CVE-2025-21964: cifs: Fix integer overflow while processing acregmax mount option
First published: Tue Apr 01 2025(Updated: )
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.
Credit: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linux Kernel | ||
| Linux Kernel | >=5.12<5.15.180 | |
| Linux Kernel | >=5.16<6.1.132 | |
| Linux Kernel | >=6.2<6.6.84 | |
| Linux Kernel | >=6.7<6.12.20 | |
| Linux Kernel | >=6.13<6.13.8 | |
| Linux Kernel | =6.14-rc1 | |
| Linux Kernel | =6.14-rc2 | |
| Linux Kernel | =6.14-rc3 | |
| Linux Kernel | =6.14-rc4 | |
| Linux Kernel | =6.14-rc5 | |
| Linux Kernel | =6.14-rc6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://git.kernel.org/stable/c/0252c33cc943e9e48ddfafaa6b1eb72adb68a099
- https://git.kernel.org/stable/c/5f500874ab9b3cc8c169c2ab49f00b838520b9c5
- https://git.kernel.org/stable/c/7489161b1852390b4413d57f2457cd40b34da6cc
- https://git.kernel.org/stable/c/833f2903eb8b70faca7967319e580e9ce69729fc
- https://git.kernel.org/stable/c/dd190168e60ac15408f074a1fe0ce36aff34027b
- https://git.kernel.org/stable/c/a13351624a6af8d91398860b8c9d4cf6c8e63de5
Frequently Asked Questions
What is the severity of CVE-2025-21964?
CVE-2025-21964 is classified as a vulnerability affecting the Linux kernel with a potential risk of integer overflow.
How do I fix CVE-2025-21964?
To fix CVE-2025-21964, ensure that you update your Linux kernel to the latest version where this vulnerability has been resolved.
What does CVE-2025-21964 affect?
CVE-2025-21964 affects the Linux kernel specifically related to the processing of the acregmax mount option.
What is the impact of CVE-2025-21964?
The impact of CVE-2025-21964 includes potential exploitation through an integer overflow during the processing of user-provided mount parameters.
Is CVE-2025-21964 a local or remote vulnerability?
CVE-2025-21964 is primarily a local vulnerability since it requires local access to exploit the integer overflow within the mount parameters.
- agent/weakness
- agent/title
- agent/description
- agent/type
- agent/first-publish-date
- agent/guess-ai
- agent/software-canonical-lookup
- agent/source
- agent/author
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/tags
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/event
- collector/nvd-api
- source/NVD
- vendor/linux
- canonical/linux kernel
- version/linux kernel/5.12
- version/linux kernel/5.16
- version/linux kernel/6.2
- version/linux kernel/6.7
- version/linux kernel/6.13
- version/linux kernel/6.14-rc1
- version/linux kernel/6.14-rc2
- version/linux kernel/6.14-rc3
- version/linux kernel/6.14-rc4
- version/linux kernel/6.14-rc5
- version/linux kernel/6.14-rc6