CVE-2025-21997

MEDIUM

Linux Kernel 5.16-6.1.131, 6.2-6.6.84, 6.7-6.12.20, 6.13-6.13.8 - Integer Overflow in xp_create_and_assign_umem

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: xsk: fix an integer overflow in xp_create_and_assign_umem() Since the i and pool->chunk_size variables are of type 'u32', their product can wrap around and then be cast to 'u64'. This can lead to two different XDP buffers pointing to the same memory area. Found by InfoTeCS on behalf of Linux Verification Center (linuxtesting.org) with SVACE.

References (6)

Core 6

Scores

CVSS v3 5.5
EPSS 0.0016
EPSS Percentile 5.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (18)
linux/Kernel 5.16.0 - 6.1.132linux
linux/Kernel 6.13.0 - 6.13.9linux
linux/Kernel 6.2.0 - 6.6.85linux
linux/Kernel 6.7.0 - 6.12.21linux
Linux/Linux < 5.16
Linux/Linux 5.16
Linux/Linux 6.1.132 - 6.1.*
Linux/Linux 6.12.21 - 6.12.*
Linux/Linux 6.13.9 - 6.13.*
Linux/Linux 6.14
... and 8 more
Published Apr 03, 2025
Tracked Since Feb 18, 2026