CVE-2025-21997

MEDIUM EPSS 6.1%
Published Apr 3, 20251y ago · Modified Jun 17, 20261w ago
5.5 CVSS 3.1
Medium
Find Similar
Published Apr 3, 2025 1y ago
Last Modified Jun 17, 2026 1w ago

Description

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

CVSS Details

Base Score
5.5
Exploitability
1.8
Impact
3.6
Vector string
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope Unchanged
Confidentiality None
Integrity None
Availability High

Threat Intelligence

EPSS Exploit Probability
6.1% percentile
Exploit & Patch Status
No Known Exploit
Patch Available

Weaknesses 1

CWE-190 Integer Overflow or Wraparound Numeric Error

Affected Products 11

VendorProductVersionRange
linuxlinux_kernel*≥5.16  –  <6.1.132
linuxlinux_kernel*≥6.2  –  <6.6.85
linuxlinux_kernel*≥6.7  –  <6.12.21
linuxlinux_kernel*≥6.13  –  <6.13.9
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any
linuxlinux_kernel6.14any

References 6

  • git.kernel.org https://git.kernel.org/stable/c/130290f44bce0eead2b827302109afc3fe189ddd
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/205649d642a5b376724f04f3a5b3586815e43d3b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/559847f56769037e5b2e0474d3dbff985b98083d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b7b4be1fa43294b50b22e812715198629806678a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c7670c197b0f1a8726ad5c87bc2bf001a1fc1bbd
    Patch
  • lists.debian.org https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html

Remediation

  • git.kernel.org https://git.kernel.org/stable/c/130290f44bce0eead2b827302109afc3fe189ddd
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/205649d642a5b376724f04f3a5b3586815e43d3b
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/559847f56769037e5b2e0474d3dbff985b98083d
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/b7b4be1fa43294b50b22e812715198629806678a
    Patch
  • git.kernel.org https://git.kernel.org/stable/c/c7670c197b0f1a8726ad5c87bc2bf001a1fc1bbd
    Patch