CVE-2025-21800: Linux Kernel

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset When bit offset for HWS_SET32 macro is negative, UBSAN complains about the shift-out-of-bounds: UBSAN: shift-out-of-bounds in drivers/net/ethernet/mellanox/mlx5/core/steering/hws/definer.c:177:2 shift exponent -8 is negative

Affected products

• Linux Linux Kernel: from 6.12, before 6.12.13 (fixed in 6.12.13); from 6.13, before 6.13.2 (fixed in 6.13.2)

Published 2025-02-27. Last modified 2026-06-17.