7.8

CVE-2025-21914: linux Out-of-bounds Write

CVSS: 7.8v3.1HighModified
AliasesUBUNTU-CVE-2025-21914DEBIAN-CVE-2025-21914
Published 01-04-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-21914 is a high (CVSS 7.8) Out-of-bounds Write vulnerability in linux. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.9% of scored vulnerabilities.

Overall risk
31/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.22%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 61 · Related 58
DLA-4178-1DLA-4193-1DSA-5900-1SUSE-SU-2025:01614-1SUSE-SU-2025:01707-1SUSE-SU-2025:01919-1

Timeline

  1. 01-04-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: slimbus: messaging: Free transaction ID in delayed interrupt scenario In case of interrupt delay for any reason, slim_do_transfer() returns timeout error but the transaction ID (TID) is not freed. This results into invalid memory access inside qcom_slim_ngd_rx_msgq_cb() due to invalid TID. Fix the issue by freeing the TID in slim_do_transfer() before returning timeout error to avoid invalid memory access. Call trace: __memcpy_fromio+0x20/0x190 qcom_slim_ngd_rx_msgq_cb+0x130/0x290 [slim_qcom_ngd_ctrl] vchan_complete+0x2a0/0x4a0 tasklet_action_common+0x274/0x700 tasklet_action+0x28/0x3c _stext+0x188/0x620 run_ksoftirqd+0x34/0x74 smpboot_thread_fn+0x1d8/0x464 kthread+0x178/0x238 ret_from_fork+0x10/0x20 Code: aa0003e8 91000429 f100044a 3940002b (3800150b) ---[ end trace 0fe00bec2b975c99 ]--- Kernel panic - not syncing: Oops: Fatal exception in interrupt.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.22%

Chance of exploitation in the next 30 days

Percentile

12%

Versus all other CVEs

30-day change

0.00 pp

From 0.22% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.22%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu133 products
  • linux< 5.4.0-216.236 | < 5.15.0-140.150 | < 6.8.0-84.84
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.4.0-1146.156 | < 5.15.0-1084.91 | < 6.8.0-1039.41
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < cec8c0ac173fe5321f03fdb1a09a9cb69bc9a9fe | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < a32e5198a9134772eb03f7b72a7849094c55bda9 | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < 09d34c4cbc38485c7514069f25348e439555b282 | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < 18ae4cee05c310c299ba75d7477dcf34be67aa16 | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < faac8e894014e8167471a8e4a5eb35a8fefbb82a | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < 6abf3d8bb51cbaf886c3f08109a0462890b10db6 | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < 0c541c8f6da23e0b92f0a6216d899659a7572074 | ≥ afbdcc7c384b0d446da08b1e0901dc176b41b9e0, < dcb0d43ba8eb9517e70b1a0e4b0ae0ab657a0e5a | 4.16
  • linux_kernel≥ 4.16, < 5.4.291 | ≥ 5.5, < 5.10.235 | ≥ 5.11, < 5.15.179 | ≥ 5.16, < 6.1.131 | ≥ 6.2, < 6.6.83 | ≥ 6.7, < 6.12.19 | ≥ 6.13, < 6.13.7 | 6.14:rc1 | 6.14:rc2 | 6.14:rc3 | 6.14:rc4 | 6.14:rc5
Debian1 product
  • linux< 6.1.133-1 | < 6.12.19-1

3 vendors · 136 products

References

62 links
Show all 62 references