CVE-2025-21964

MEDIUM

Linux Kernel 5.12-6.13.8 - Integer Overflow in CIFS Mount Option Processing

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

References (7)

Core 7

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 5.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (21)
linux/Kernel 5.12.0 - 5.15.180linux
linux/Kernel 5.16.0 - 6.1.132linux
linux/Kernel 6.13.0 - 6.13.8linux
linux/Kernel 6.2.0 - 6.6.84linux
linux/Kernel 6.7.0 - 6.12.20linux
Linux/Linux < 5.12
Linux/Linux 5.12
Linux/Linux 5.15.180 - 5.15.*
Linux/Linux 5780464614f6abe6026f00cf5a0777aa453ba450 - 0252c33cc943e9e48ddfafaa6b1eb72adb68a099
Linux/Linux 5780464614f6abe6026f00cf5a0777aa453ba450 - 5f500874ab9b3cc8c169c2ab49f00b838520b9c5
... and 11 more
Published Apr 01, 2025
Tracked Since Feb 18, 2026