CVE-2025-21735

Advisory lineage Upstream: 0 Downstream: 62
Modified
Published: 27 Feb 2025, 02:12
Last modified:12 May 2026, 12:03

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability -0.03%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

27 Feb 2025, 02:12
Published
Vulnerability first disclosed
12 May 2026, 12:03
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: NFC: nci: Add bounds checking in nci_hci_create_pipe() The "pipe" variable is a u8 which comes from the network. If it's more than 127, then it results in memory corruption in the caller, nci_hci_connect_gate().

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 2%

Techniques & Countermeasures

  • CWE-787•Out-of-bounds Write

    The product writes data past the end, or before the beginning, of the intended buffer.

Affected Systems

  • linux•linux

    ≥ a1b0b9415817c14d207921582f269d03f848b69f, < bd249109d266f1d52548c46634a15b71656e0d44 | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < 674e17c5933779a8bf5c15d596fdfcb5ccdebbc2 | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < 10b3f947b609713e04022101f492d288a014ddfa | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < d5a461c315e5ff92657f84d8ba50caa5abf5c22a | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < 172cdfc3a5ea20289c58fb73dadc6fd4a8784a4e | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < 2ae4bade5a64d126bd18eb66bd419005c5550218 | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < 59c7ed20217c0939862fbf8145bc49d5b3a13f4f | ≥ a1b0b9415817c14d207921582f269d03f848b69f, < 110b43ef05342d5a11284cc8b21582b698b4ef1c | 4.4

  • linux•linux_kernel

    ≥ 4.4, < 6.1.129 | ≥ 6.2, < 6.6.78 | ≥ 6.7, < 6.12.14 | ≥ 6.13, < 6.13.3

References (11)