CVE-2025-21966

HIGH

Linux Kernel 6.5-6.6.83, 6.7-6.12.19, 6.13-6.13.7 - Out-of-bounds Write in dm-flakey corrupt_bio_byte Feature

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

References (4)

Core 4

Core References

Patch

https://git.kernel.org/stable/c/818330f756f3800c37d738bd36bce60eac949938

Patch

https://git.kernel.org/stable/c/5a87e46da2418c57b445371f5ca0958d5779ba5f

Patch

https://git.kernel.org/stable/c/da070843e153471be4297a12fdaa64023276f40e

Patch

https://git.kernel.org/stable/c/57e9417f69839cb10f7ffca684c38acd28ceb57b

Scores

CVSS v3 7.8

EPSS 0.0017

EPSS Percentile 6.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-787

Status published

Products (15)

linux/Kernel 6.13.0 - 6.13.8linux

linux/Kernel 6.5.0 - 6.6.84linux

linux/Kernel 6.7.0 - 6.12.20linux

Linux/Linux < 6.5

Linux/Linux 1d9a943898533e83f20370c0e1448d606627522e - 57e9417f69839cb10f7ffca684c38acd28ceb57b

Linux/Linux 1d9a943898533e83f20370c0e1448d606627522e - 5a87e46da2418c57b445371f5ca0958d5779ba5f

Linux/Linux 1d9a943898533e83f20370c0e1448d606627522e - 818330f756f3800c37d738bd36bce60eac949938

Linux/Linux 1d9a943898533e83f20370c0e1448d606627522e - da070843e153471be4297a12fdaa64023276f40e

Linux/Linux 6.12.20 - 6.12.*

Linux/Linux 6.13.8 - 6.13.*

... and 5 more

Published Apr 01, 2025

Tracked Since Feb 18, 2026