CVE-2025-22059

Summary

CVE-2025-22059: A vulnerability in the Linux kernel's UDP protocol allows a single socket to receive more data than intended due to an integer overflow issue. This occurs when the sk_rmem_alloc variable, which keeps track of available memory for received data, is unconditionally incremented and exceeds the signed int limit, causing it to wrap around. As a result, the socket can receive more data than its configured receive buffer size, leading to potential security and stability issues. The issue was introduced in commit 6a1f12dd85a8 and can be mitigated by casting rmem and rcvbuf to unsigned int and checking skb->truesize only when the receive buffer is large enough. However, there is still a small risk of overflow when multiple sockets on different cores process incoming data simultaneously.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.