THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-21738 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA com

[NVD] CVE-2025-21738 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: ata: libata-sff: Ensure that we cannot write outside the allocated buffer reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA com

lownvdPublished 2025-02-27

CVE-2025-21738 CVSS: 7.8 HIGH Published: 2025-02-27T03:15:14.427

In the Linux kernel, the following vulnerability has been resolved:

ata: libata-sff: Ensure that we cannot write outside the allocated buffer

reveliofuzzing reported that a SCSI_IOCTL_SEND_COMMAND ioctl with out_len set to 0xd42, SCSI command set to ATA_16 PASS-THROUGH, ATA command set to ATA_NOP, and protocol set to ATA_PROT_PIO,

Indicators of compromise

CVE-2025-21738cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-21738