CVE-2025-21687
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Feb 10, 2025
Updated: Feb 21, 2025
CWE ID 125
CWE ID 787
Summary
CVE-2025-21687 is a vulnerability affecting the Linux kernel. This issue lies in the vfio/platform component, where the bounds of read/write syscalls are not properly checked. The count and offset are passed from user space without verification, allowing potential out-of-bounds reading or writing to devices. This can lead to serious security implications if exploited. The vulnerability has been addressed in recent Linux kernel updates.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.