CVE-2025-21962

MEDIUM

Linux Kernel - Integer Overflow in CIFS Mount Option Processing

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

References (7)

Core 7

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 5.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (22)
linux/Kernel < 5.15.180linux
linux/Kernel 5.16.0 - 6.1.132linux
linux/Kernel 6.0.0 - 6.6.84linux
linux/Kernel 6.2.0 - 6.12.20linux
linux/Kernel 6.7.0 - 6.13.8linux
Linux/Linux < 6.0
Linux/Linux 1d9cad9c5873097ea141ffc5da1e7921ce765aa8 - 513f6cf2e906a504b7ab0b62b2eea993a6f64558
Linux/Linux 5.15.107 - 5.15.180
Linux/Linux 5.15.180 - 5.15.*
Linux/Linux 5efdd9122eff772eae2feae9f0fc0ec02d4846a3 - 1c46673be93dd2954f44fe370fb4f2b8e6214224
... and 12 more
Published Apr 01, 2025
Tracked Since Feb 18, 2026