CVEvulnerability

CVE-2025-21962

5.5 MEDIUM Published 2025-04-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-04-01
Last modified
2026-06-17
Assigner
416baaa9-dc9f-4396-8d5f-8c081fb06d67
CVSS 3.1 ([email protected])
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-190

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected configurations

• linux linux kernel (>= 5.15.107 < 5.15.180) • linux linux kernel (>= 6.0 < 6.1.132) • linux linux kernel (>= 6.2 < 6.6.84) • linux linux kernel (>= 6.7 < 6.12.20) • linux linux kernel (>= 6.13 < 6.13.8) • linux linux kernel 6.14

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References