CVE-2025-21927: nvme-tcp: fix potential memory corruption in nvme_tcp_recv_pdu()
In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: fix potential memory corruption in nvmetcprecvpdu()
nvmetcprecvpdu() doesn't check the validity of the header length. When header digests are enabled, a target might send a packet with an invalid header length (e.g. 255), causing nvmetcpverifyhdgst() to access memory outside the allocated area and cause memory corruptions by overwriting it with the calculated digest.
Fix this by rejecting packets with an unexpected header length.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21927?
CVE-2025-21927 is classified as having a high severity due to its potential for memory corruption in the Linux kernel.
How do I fix CVE-2025-21927?
To mitigate CVE-2025-21927, it is recommended to update to the latest version of the Linux kernel where this vulnerability has been addressed.
What are the potential impacts of CVE-2025-21927?
CVE-2025-21927 may lead to memory corruption, which can result in system crashes or unauthorized access.
Which versions of the Linux kernel are affected by CVE-2025-21927?
CVE-2025-21927 affects multiple versions of the Linux kernel prior to the inclusion of the fix.
What systems are most at risk from CVE-2025-21927?
Systems using the affected versions of the Linux kernel with NVMe over TCP support enabled are most at risk from CVE-2025-21927.