Back to Database
Status published
Unknown
CVE-2025-21748
ksmbd: fix integer overflows on 32 bit systems
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix integer overflows on 32 bit systems On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-21748
Credits & Attribution
No credits recorded in the NVD database.
References
- https://git.kernel.org/stable/c/f3b9fb2764591d792d160f375851013665a9e820
- https://git.kernel.org/stable/c/760568c1f62ea874e8fb492f9cfa4f47b4b8391e
- https://git.kernel.org/stable/c/82f59d64e6297f270311b16b5dcf65be406d1ea3
- https://git.kernel.org/stable/c/b4b902737746c490258de5cb55cab39e79927a67
- https://git.kernel.org/stable/c/ecb9947fa7c99a77b04d43404c6988a0d326e4a0
- https://git.kernel.org/stable/c/aab98e2dbd648510f8f51b83fbf4721206ccae45
More from Linux
View All →CVE-2025-71315
drm/vkms: Convert to DRM's vblank timer
Unknown
0
CVE-2025-71314
drm/panthor: Recover from panthor_gpu_flush_caches() failures
Unknown
0
CVE-2025-71313
PCI: endpoint: Add missing NULL check for alloc_workqueue()
Unknown
0
CVE-2025-71312
fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
Unknown
0
CVE-2025-71311
fs/ntfs3: Initialize new folios before use
Unknown
0
Affected Vendor
Linux
View all reports →Affected Software
Linux
Vulnerable Versions:
0626e6641f6b467447c81dd7678a69c66f7746cf, 5.15, 0, 5.15.179, 6.1.129, 6.6.78, 6.12.14, 6.13.3, 6.14
Timeline
Official Publish:
February 27th, 2025
Last Modified:
May 11th, 2026
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.