CVE-2025-21785

HighCVSS 7.8/10Last modified Oct 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

VendorProductVersions
LinuxLinux>= 5d425c18653731af62831d30a4fa023d532657a9, < 4371ac7b494e933fffee2bd6265d18d73c4f05aa; >= 5d425c18653731af62831d30a4fa023d532657a9, < e4fde33107351ec33f1a64188612fbc6ca659284; >= 5d425c18653731af62831d30a4fa023d532657a9, < 88a3e6afaf002250220793df99404977d343db14; >= 5d425c18653731af62831d30a4fa023d532657a9, < 4ff25f0b18d1d0174c105e4620428bcdc1213860; >= 5d425c18653731af62831d30a4fa023d532657a9, < ab90894f33c15b14c1cee6959ab6c8dcb09127f8; >= 5d425c18653731af62831d30a4fa023d532657a9, < 715eb1af64779e1b1aa0a7b2ffb81414d9f708e5; >= 5d425c18653731af62831d30a4fa023d532657a9, < 67b99a2b5811df4294c2ad50f9bff3b6a08bd618; >= 5d425c18653731af62831d30a4fa023d532657a9, < 875d742cf5327c93cba1f11e12b08d3cce7a88d2
LinuxLinux4.0

References

Timeline

Published
Feb 27, 2025
Last modified
Oct 15, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-217867.8In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer from the pool The cCVE-2025-217875.5In the Linux kernel, the following vulnerability has been resolved: team: better TEAM_OPTION_TYPE_STRING validation syzbot reported followCVE-2025-217885.5In the Linux kernel, the following vulnerability has been resolved: net: ethernet: ti: am65-cpsw: fix memleak in certain XDP cases If the CVE-2025-217897.1In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code for negative lengthCVE-2025-21796.8An incorrect privilege assignment vulnerability in the Palo Alto Networks GlobalProtect™ App on Linux devices enables a locally authenticateCVE-2025-217905.5In the Linux kernel, the following vulnerability has been resolved: vxlan: check vxlan_vnigroup_init() return value vxlan_init() must checCVE-2025-217917.8In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_l3_out() can be callCVE-2025-217925.5In the Linux kernel, the following vulnerability has been resolved: ax25: Fix refcount leak caused by setting SO_BINDTODEVICE sockopt If aCVE-2025-217935.5In the Linux kernel, the following vulnerability has been resolved: spi: sn-f-ospi: Fix division by zero When there is no dummy cycle in tCVE-2025-217947.1In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read in usb_check_int_enCVE-2025-217955.5In the Linux kernel, the following vulnerability has been resolved: NFSD: fix hang in nfsd4_shutdown_callback If nfs4_client is in courtesCVE-2025-217969.8In the Linux kernel, the following vulnerability has been resolved: nfsd: clear acl_access/acl_default after releasing them If getting acl
CVE-2025-21785: High severity, CVSS 7.8 | Vulnix