CVE-2025-21736
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Feb 27, 2025
Updated: Mar 13, 2025
CWE ID 190
Summary
CVE-2025-21736 is a vulnerability affecting the Linux kernel where an integer overflow can occur in the nilfs2 file system's nilfs_fiemap() function. This issue arises due to the potential calculation of maxblocks as INT_MAX, leading to a possible left shift overflow in the n variable. Though the likelihood of this occurrence is low, it can be mitigated by casting the right-hand expression to a wider type. This vulnerability was discovered through static analysis conducted by the Linux Verification Center (linuxtesting.org).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.