CVE-2025-21800

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset

When bit offset for HWS_SET32 macro is negative, UBSAN complains about the shift-out-of-bounds:

UBSAN: shift-out-of-bounds in drivers/net/ethernet/mellanox/mlx5/core/steering/hws/definer.c:177:2 shift exponent -8 is negative

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 74a778b4a63faef9ff02aad0d332b209835f93e1, < 92cff996624c4757d5bbace3dfa3f1567ba94143; >= 74a778b4a63faef9ff02aad0d332b209835f93e1, < 69c676c0ded472713e6d1b3a456b3c4f52f66f0e; >= 74a778b4a63faef9ff02aad0d332b209835f93e1, < be482f1d10da781db9445d2753c1e3f1fd82babf
LinuxLinux6.12

References

Timeline

Published
Feb 27, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-218015.5In the Linux kernel, the following vulnerability has been resolved: net: ravb: Fix missing rtnl lock in suspend/resume path Fix the suspenCVE-2025-218025.5In the Linux kernel, the following vulnerability has been resolved: net: hns3: fix oops when unload drivers paralleling When unload hclge CVE-2025-218035.5In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix warnings during S3 suspend The enable_gpe_wakeup() funcCVE-2025-218045.5In the Linux kernel, the following vulnerability has been resolved: PCI: rcar-ep: Fix incorrect variable used when calling devm_request_memCVE-2025-218055.5In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs: Add missing deinit() call A warning is triggered when repeaCVE-2025-218065.5In the Linux kernel, the following vulnerability has been resolved: net: let net.core.dev_weight always be non-zero The following problem CVE-2025-218075.5In the Linux kernel, the following vulnerability has been resolved: block: fix queue freeze vs limits lock order in sysfs store methods quCVE-2025-218085.5In the Linux kernel, the following vulnerability has been resolved: net: xdp: Disallow attaching device-bound programs in generic mode DevCVE-2025-218095.5In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback In its address list,CVE-2025-21815.9A sensitive information disclosure vulnerability in Palo Alto Networks Checkov by Prisma® Cloud can result in the cleartext exposure of PrisCVE-2025-218105.5In the Linux kernel, the following vulnerability has been resolved: driver core: class: Fix wild pointer dereferences in API class_dev_iterCVE-2025-218117.8In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active references nilfs_look
CVE-2025-21800: High severity, CVSS 7.8 | Vulnix