CVE-2025-21687 — vfio/platform: check the bounds of read/write syscalls
In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not …
Published: 2025-02-10 · CVSS: 7.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7