CVE-2025-21785: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array
Vulnerability summary
CVE-2025-21785 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.27% chance of exploitation in the next 30 days, higher than 19.7% of scored vulnerabilities.
Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 57 · Related 54Timeline
- 27-02-2025PublishedVulnerability first disclosed.
- 15-10-2026Last modifiedVulnerability information updated.
Description
In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).
CVSS metrics
5 scores · 5 sources · 1 version- OSV · Red hatEcosystem advisory · calculated7.0HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:HDiffers
- OSV · UbuntuEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- NVDNIST7.8HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.27%
Chance of exploitation in the next 30 days
Percentile
20%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.27% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.
Ubuntu137 products
- linuxAll versions (No fix recorded) | < 5.4.0-216.236 | < 5.15.0-140.150 | < 6.8.0-78.78
- linux-allwinner-5.19All versions (No fix recorded)
- linux-awsAll versions (No fix recorded) | < 5.4.0-1146.156 | < 5.15.0-1084.91 | < 6.8.0-1035.37
- linux-aws-5.0All versions (No fix recorded)
- linux-aws-5.11All versions (No fix recorded)
Redhat60 products
- bpftool< 0:5.14.0-70.126.1.el9_0 | < 0:4.18.0-305.152.1.el8_4 | < 0:7.4.0-503.34.1.el9_5 | < 0:4.18.0-193.148.1.el8_2 | < 0:7.0.0-284.110.1.el9_2 | < 0:4.18.0-372.142.1.el8_6 | < 0:4.18.0-477.94.1.el8_8 | < 0:4.18.0-553.46.1.el8_10
- bpftool-debuginfo< 0:5.14.0-70.126.1.el9_0 | < 0:4.18.0-305.152.1.el8_4 | < 0:7.4.0-503.34.1.el9_5 | < 0:4.18.0-193.148.1.el8_2 | < 0:7.0.0-284.110.1.el9_2 | < 0:4.18.0-372.142.1.el8_6 | < 0:4.18.0-477.94.1.el8_8 | < 0:4.18.0-553.46.1.el8_10
- kernel< 0:5.14.0-70.126.1.el9_0 | < 0:4.18.0-305.152.1.el8_4 | < 0:5.14.0-503.34.1.el9_5 | < 0:4.18.0-193.148.1.el8_2 | < 0:5.14.0-284.110.1.el9_2 | < 0:4.18.0-372.142.1.el8_6 | < 0:4.18.0-477.94.1.el8_8 | < 0:4.18.0-553.46.1.el8_10
- kernel-64k< 0:5.14.0-503.34.1.el9_5 | < 0:5.14.0-284.110.1.el9_2
- kernel-64k-core< 0:5.14.0-503.34.1.el9_5 | < 0:5.14.0-284.110.1.el9_2
Linux2 products
- linux≥ 5d425c18653731af62831d30a4fa023d532657a9, < 4371ac7b494e933fffee2bd6265d18d73c4f05aa | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < e4fde33107351ec33f1a64188612fbc6ca659284 | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < 88a3e6afaf002250220793df99404977d343db14 | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < 4ff25f0b18d1d0174c105e4620428bcdc1213860 | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < ab90894f33c15b14c1cee6959ab6c8dcb09127f8 | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < 715eb1af64779e1b1aa0a7b2ffb81414d9f708e5 | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < 67b99a2b5811df4294c2ad50f9bff3b6a08bd618 | ≥ 5d425c18653731af62831d30a4fa023d532657a9, < 875d742cf5327c93cba1f11e12b08d3cce7a88d2 | 4.0
- linux_kernel≥ 4.0, < 6.1.129 | ≥ 6.2, < 6.6.79 | ≥ 6.7, < 6.12.16 | ≥ 6.13, < 6.13.4 | 6.14:rc1 | 6.14:rc2
Debian1 product
- linux< 6.1.129-1 | < 6.12.16-1
4 vendors · 200 products · Showing 200 of 221
