Wind River Support Network

HomeDefectsLIN1025-2650

Fixed

LIN1025-2650 : Security Advisory - linux - CVE-2025-25180

Created: Jul 13, 2025 Updated: Dec 15, 2025

Resolved Date: Dec 14, 2025

Found In Version: 10.25.33.1

Severity: Standard

Applicable for: Wind River Linux LTS 25

Component/s: Userspace

Description

Software installed and run as a non-privileged user may conduct improper GPU system calls to subvert GPU HW to write to arbitrary physical memory pages.  Under certain circumstances this exploit could be used to corrupt data pages not allocated by the GPU driver but memory pages in use by the kernel and drivers running on the platform altering their behaviour.

CREATE(Triage):(User=lchen-cn) CVE-2025-25180 (https://nvd.nist.gov/vuln/detail/CVE-2025-25180)