CVE Feed

    Dashboard / CVE / CVE-2025-21687

    CVE-2025-21687

    In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

    Published:Feb 10, 2025
    Last Modified:Nov 3, 2025
    EPS:Feb 10, 2025
    EPSS Score:0.00038
    CVSS Score:7.8

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-540 Overread Buffers

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/1485932496a1b025235af8aa1e21988d6b7ccd54
    https://git.kernel.org/stable/c/665cfd1083866f87301bbd232cb8ba48dcf4acce
    https://git.kernel.org/stable/c/6bcb8a5b70b80143db9bf12dfa7d53636f824d53
    https://git.kernel.org/stable/c/92340e6c5122d823ad064984ef7513eba9204048
    https://git.kernel.org/stable/c/9377cdc118cf327248f1a9dde7b87de067681dc9
    https://git.kernel.org/stable/c/a20fcaa230f7472456d12cf761ed13938e320ac3
    https://git.kernel.org/stable/c/c981c32c38af80737a2fedc16e270546d139ccdd
    https://git.kernel.org/stable/c/ce9ff21ea89d191e477a02ad7eabf4f996b80a69
    https://git.kernel.org/stable/c/d19a8650fd3d7aed8d1af1d9a77f979a8430eba1
    https://git.kernel.org/stable/c/ed81d82bb6e9df3a137f2c343ed689e6c68268ef
    https://git.kernel.org/stable/c/f21636f24b6786c8b13f1af4319fa75ffcf17f38
    https://git.kernel.org/stable/c/f65ce06387f8c1fb54bd59e18a8428248ec68eaf
    https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html
    https://lists.debian.org/debian-lts-announce/2025/03/msg00002.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High