Description
In the Linux kernel, the following vulnerability has been resolved:
vfio/platform: check the bounds of read/write syscalls
count and offset are passed from user space and not checked, only
offset is capped to 40 bits, which can be used to read/write out of
bounds of the device.
vfio/platform: check the bounds of read/write syscalls
count and offset are passed from user space and not checked, only
offset is capped to 40 bits, which can be used to read/write out of
bounds of the device.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | |||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Linux | Linux | unaffected |
|
|||||||||||||||||||||||||||||||||||||||||||||
| Linux | Linux | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 Debian DLA |
DLA-4075-1 | linux security update |
| Debian DLA |
DLA-4076-1 | linux-6.1 security update |
 EUVD |
EUVD-2025-2636 | In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device. |
 Ubuntu USN |
USN-7387-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7387-2 | Linux kernel (FIPS) vulnerabilities |
| Ubuntu USN |
USN-7387-3 | Linux kernel (Real-time) vulnerabilities |
| Ubuntu USN |
USN-7388-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7389-1 | Linux kernel (NVIDIA Tegra) vulnerabilities |
| Ubuntu USN |
USN-7390-1 | Linux kernel (Xilinx ZynqMP) vulnerabilities |
| Ubuntu USN |
USN-7391-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7392-1 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7392-2 | Linux kernel vulnerabilities |
| Ubuntu USN |
USN-7392-3 | Linux kernel (AWS) vulnerabilities |
| Ubuntu USN |
USN-7392-4 | Linux kernel (AWS FIPS) vulnerabilities |
| Ubuntu USN |
USN-7393-1 | Linux kernel (FIPS) vulnerabilities |
| Ubuntu USN |
USN-7401-1 | Linux kernel (AWS) vulnerabilities |
| Ubuntu USN |
USN-7407-1 | Linux kernel (HWE) vulnerabilities |
| Ubuntu USN |
USN-7413-1 | Linux kernel (IoT) vulnerabilities |
| Ubuntu USN |
USN-7421-1 | Linux kernel (Azure) vulnerabilities |
| Ubuntu USN |
USN-7458-1 | Linux kernel (IBM) vulnerabilities |
| Ubuntu USN |
USN-7459-1 | Linux kernel (Intel IoTG) vulnerabilities |
| Ubuntu USN |
USN-7459-2 | Linux kernel (GCP) vulnerabilities |
| Ubuntu USN |
USN-7463-1 | Linux kernel (IBM) vulnerabilities |
| Ubuntu USN |
USN-7539-1 | Linux kernel (Raspberry Pi) vulnerabilities |
| Ubuntu USN |
USN-7540-1 | Linux kernel (Raspberry Pi) vulnerabilities |
References
History
Mon, 03 Nov 2025 21:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Thu, 13 Mar 2025 12:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 21 Feb 2025 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Linux
Linux linux Kernel |
|
| Weaknesses | CWE-125 CWE-787 |
|
| CPEs | cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:* |
|
| Vendors & Products |
Linux
Linux linux Kernel |
|
| Metrics |
cvssV3_1
|
cvssV3_1
|
Fri, 21 Feb 2025 14:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Fri, 21 Feb 2025 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Mon, 17 Feb 2025 12:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
Wed, 12 Feb 2025 13:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| References |
| |
| Metrics |
threat_severity
|
cvssV3_1
|
Mon, 10 Feb 2025 16:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device. | |
| Title | vfio/platform: check the bounds of read/write syscalls | |
| References |
|
|
MITRE
Status: PUBLISHED
Assigner: Linux
Published:
Updated: 2026-05-11T21:04:29.113Z
Reserved: 2024-12-29T08:45:45.741Z
Link: CVE-2025-21687
Vulnrichment
No data.
NVD
Status : Modified
Published: 2025-02-10T16:15:38.207
Modified: 2025-11-03T21:19:07.560
Link: CVE-2025-21687
Redhat
OpenCVE Enrichment
No data.