CVE-2025-21997
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Apr 3, 2025
Updated: Apr 10, 2025
CWE ID 190
Summary
CVE-2025-21997 is a vulnerability affecting the Linux kernel. It involves an integer overflow issue in the xp_create_and_assign_umem() function of the xsk subsystem. The i and pool->chunk_size variables, both of type 'u32', can wrap around and be cast to 'u64', resulting in two different XDP buffers pointing to the same memory area. This issue was discovered by InfoTeCS on behalf of Linux Verification Center. The vulnerability has been resolved to prevent potential memory conflicts and associated security risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.