CVE-2025-21734

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21734
In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies the buffer and pass it to the remote subsystem. There is a problem with current implementation of page size calculation which is not considering the offset in the calculation. This might lead to passing of improper and out-of-bounds page size which could result in memory issue. Calculate page start and page end using the offset adjusted address instead of absolute address.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/24a79c6bc8de763f7c50f4f84f8b0c183bc25a51 Patch
https://git.kernel.org/stable/c/c0464bad0e85fcd5d47e4297d1e410097c979e55 Patch
https://git.kernel.org/stable/c/c3f7161123fcbdc64e90119ccce292d8b66281c4 Patch
https://git.kernel.org/stable/c/c56ba3ea8e3c9a69a992aad18f7a65e43e51d623 Patch
https://git.kernel.org/stable/c/e966eae72762ecfdbdb82627e2cda48845b9dd66 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

28 Oct 2025, 20:44

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/24a79c6bc8de763f7c50f4f84f8b0c183bc25a51 - () https://git.kernel.org/stable/c/24a79c6bc8de763f7c50f4f84f8b0c183bc25a51 - Patch
References () https://git.kernel.org/stable/c/c0464bad0e85fcd5d47e4297d1e410097c979e55 - () https://git.kernel.org/stable/c/c0464bad0e85fcd5d47e4297d1e410097c979e55 - Patch
References () https://git.kernel.org/stable/c/c3f7161123fcbdc64e90119ccce292d8b66281c4 - () https://git.kernel.org/stable/c/c3f7161123fcbdc64e90119ccce292d8b66281c4 - Patch
References () https://git.kernel.org/stable/c/c56ba3ea8e3c9a69a992aad18f7a65e43e51d623 - () https://git.kernel.org/stable/c/c56ba3ea8e3c9a69a992aad18f7a65e43e51d623 - Patch
References () https://git.kernel.org/stable/c/e966eae72762ecfdbdb82627e2cda48845b9dd66 - () https://git.kernel.org/stable/c/e966eae72762ecfdbdb82627e2cda48845b9dd66 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
CWE CWE-787
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: misc: fastrpc: Se corrige el tamaño de página del búfer de copia Para un búfer no registrado, el controlador fastrpc copia el búfer y lo pasa al subsistema remoto. Hay un problema con la implementación actual del cálculo del tamaño de página que no considera el desplazamiento en el cálculo. Esto podría provocar que se pase un tamaño de página incorrecto y fuera de los límites, lo que podría generar un problema de memoria. Calcule el inicio y el final de la página utilizando la dirección ajustada por desplazamiento en lugar de la dirección absoluta.
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

27 Feb 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-27 03:15

Updated : 2025-10-28 20:44

NVD link : CVE-2025-21734

Mitre link : CVE-2025-21734

CVE.ORG link : CVE-2025-21734

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write