CVE-2025-22122

MEDIUM

Linux Kernel 6.12-6.12.32, 6.12.33-6.13.99, 6.14.0-6.14.1, >=6.15 - Denial of Service via Folio Offset Overflow

Title source: llm

Description

In the Linux kernel, the following vulnerability has been resolved: block: fix adding folio to bio >4GB folio is possible on some ARCHs, such as aarch64, 16GB hugepage is supported, then 'offset' of folio can't be held in 'unsigned int', cause warning in bio_add_folio_nofail() and IO failure. Fix it by adjusting 'page' & trimming 'offset' so that `->bi_offset` won't be overflow, and folio can be added to bio successfully.

References (3)

Core 3

Core References

Patch

https://git.kernel.org/stable/c/0c60158ff14df04c92792dd9b1809372b095040f

Patch

https://git.kernel.org/stable/c/b96e0af1b1c99cb7e6188b6fa4963a4e47beb01e

Patch

https://git.kernel.org/stable/c/26064d3e2b4d9a14df1072980e558c636fb023ea

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 7.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

Status published

Products (11)

linux/Kernel 6.12.0 - 6.12.33linux

linux/Kernel 6.13.0 - 6.14.2linux

Linux/Linux < 6.12

Linux/Linux 6.12

Linux/Linux 6.12.33 - 6.12.*

Linux/Linux 6.14.2 - 6.14.*

Linux/Linux 6.15

Linux/Linux ed9832bc08db29874600eb066b74918fe6fc2060 - 0c60158ff14df04c92792dd9b1809372b095040f

Linux/Linux ed9832bc08db29874600eb066b74918fe6fc2060 - 26064d3e2b4d9a14df1072980e558c636fb023ea

Linux/Linux ed9832bc08db29874600eb066b74918fe6fc2060 - b96e0af1b1c99cb7e6188b6fa4963a4e47beb01e

... and 1 more

Published Apr 16, 2025

Tracked Since Feb 18, 2026