[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-21704":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":30,"duplicate_of":9,"upstream":31,"downstream":32,"duplicates":155,"related":156,"reserved_at":9,"published_at":168,"modified_at":169,"state":170,"summary":171,"references_raw":179,"kevs":232,"epss":233,"epss_history":236,"metrics":509,"affected":515},"CVE-2025-21704","In the Linux kernel, the following vulnerability has been resolved:\n\nusb: cdc-acm: Check control transfer buffer size before access\n\nIf the first fragment is shorter than struct usb_cdc_notification, we can't\ncalculate an expected_size. Log an error and discard the notification\ninstead of reading lengths from memory outside the received data, which can\nlead to memory corruption when the expected_size decreases between\nfragments, causing `expected_size - acm->nb_index` to wrap.\n\nThis issue has been present since the beginning of git history; however,\nit only leads to memory corruption since commit ea2583529cd1\n(\"cdc-acm: reassemble fragmented notifications\").\n\nA mitigating factor is that acm_ctrl_irq() can only execute after userspace\nhas opened /dev/ttyACM*; but if ModemManager is running, ModemManager will\ndo that automatically depending on the USB device's vendor/product IDs and\nits other interfaces.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","weakness","Draft","Base","High",[],[21],{"_key":22,"name":23,"source":24,"url":25,"maturity":26,"reliability_score":27,"verified":28,"type":9,"platforms":29,"requires_auth":9,"exploitdb":9,"metasploit":9},"REF_E890330527EA2F73","Exploit Reference (project-zero.issues.chromium.org)","reference","https://project-zero.issues.chromium.org/issues/395107243","unknown",0.2,false,[],[],[],[33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153],{"_key":34},"SUSE-SU-2025:01919-1",{"_key":36},"SUSE-SU-2025:01983-1",{"_key":38},"SUSE-SU-2025:1177-1",{"_key":40},"SUSE-SU-2025:1178-1",{"_key":42},"SUSE-SU-2025:1180-1",{"_key":44},"DLA-4102-1",{"_key":46},"DLA-4178-1",{"_key":48},"SUSE-SU-2025:20190-1",{"_key":50},"SUSE-SU-2025:20192-1",{"_key":52},"SUSE-SU-2025:20260-1",{"_key":54},"SUSE-SU-2025:20270-1",{"_key":56},"DEBIAN-CVE-2025-21704",{"_key":58},"LSN-0119-1",{"_key":60},"UBUNTU-CVE-2025-21704",{"_key":62},"USN-7510-1",{"_key":64},"USN-7510-2",{"_key":66},"USN-7510-3",{"_key":68},"USN-7510-4",{"_key":70},"USN-7510-5",{"_key":72},"USN-7510-6",{"_key":74},"USN-7510-7",{"_key":76},"USN-7510-8",{"_key":78},"USN-7593-1",{"_key":80},"USN-7602-1",{"_key":82},"LSN-0117-1",{"_key":84},"USN-7511-1",{"_key":86},"USN-7511-2",{"_key":88},"USN-7511-3",{"_key":90},"USN-7512-1",{"_key":92},"USN-7516-1",{"_key":94},"USN-7516-2",{"_key":96},"USN-7516-3",{"_key":98},"USN-7516-4",{"_key":100},"USN-7516-5",{"_key":102},"USN-7516-6",{"_key":104},"USN-7516-7",{"_key":106},"USN-7516-8",{"_key":108},"USN-7516-9",{"_key":110},"USN-7517-1",{"_key":112},"USN-7517-2",{"_key":114},"USN-7517-3",{"_key":116},"USN-7518-1",{"_key":118},"USN-7521-1",{"_key":120},"USN-7521-3",{"_key":122},"USN-7539-1",{"_key":124},"USN-7540-1",{"_key":126},"USN-7640-1",{"_key":128},"USN-7703-1",{"_key":130},"USN-7703-2",{"_key":132},"USN-7703-3",{"_key":134},"USN-7703-4",{"_key":136},"USN-7719-1",{"_key":138},"USN-7737-1",{"_key":140},"USN-8070-1",{"_key":142},"USN-8070-2",{"_key":144},"USN-8070-3",{"_key":146},"USN-8112-1",{"_key":148},"USN-8112-2",{"_key":150},"USN-8112-3",{"_key":152},"USN-8112-4",{"_key":154},"USN-8112-5",[],[157,158,159,161,162,163,164,165,166,167],{"_key":34},{"_key":36},{"_key":160},"USN-7521-2",{"_key":38},{"_key":40},{"_key":42},{"_key":48},{"_key":50},{"_key":52},{"_key":54},"2025-02-22T09:43:37.377Z","2026-05-12T12:03:23.623Z","Modified",{"cisa_kev":28,"cisa_ransomware":28,"cisa_vendor":9,"epss_severity":172,"epss_score":173,"severity":174,"severity_score":175,"severity_version":176,"severity_source":177,"severity_vector":178,"severity_status":170},"low",0.00025,"high",7.8,"v3.1","nvd","CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",[180,186,190,194,198,202,206,210,214,220,224,228],{"url":181,"sources":182,"tags":184},"https://git.kernel.org/stable/c/a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2",[183,177],"cve.org",[185],"Patch",{"url":187,"sources":188,"tags":189},"https://git.kernel.org/stable/c/90dd2f1b7342b9a671a5ea4160f408037b92b118",[183,177],[185],{"url":191,"sources":192,"tags":193},"https://git.kernel.org/stable/c/871619c2b78fdfe05afb4e8ba548678687beb812",[183,177],[185],{"url":195,"sources":196,"tags":197},"https://git.kernel.org/stable/c/7828e9363ac4d23b02419bf2a45b9f1d9fb35646",[183,177],[185],{"url":199,"sources":200,"tags":201},"https://git.kernel.org/stable/c/6abb510251e75f875797d8983a830e6731fa281c",[183,177],[185],{"url":203,"sources":204,"tags":205},"https://git.kernel.org/stable/c/f64079bef6a8a7823358c3f352ea29a617844636",[183,177],[185],{"url":207,"sources":208,"tags":209},"https://git.kernel.org/stable/c/383d516a0ebc8641372b521c8cb717f0f1834831",[183,177],[185],{"url":211,"sources":212,"tags":213},"https://git.kernel.org/stable/c/e563b01208f4d1f609bcab13333b6c0e24ce6a01",[183,177],[185],{"url":25,"sources":215,"tags":216},[183,177],[217,218,219],"Exploit","Issue Tracking","Third Party Advisory",{"url":221,"sources":222,"tags":223},"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html",[183,177],[],{"url":225,"sources":226,"tags":227},"https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html",[183,177],[],{"url":229,"sources":230,"tags":231},"https://cert-portal.siemens.com/productcert/html/ssa-265688.html",[183,177],[],[],{"date":234,"score":173,"percentile":235},"2026-06-04",0.0736,[237,241,244,247,250,254,257,260,263,266,269,272,275,278,281,285,288,291,295,298,301,304,307,310,313,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,362,365,368,371,374,378,381,384,387,390,393,396,399,403,406,409,412,415,418,421,423,426,429,432,435,438,441,444,447,450,453,456,459,462,465,468,471,474,477,480,483,486,489,492,495,498,500,502,506],{"date":238,"score":239,"percentile":240},"2025-11-04",0.00033,0.08438,{"date":242,"score":239,"percentile":243},"2025-11-05",0.0845,{"date":245,"score":239,"percentile":246},"2025-11-06",0.08568,{"date":248,"score":239,"percentile":249},"2025-11-07",0.08584,{"date":251,"score":252,"percentile":253},"2025-11-08",0.00034,0.0934,{"date":255,"score":252,"percentile":256},"2025-11-09",0.09308,{"date":258,"score":252,"percentile":259},"2025-11-10",0.09265,{"date":261,"score":252,"percentile":262},"2025-11-11",0.09288,{"date":264,"score":252,"percentile":265},"2025-11-12",0.09323,{"date":267,"score":252,"percentile":268},"2025-11-13",0.09363,{"date":270,"score":252,"percentile":271},"2025-11-14",0.09393,{"date":273,"score":252,"percentile":274},"2025-11-15",0.09415,{"date":276,"score":252,"percentile":277},"2025-11-16",0.09418,{"date":279,"score":252,"percentile":280},"2025-11-17",0.09407,{"date":282,"score":283,"percentile":284},"2025-11-18",0.00051,0.11194,{"date":286,"score":283,"percentile":287},"2025-11-19",0.11213,{"date":289,"score":283,"percentile":290},"2025-11-20",0.11235,{"date":292,"score":293,"percentile":294},"2025-11-21",0.00038,0.11155,{"date":296,"score":293,"percentile":297},"2025-11-22",0.11162,{"date":299,"score":293,"percentile":300},"2025-11-23",0.11124,{"date":302,"score":293,"percentile":303},"2025-11-24",0.11078,{"date":305,"score":293,"percentile":306},"2025-11-25",0.11082,{"date":308,"score":293,"percentile":309},"2025-11-26",0.11079,{"date":311,"score":293,"percentile":312},"2025-11-27",0.11087,{"date":314,"score":293,"percentile":303},"2025-11-28",{"date":316,"score":293,"percentile":317},"2025-11-29",0.11064,{"date":319,"score":293,"percentile":320},"2025-11-30",0.11062,{"date":322,"score":293,"percentile":323},"2025-12-01",0.11102,{"date":325,"score":293,"percentile":326},"2025-12-02",0.11111,{"date":328,"score":293,"percentile":329},"2025-12-03",0.1112,{"date":331,"score":293,"percentile":332},"2025-12-04",0.111,{"date":334,"score":293,"percentile":335},"2025-12-05",0.11132,{"date":337,"score":293,"percentile":338},"2025-12-06",0.11141,{"date":340,"score":293,"percentile":341},"2025-12-07",0.11133,{"date":343,"score":293,"percentile":344},"2025-12-08",0.11136,{"date":346,"score":293,"percentile":347},"2025-12-09",0.11225,{"date":349,"score":293,"percentile":350},"2025-12-10",0.11283,{"date":352,"score":293,"percentile":353},"2025-12-11",0.11311,{"date":355,"score":293,"percentile":356},"2025-12-12",0.11338,{"date":358,"score":293,"percentile":359},"2025-12-13",0.11342,{"date":361,"score":293,"percentile":359},"2025-12-14",{"date":363,"score":293,"percentile":364},"2025-12-15",0.1129,{"date":366,"score":293,"percentile":367},"2025-12-16",0.11277,{"date":369,"score":293,"percentile":370},"2025-12-17",0.1136,{"date":372,"score":293,"percentile":373},"2025-12-18",0.11405,{"date":375,"score":376,"percentile":377},"2025-12-19",0.00041,0.12299,{"date":379,"score":376,"percentile":380},"2025-12-20",0.12302,{"date":382,"score":376,"percentile":383},"2025-12-21",0.12279,{"date":385,"score":376,"percentile":386},"2025-12-22",0.12249,{"date":388,"score":376,"percentile":389},"2025-12-23",0.12251,{"date":391,"score":376,"percentile":392},"2025-12-24",0.12261,{"date":394,"score":376,"percentile":395},"2025-12-25",0.12335,{"date":397,"score":376,"percentile":398},"2025-12-26",0.12316,{"date":400,"score":401,"percentile":402},"2025-12-27",0.0005,0.1591,{"date":404,"score":376,"percentile":405},"2025-12-28",0.12307,{"date":407,"score":376,"percentile":408},"2025-12-29",0.12235,{"date":410,"score":376,"percentile":411},"2025-12-30",0.12211,{"date":413,"score":376,"percentile":414},"2025-12-31",0.1225,{"date":416,"score":376,"percentile":417},"2026-01-01",0.12283,{"date":419,"score":376,"percentile":420},"2026-01-02",0.12267,{"date":422,"score":376,"percentile":408},"2026-01-03",{"date":424,"score":376,"percentile":425},"2026-01-04",0.1216,{"date":427,"score":376,"percentile":428},"2026-01-05",0.12111,{"date":430,"score":376,"percentile":431},"2026-01-06",0.12126,{"date":433,"score":376,"percentile":434},"2026-01-07",0.12161,{"date":436,"score":376,"percentile":437},"2026-01-08",0.12205,{"date":439,"score":376,"percentile":440},"2026-01-09",0.12227,{"date":442,"score":376,"percentile":443},"2026-01-10",0.12253,{"date":445,"score":376,"percentile":446},"2026-01-11",0.12225,{"date":448,"score":376,"percentile":449},"2026-01-12",0.12195,{"date":451,"score":376,"percentile":452},"2026-01-13",0.1217,{"date":454,"score":376,"percentile":455},"2026-01-14",0.12232,{"date":457,"score":376,"percentile":458},"2026-01-15",0.12233,{"date":460,"score":376,"percentile":461},"2026-01-16",0.12282,{"date":463,"score":376,"percentile":464},"2026-01-17",0.12295,{"date":466,"score":376,"percentile":467},"2026-01-18",0.12243,{"date":469,"score":376,"percentile":470},"2026-01-19",0.12184,{"date":472,"score":376,"percentile":473},"2026-01-20",0.12166,{"date":475,"score":376,"percentile":476},"2026-01-21",0.12144,{"date":478,"score":376,"percentile":479},"2026-01-22",0.12127,{"date":481,"score":376,"percentile":482},"2026-01-23",0.12213,{"date":484,"score":376,"percentile":485},"2026-01-24",0.12269,{"date":487,"score":376,"percentile":488},"2026-01-25",0.12219,{"date":490,"score":376,"percentile":491},"2026-01-26",0.12163,{"date":493,"score":376,"percentile":494},"2026-01-27",0.1215,{"date":496,"score":376,"percentile":497},"2026-01-28",0.12137,{"date":499,"score":376,"percentile":428},"2026-01-29",{"date":501,"score":376,"percentile":479},"2026-01-30",{"date":503,"score":504,"percentile":505},"2026-01-31",0.00036,0.10265,{"date":507,"score":504,"percentile":508},"2026-02-01",0.10276,[510],{"source":177,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":511,"cvss_v4_0":9},{"baseScore":175,"baseSeverity":512,"vectorString":178,"impactScore":513,"exploitabilityScore":514},"HIGH",9.8,4.6,[516,551],{"ecosystem":9,"name":517,"vendor":518,"product":518,"cpe_part":519,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":520},"Linux","linux","a",[521,528,531,534,537,540,543,546,549],{"version":522,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":526,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2",true,"1da177e4c3f41524e886b7f1b8a0c1fc7321cac2","including","a4e1ae5c0533964170197e4fb4f33bc8c1db5cd2","excluding",{"version":529,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":530,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 90dd2f1b7342b9a671a5ea4160f408037b92b118","90dd2f1b7342b9a671a5ea4160f408037b92b118",{"version":532,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":533,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 871619c2b78fdfe05afb4e8ba548678687beb812","871619c2b78fdfe05afb4e8ba548678687beb812",{"version":535,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":536,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 7828e9363ac4d23b02419bf2a45b9f1d9fb35646","7828e9363ac4d23b02419bf2a45b9f1d9fb35646",{"version":538,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":539,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 6abb510251e75f875797d8983a830e6731fa281c","6abb510251e75f875797d8983a830e6731fa281c",{"version":541,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":542,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C f64079bef6a8a7823358c3f352ea29a617844636","f64079bef6a8a7823358c3f352ea29a617844636",{"version":544,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":545,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C 383d516a0ebc8641372b521c8cb717f0f1834831","383d516a0ebc8641372b521c8cb717f0f1834831",{"version":547,"is_range":523,"range_type":183,"version_start":524,"version_start_type":525,"version_end":548,"version_end_type":527,"fixed_in":9},">= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, \u003C e563b01208f4d1f609bcab13333b6c0e24ce6a01","e563b01208f4d1f609bcab13333b6c0e24ce6a01",{"version":550,"is_range":28,"range_type":183,"version_start":550,"version_start_type":525,"version_end":550,"version_end_type":525,"fixed_in":9},"2.6.12",{"ecosystem":9,"name":552,"vendor":518,"product":553,"cpe_part":554,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":555},"linux kernel","linux_kernel","o",[556,561,565,569,573,577,581,585,586,588,590,592,594,596],{"version":557,"is_range":523,"range_type":558,"version_start":559,"version_start_type":525,"version_end":560,"version_end_type":527,"fixed_in":9},"gte2.6.13_lt5.4.291","cpe","2.6.13","5.4.291",{"version":562,"is_range":523,"range_type":558,"version_start":563,"version_start_type":525,"version_end":564,"version_end_type":527,"fixed_in":9},"gte5.5_lt5.10.235","5.5","5.10.235",{"version":566,"is_range":523,"range_type":558,"version_start":567,"version_start_type":525,"version_end":568,"version_end_type":527,"fixed_in":9},"gte5.11_lt5.15.179","5.11","5.15.179",{"version":570,"is_range":523,"range_type":558,"version_start":571,"version_start_type":525,"version_end":572,"version_end_type":527,"fixed_in":9},"gte5.16_lt6.1.129","5.16","6.1.129",{"version":574,"is_range":523,"range_type":558,"version_start":575,"version_start_type":525,"version_end":576,"version_end_type":527,"fixed_in":9},"gte6.2_lt6.6.79","6.2","6.6.79",{"version":578,"is_range":523,"range_type":558,"version_start":579,"version_start_type":525,"version_end":580,"version_end_type":527,"fixed_in":9},"gte6.7_lt6.12.16","6.7","6.12.16",{"version":582,"is_range":523,"range_type":558,"version_start":583,"version_start_type":525,"version_end":584,"version_end_type":527,"fixed_in":9},"gte6.13_lt6.13.4","6.13","6.13.4",{"version":550,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":587,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc2",{"version":589,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc3",{"version":591,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc4",{"version":593,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"2.6.12:rc5",{"version":595,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc1",{"version":597,"is_range":28,"range_type":558,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"6.14:rc2"]