CVE-2025-21988 — fs/netfs/read_collect: add to next->prev_donated
In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" req…
Published: 2025-04-02 · CVSS: 9.8 · CVSS 3.1
In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front").
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7