CVE-2025-21988

MEDIUM

Linux Kernel 6.12-6.12.19, 6.13-6.13.7 - Data Corruption and Denial of Service via Subrequest Data Donation

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front").

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/62b9ad7e52d4777f7e775ee1f0ad2452f6041024

Patch

https://git.kernel.org/stable/c/e25cec3b76aba47a49138d2162fc809c6cd49c9e

Patch

https://git.kernel.org/stable/c/e2d46f2ec332533816417b60933954173f602121

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 7.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (11)

linux/Kernel 6.12.0 - 6.12.20linux

linux/Kernel 6.13.0 - 6.13.8linux

Linux/Linux < 6.12

Linux/Linux 6.12

Linux/Linux 6.12.20 - 6.12.*

Linux/Linux 6.13.8 - 6.13.*

Linux/Linux 6.14

Linux/Linux ee4cdf7ba857a894ad1650d6ab77669cbbfa329e - 62b9ad7e52d4777f7e775ee1f0ad2452f6041024

Linux/Linux ee4cdf7ba857a894ad1650d6ab77669cbbfa329e - e25cec3b76aba47a49138d2162fc809c6cd49c9e

Linux/Linux ee4cdf7ba857a894ad1650d6ab77669cbbfa329e - e2d46f2ec332533816417b60933954173f602121

... and 1 more

Published Apr 02, 2025

Tracked Since Feb 18, 2026