CVE-2025-22001

Summary

CVE-2025-22001 is a recently identified vulnerability in the Linux kernel. It affects the accel/qaic driver where integer overflow occurs in the function qaic_validate_req(). The issue arises due to u64 variables that are received from the user through qaic_attach_slice_bo_ioctl(). To mitigate this issue, the Linux kernel team has implemented check_add_overflow() to prevent any potential integer wrapping bugs. This vulnerability could potentially be exploited to execute arbitrary code or cause a denial of service. Users are encouraged to update their Linux kernels to the latest version to address this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.