CVE-2025-22001: accel/qaic: Fix integer overflow in qaic_validate_req()
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Fix integer overflow in qaicvalidatereq()
These are u64 variables that come from the user via qaicattachsliceboioctl(). Use checkaddoverflow() to ensure that the math doesn't have an integer wrapping bug.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22001?
CVE-2025-22001 has been classified with a moderate severity level due to its potential to cause integer overflow in the Linux kernel.
How do I fix CVE-2025-22001?
To fix CVE-2025-22001, update your Linux kernel to the latest version that includes the patch for the integer overflow issue in qaic_validate_req().
What systems are impacted by CVE-2025-22001?
CVE-2025-22001 affects various versions of the Linux kernel that include the affected qaic module.
What is the cause of CVE-2025-22001?
CVE-2025-22001 arises from an integer overflow vulnerability in the qaic_validate_req() function, allowing potential exploitation from user input.
Is there a known exploit for CVE-2025-22001?
As of now, there are no publicly known exploits for CVE-2025-22001, but it is advisable to apply patches to mitigate any potential risks.