CVE-2025-22117: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()
In the Linux kernel, the following vulnerability has been resolved:
ice: fix using untrusted value of pktlen in icevcfdirparseraw()
Fix using the untrusted value of proto->raw.pktlen in function icevcfdirparseraw() by verifying if it does not exceed the VIRTCHNLMAXSIZERAWPACKET value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-22117?
CVE-2025-22117 has a medium severity rating due to the potential impact on system stability.
How do I fix CVE-2025-22117?
To fix CVE-2025-22117, update to the latest version of the Linux kernel where the vulnerability has been patched.
What systems are affected by CVE-2025-22117?
CVE-2025-22117 affects various versions of the Linux kernel across multiple distributions.
What does CVE-2025-22117 exploit?
CVE-2025-22117 exploits the use of an untrusted value in the pkt_len parameter in the ice_vc_fdir_parse_raw() function.
Is there a risk of data loss with CVE-2025-22117?
While CVE-2025-22117 primarily poses a risk to system stability, there is a potential indirect risk of data loss if system crashes occur.