5.5

CVE-2025-21964: linux Integer Overflow or Wraparound

CVSS: 5.5v3.1MediumModified
AliasesRHSA-2025:8142UBUNTU-CVE-2025-21964DEBIAN-CVE-2025-21964
Published 01-04-2025Last modified 11-05-2026
Open JSON

Vulnerability summary

CVE-2025-21964 is a medium (CVSS 5.5) Integer Overflow or Wraparound vulnerability in linux. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 9.6% of scored vulnerabilities.

Overall risk
22/100
0100
Low · default modelHow is this calculated?
CVSS score
5.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 48 · Related 43
DLA-4193-1DSA-5900-1MGASA-2025-0142MGASA-2025-0146RHSA-2025:8374SUSE-SU-2025:01600-1

Timeline

  1. 01-04-2025
    PublishedVulnerability first disclosed.
  2. 11-05-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acregmax mount option User-provided mount parameter acregmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

10%

Versus all other CVEs

30-day change

0.00 pp

From 0.20% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.20%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu125 products
  • linux< 5.15.0-142.152 | < 6.8.0-84.84
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-aws< 5.15.0-1086.93 | < 6.8.0-1039.41
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Redhat72 products
  • kernel< 0:5.14.0-570.18.1.el9_6
  • kernel-64k< 0:5.14.0-570.18.1.el9_6
  • kernel-64k-core< 0:5.14.0-570.18.1.el9_6
  • kernel-64k-debug< 0:5.14.0-570.18.1.el9_6
  • kernel-64k-debug-core< 0:5.14.0-570.18.1.el9_6
Linux2 products
  • linux≥ 5780464614f6abe6026f00cf5a0777aa453ba450, < a13351624a6af8d91398860b8c9d4cf6c8e63de5 | ≥ 5780464614f6abe6026f00cf5a0777aa453ba450, < dd190168e60ac15408f074a1fe0ce36aff34027b | ≥ 5780464614f6abe6026f00cf5a0777aa453ba450, < 0252c33cc943e9e48ddfafaa6b1eb72adb68a099 | ≥ 5780464614f6abe6026f00cf5a0777aa453ba450, < 833f2903eb8b70faca7967319e580e9ce69729fc | ≥ 5780464614f6abe6026f00cf5a0777aa453ba450, < 5f500874ab9b3cc8c169c2ab49f00b838520b9c5 | ≥ 5780464614f6abe6026f00cf5a0777aa453ba450, < 7489161b1852390b4413d57f2457cd40b34da6cc | 5.12
  • linux_kernel≥ 5.12, < 5.15.180 | ≥ 5.16, < 6.1.132 | ≥ 6.2, < 6.6.84 | ≥ 6.7, < 6.12.20 | ≥ 6.13, < 6.13.8 | 6.14:rc1 | 6.14:rc2 | 6.14:rc3 | 6.14:rc4 | 6.14:rc5 | 6.14:rc6
Debian1 product
  • linux< 6.1.133-1 | < 6.12.20-1

4 vendors · 200 products · Showing 200 of 219. Use Open JSON for the complete list.

References

49 links
Show all 49 references