CVE-2025-21687
"Linux VFIO Platform Out-of-Bounds Read/Write"
Description
In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.
INFO
Published Date :
Feb. 10, 2025, 4:15 p.m.
Last Modified :
Feb. 21, 2025, 4:49 p.m.
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Remotely Exploitable :
No
Impact Score :
5.9
Exploitability Score :
1.8
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2025-21687.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2025-21687 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2025-21687 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
Initial Analysis by [email protected]
Feb. 21, 2025
Action Type Old Value New Value Added CVSS V3.1 NIST AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Added CWE NIST CWE-125 Added CWE NIST CWE-787 Added CPE Configuration OR *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 4.1 up to (excluding) 5.4.290 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.5 up to (excluding) 5.10.234 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.11 up to (excluding) 5.15.178 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 5.16 up to (excluding) 6.1.128 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.2 up to (excluding) 6.6.75 *cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* versions from (including) 6.7 up to (excluding) 6.12.12 *cpe:2.3:o:linux:linux_kernel:6.13:-:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc1:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc2:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc3:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc4:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc5:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc6:*:*:*:*:*:* *cpe:2.3:o:linux:linux_kernel:6.13:rc7:*:*:*:*:*:* Changed Reference Type https://git.kernel.org/stable/c/1485932496a1b025235af8aa1e21988d6b7ccd54 No Types Assigned https://git.kernel.org/stable/c/1485932496a1b025235af8aa1e21988d6b7ccd54 Patch Changed Reference Type https://git.kernel.org/stable/c/665cfd1083866f87301bbd232cb8ba48dcf4acce No Types Assigned https://git.kernel.org/stable/c/665cfd1083866f87301bbd232cb8ba48dcf4acce Patch Changed Reference Type https://git.kernel.org/stable/c/6bcb8a5b70b80143db9bf12dfa7d53636f824d53 No Types Assigned https://git.kernel.org/stable/c/6bcb8a5b70b80143db9bf12dfa7d53636f824d53 Patch Changed Reference Type https://git.kernel.org/stable/c/92340e6c5122d823ad064984ef7513eba9204048 No Types Assigned https://git.kernel.org/stable/c/92340e6c5122d823ad064984ef7513eba9204048 Patch Changed Reference Type https://git.kernel.org/stable/c/a20fcaa230f7472456d12cf761ed13938e320ac3 No Types Assigned https://git.kernel.org/stable/c/a20fcaa230f7472456d12cf761ed13938e320ac3 Patch Changed Reference Type https://git.kernel.org/stable/c/c981c32c38af80737a2fedc16e270546d139ccdd No Types Assigned https://git.kernel.org/stable/c/c981c32c38af80737a2fedc16e270546d139ccdd Patch Changed Reference Type https://git.kernel.org/stable/c/ce9ff21ea89d191e477a02ad7eabf4f996b80a69 No Types Assigned https://git.kernel.org/stable/c/ce9ff21ea89d191e477a02ad7eabf4f996b80a69 Patch Changed Reference Type https://git.kernel.org/stable/c/d19a8650fd3d7aed8d1af1d9a77f979a8430eba1 No Types Assigned https://git.kernel.org/stable/c/d19a8650fd3d7aed8d1af1d9a77f979a8430eba1 Patch Changed Reference Type https://git.kernel.org/stable/c/f21636f24b6786c8b13f1af4319fa75ffcf17f38 No Types Assigned https://git.kernel.org/stable/c/f21636f24b6786c8b13f1af4319fa75ffcf17f38 Patch -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 21, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/1485932496a1b025235af8aa1e21988d6b7ccd54 Removed Reference https://git.kernel.org/stable/c/03844b1908114680ca35fa0a0aba3d906a6d78af Removed Reference https://git.kernel.org/stable/c/198090eb6f5f094cf3a268c3c30ef1e9c84a6dbe Removed Reference https://git.kernel.org/stable/c/61ba518195d61c38c6cb86f83135e51f93735442 -
CVE Modified by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 17, 2025
Action Type Old Value New Value Added Reference https://git.kernel.org/stable/c/03844b1908114680ca35fa0a0aba3d906a6d78af Added Reference https://git.kernel.org/stable/c/198090eb6f5f094cf3a268c3c30ef1e9c84a6dbe Added Reference https://git.kernel.org/stable/c/61ba518195d61c38c6cb86f83135e51f93735442 -
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Feb. 10, 2025
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device. Added Reference https://git.kernel.org/stable/c/665cfd1083866f87301bbd232cb8ba48dcf4acce Added Reference https://git.kernel.org/stable/c/6bcb8a5b70b80143db9bf12dfa7d53636f824d53 Added Reference https://git.kernel.org/stable/c/92340e6c5122d823ad064984ef7513eba9204048 Added Reference https://git.kernel.org/stable/c/a20fcaa230f7472456d12cf761ed13938e320ac3 Added Reference https://git.kernel.org/stable/c/c981c32c38af80737a2fedc16e270546d139ccdd Added Reference https://git.kernel.org/stable/c/ce9ff21ea89d191e477a02ad7eabf4f996b80a69 Added Reference https://git.kernel.org/stable/c/d19a8650fd3d7aed8d1af1d9a77f979a8430eba1 Added Reference https://git.kernel.org/stable/c/f21636f24b6786c8b13f1af4319fa75ffcf17f38
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2025-21687 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2025-21687
weaknesses.