In the Linux kernel, the following vulnerability has been resolved:
cifs: Fix integer overflow while processing acdirmax mount option
User-provided mount parameter acdirmax of type u32 is intended to have
an upper limit, but before it is validated, the value is converted from
seconds to jiffies which can lead to an integer overflow.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
References
Configurations
Configuration 1 (hide)
|
History
14 Apr 2025, 12:41
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Linux linux Kernel
Linux |
|
| References | () https://git.kernel.org/stable/c/2809a79bc64964ce02e0c5f2d6bd39b9d09bdb3c - Patch | |
| References | () https://git.kernel.org/stable/c/0c26edf477e093cefc41637f5bccc102e1a77399 - Patch | |
| References | () https://git.kernel.org/stable/c/5b29891f91dfb8758baf1e2217bef4b16b2b165b - Patch | |
| References | () https://git.kernel.org/stable/c/9e438d0410a4002d24f420f2c28897ba2dc0af64 - Patch | |
| References | () https://git.kernel.org/stable/c/6124cbf73e3dea7591857dd63b8ccece28952afd - Patch | |
| References | () https://git.kernel.org/stable/c/39d086bb3558da9640ef335f97453e01d32578a1 - Patch | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-190 | |
| CPE | cpe:2.3:o:linux:linux_kernel:6.14:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.14:rc5:*:*:*:*:*:* |
10 Apr 2025, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
01 Apr 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-04-01 16:15
Updated : 2025-04-14 12:41
NVD link : CVE-2025-21963
Mitre link : CVE-2025-21963
JSON object : View
Products Affected
linux
- linux_kernel
CWE
CWE-190
Integer Overflow or Wraparound