THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2025-21687 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

[NVD] CVE-2025-21687 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

lownvdPublished 2025-02-10

CVE-2025-21687 CVSS: 7.8 HIGH Published: 2025-02-10T16:15:38.207

In the Linux kernel, the following vulnerability has been resolved:

vfio/platform: check the bounds of read/write syscalls

count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21687