CVE-2025-22002

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

netfs: Call `invalidate_cache` only if implemented

Many filesystems such as NFS and Ceph do not implement the

`invalidate_cache` method. On those filesystems, if writing to the

cache (`NETFS_WRITE_TO_CACHE`) fails for some reason, the kernel

crashes like this:

BUG: kernel NULL pointer dereference, address: 0000000000000000

#PF: supervisor instruction fetch in kernel mode

#PF: error_code(0x0010) - not-present page

PGD 0 P4D 0

Oops: Oops: 0010 [#1] SMP PTI

CPU: 9 UID: 0 PID: 3380 Comm: kworker/u193:11 Not tainted 6.13.3-cm4all1-hp #437

Hardware name: HP ProLiant DL380 Gen9/ProLiant DL380 Gen9, BIOS P89 10/17/2018

Workqueue: events_unbound netfs_write_collection_worker

RIP: 0010:0x0

Code: Unable to access opcode bytes at 0xffffffffffffffd6.

RSP: 0018:ffff9b86e2ca7dc0 EFLAGS: 00010202

RAX: 0000000000000000 RBX: 0000000000000000 RCX: 7fffffffffffffff

RDX: 0000000000000001 RSI: ffff89259d576a18 RDI: ffff8925

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References