CVE-2025-21687: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: vfio/platform: check the bounds of read/write syscalls count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.

Affected products

• Linux Linux Kernel: from 4.1, before 5.4.290 (fixed in 5.4.290); from 5.5, before 5.10.234 (fixed in 5.10.234); from 5.11, before 5.15.178 (fixed in 5.15.178); from 5.16, before 6.1.128 (fixed in 6.1.128); from 6.2, before 6.6.75 (fixed in 6.6.75); from 6.7, before 6.12.12 (fixed in 6.12.12); …

Published 2025-02-10. Last modified 2026-07-30.