CVE-2025-21988: fs/netfs/read_collect: add to next->prev_donated
In the Linux kernel, the following vulnerability has been resolved:
fs/netfs/readcollect: add to next->prevdonated
If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the prevdonated field, causing data corruption and a BUG() crash ("Can't donate prior to front").
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-21988?
CVE-2025-21988 has been classified with a severity rating that indicates a potential risk in the Linux Kernel.
How do I fix CVE-2025-21988?
To fix CVE-2025-21988, update your Linux Kernel to the latest patched version that addresses this vulnerability.
Which systems are affected by CVE-2025-21988?
CVE-2025-21988 affects various versions of the Linux Kernel.
What are the potential impacts of exploiting CVE-2025-21988?
Exploiting CVE-2025-21988 may lead to data corruption and instability in systems using the affected Linux Kernel.
Is there a workaround for CVE-2025-21988?
Currently, there is no known workaround for CVE-2025-21988; updating the Kernel is the recommended action.