5.5

CVE-2025-21963

cifs: Fix integer overflow while processing acdirmax mount option

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix integer overflow while processing acdirmax mount option

User-provided mount parameter acdirmax of type u32 is intended to have
an upper limit, but before it is validated, the value is converted from
seconds to jiffies which can lead to an integer overflow.

Found by Linux Verification Center (linuxtesting.org) with SVACE.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.12 < 5.15.180
Linux ≫ Linux Kernel Version >= 5.16 < 6.1.132
Linux ≫ Linux Kernel Version >= 6.2 < 6.6.84
Linux ≫ Linux Kernel Version >= 6.7 < 6.12.20
Linux ≫ Linux Kernel Version >= 6.13 < 6.13.8
Linux ≫ Linux Kernel Version 6.14 Update rc1
Linux ≫ Linux Kernel Version 6.14 Update rc2
Linux ≫ Linux Kernel Version 6.14 Update rc3
Linux ≫ Linux Kernel Version 6.14 Update rc4
Linux ≫ Linux Kernel Version 6.14 Update rc5
Linux ≫ Linux Kernel Version 6.14 Update rc6
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.093
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CISA-ADP 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-190 Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

https://git.kernel.org/stable/c/2809a79bc64964ce02e0c5f2d6bd39b9d09bdb3c
Patch
https://git.kernel.org/stable/c/39d086bb3558da9640ef335f97453e01d32578a1
Patch
https://git.kernel.org/stable/c/5b29891f91dfb8758baf1e2217bef4b16b2b165b
Patch
https://git.kernel.org/stable/c/6124cbf73e3dea7591857dd63b8ccece28952afd
Patch
https://git.kernel.org/stable/c/9e438d0410a4002d24f420f2c28897ba2dc0af64
Patch
https://git.kernel.org/stable/c/0c26edf477e093cefc41637f5bccc102e1a77399
Patch
https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html