In the Linux kernel, the following vulnerability has been resolved:
LoongArch: csum: Fix OoB access in IP checksum code for negative lengths
Commit 69e3a6aa6be2 ("LoongArch: Add checksum optimization for 64-bit
system") would cause an undefined shift and an out-of-bounds read.
Commit 8bd795fedb84 ("arm64: csum: Fix OoB access in IP checksum code
for negative lengths") fixes the same issue on ARM64.
References
| Link | Resource |
|---|---|
| https://git.kernel.org/stable/c/6287f1a8c16138c2ec750953e35039634018c84a | Patch Mailing List |
| https://git.kernel.org/stable/c/964a8895704a22efc06a2a3276b624a5ae985a06 | Patch Mailing List |
| https://git.kernel.org/stable/c/9f15a8df542c0f08732a67d1a14ee7c22948fb97 | Patch Mailing List |
| https://git.kernel.org/stable/c/d6508ffff32b44b6d0de06704034e4eef1c307a7 | Patch Mailing List |
Configurations
Configuration 1 (hide)
|
History
05 Mar 2025, 18:40
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/6287f1a8c16138c2ec750953e35039634018c84a - Patch, Mailing List | |
| References | () https://git.kernel.org/stable/c/964a8895704a22efc06a2a3276b624a5ae985a06 - Patch, Mailing List | |
| References | () https://git.kernel.org/stable/c/d6508ffff32b44b6d0de06704034e4eef1c307a7 - Patch, Mailing List | |
| References | () https://git.kernel.org/stable/c/9f15a8df542c0f08732a67d1a14ee7c22948fb97 - Patch, Mailing List |
27 Feb 2025, 03:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-02-27 03:15
Updated : 2025-03-05 18:40
NVD link : CVE-2025-21789
Mitre link : CVE-2025-21789
JSON object : View
Products Affected
linux
- linux_kernel
CWE
No CWE.