CVE-2025-21993
CVSS 3.1 Score 7.1 of 10 (high)
Details
Published Apr 2, 2025
Updated: Apr 10, 2025
CWE ID 125
Summary
CVE-2025-21993 is a vulnerability affecting the Linux kernel that has been addressed. During iSCSI boot using IPv6, the function iscsi_ibft encountered a UBSAN (Uninitialized Value or Size Array Bound) warning due to a negative shift exponent caused by reading the non-applicable subnet-mask value from /sys/firmware/ibft/ethernetX/subnet-mask. The prefix length of IPv6 being 64 led to this issue. To mitigate the warning message, the value is now set to ~0.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.