CVE-2025-22117

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-22117
In the Linux kernel, the following vulnerability has been resolved: ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() Fix using the untrusted value of proto->raw.pkt_len in function ice_vc_fdir_parse_raw() by verifying if it does not exceed the VIRTCHNL_MAX_SIZE_RAW_PACKET value.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/1388dd564183a5a18ec4a966748037736b5653c5 Patch
https://git.kernel.org/stable/c/362f704ba73a359db9cded567e891d9a8f081875 Patch
Configurations

Configuration 1 (hide)

cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

03 Nov 2025, 18:35

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: ice: corrección del uso del valor no confiable de pkt_len en ice_vc_fdir_parse_raw() Se corrige el uso del valor no confiable de proto->raw.pkt_len en la función ice_vc_fdir_parse_raw() verificando que no exceda el valor VIRTCHNL_MAX_SIZE_RAW_PACKET.
References () https://git.kernel.org/stable/c/1388dd564183a5a18ec4a966748037736b5653c5 - () https://git.kernel.org/stable/c/1388dd564183a5a18ec4a966748037736b5653c5 - Patch
References () https://git.kernel.org/stable/c/362f704ba73a359db9cded567e891d9a8f081875 - () https://git.kernel.org/stable/c/362f704ba73a359db9cded567e891d9a8f081875 - Patch
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
First Time Linux
Linux linux Kernel

16 Apr 2025, 15:16

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-16 15:16

Updated : 2025-11-03 18:35

NVD link : CVE-2025-22117

Mitre link : CVE-2025-22117

CVE.ORG link : CVE-2025-22117

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo