logo_clicknbuy.png

CVE-2025-21997 – Linux Kernel xsk Integer Overflow Vulnerability

The following table lists the changes that have been made to the
CVE-2025-21997 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by 416baaa9-dc9f-4396-8d5f-8c081fb06d67

    Apr. 03, 2025

    Action Type Old Value New Value
    Added Description In the Linux kernel, the following vulnerability has been resolved:

    xsk: fix an integer overflow in xp_create_and_assign_umem()

    Since the i and pool->chunk_size variables are of type ‘u32’,
    their product can wrap around and then be cast to ‘u64’.
    This can lead to two different XDP buffers pointing to the same
    memory area.

    Found by InfoTeCS on behalf of Linux Verification Center
    (linuxtesting.org) with SVACE.
    Added Reference https://git.kernel.org/stable/c/130290f44bce0eead2b827302109afc3fe189ddd
    Added Reference https://git.kernel.org/stable/c/205649d642a5b376724f04f3a5b3586815e43d3b
    Added Reference https://git.kernel.org/stable/c/559847f56769037e5b2e0474d3dbff985b98083d
    Added Reference https://git.kernel.org/stable/c/b7b4be1fa43294b50b22e812715198629806678a
    Added Reference https://git.kernel.org/stable/c/c7670c197b0f1a8726ad5c87bc2bf001a1fc1bbd
Share the Post:

Related Posts