic-hwe-24.04Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
linux-image-nvidia-6.17Ubuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-image-nvidia-64k-6.17Ubuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-image-nvidia-64k-hwe-24.04Ubuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-image-nvidia-hwe-24.04Ubuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-image-oem-24.04Ubuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-oem-24.04aUbuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-oem-24.04bUbuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-oem-24.04cUbuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-oem-24.04dUbuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-oem-6.17Ubuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-image-oracleUbuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
Fixed in:6.17.0-1014.14USN-8277-1
linux-image-oracle-6.17Ubuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
Fixed in:6.17.0-1014.14USN-8277-1
linux-image-oracle-64kUbuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
Fixed in:6.17.0-1014.14USN-8277-1
linux-image-oracle-64k-6.17Ubuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
Fixed in:6.17.0-1014.14USN-8277-1
linux-image-raspiUbuntu
Fixed in:6.17.0-1017.17USN-8277-1
linux-image-raspi-6.17Ubuntu
Fixed in:6.17.0-1017.17USN-8277-1
linux-image-realtimeUbuntu
Fixed in:6.17.0-1013.15USN-8277-1
linux-image-realtime-6.17Ubuntu
Fixed in:6.17.0-1013.15~24.04.1USN-8277-1
Fixed in:6.17.0-1013.15USN-8277-1
linux-image-realtime-hwe-24.04Ubuntu
Fixed in:6.17.0-1013.15~24.04.1USN-8277-1
Fixed in:6.17.0-1013.15USN-8277-1
linux-image-realtime-hwe-24.04-edgeUbuntu
Fixed in:6.17.0-1013.15USN-8277-1
linux-image-virtualUbuntu
Fixed in:6.17.0-29.29USN-8277-1
linux-image-virtual-6.17Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
Fixed in:6.17.0-29.29USN-8277-1
linux-image-virtual-hwe-24.04Ubuntu
Fixed in:6.17.0-29.29~24.04.1USN-8277-1
linux-nvidia-6.17Ubuntu
Fixed in:6.17.0-1026.26USN-8508-1
linux-oem-6.17Ubuntu
Fixed in:6.17.0-1023.23USN-8277-1
linux-oracleUbuntu
Fixed in:6.17.0-1014.14USN-8277-1
linux-oracle-6.17Ubuntu
Fixed in:6.17.0-1014.14~24.04.1USN-8277-2
linux-raspiUbuntu
Fixed in:6.17.0-1017.17USN-8277-1
linux-realtimeUbuntu
Fixed in:6.17.0-1013.15USN-8277-1
linux-realtime-6.17Ubuntu
Fixed in:6.17.0-1013.15~24.04.1USN-8277-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityNone
IntegrityNone
AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploit Intelligence

0.10%probability of exploitation in 30 days
1stpercentile

Low risk: more likely to be exploited than 1% of all known CVEs.

References

Embed a live status badge for CVE-2025-71142
CVE-2025-71142 severity badge

Markdown

[![CVE-2025-71142](https://tridentstack.com/cve/badge/CVE-2025-71142.svg)](https://tridentstack.com/cve/CVE-2025-71142)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-71142"><img src="https://tridentstack.com/cve/badge/CVE-2025-71142.svg" alt="CVE-2025-71142"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-25.