7.6

CVE-2025-21994: linux

CVSS: 7.6v3.1HighModified
AliasesUBUNTU-CVE-2025-21994DEBIAN-CVE-2025-21994
Published 02-04-2025Last modified 05-08-2026
Open JSON

Vulnerability summary

CVE-2025-21994 is a high (CVSS 7.6) vulnerability in linux. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 21.5% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.6/10
010
High · v3.1 (CVE.org)
EPSS score
0.30%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 35 · Related 31
DLA-4193-1DSA-5900-1MGASA-2025-0142MGASA-2025-0146USN-7591-1USN-7591-2

Timeline

  1. 02-04-2025
    PublishedVulnerability first disclosed.
  2. 05-08-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix incorrect validation for num_aces field of smb_acl parse_dcal() validate num_aces to allocate posix_ace_state_array. if (num_aces > ULONG_MAX / sizeof(struct smb_ace *)) It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.30%

Chance of exploitation in the next 30 days

Percentile

22%

Versus all other CVEs

30-day change

+0.01 pp

From 0.30% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu138 products
  • linuxAll versions (No fix recorded) | < 5.15.0-142.152 | < 6.8.0-84.84
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1086.93 | < 6.8.0-1039.41
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Linux2 products
  • linux≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < c3a3484d9d31b27a3db0fab91fcf191132d65236 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 9c4e202abff45f8eac17989e549fc7a75095f675 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < d0f87370622a853b57e851f7d5a5452b72300f19 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < a4cb17797a5d241f1e509cb5b46ed95a80c2f5fd | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < f6a6721802ac2f12f4c1bbe839a4c229b61866f2 | ≥ 0626e6641f6b467447c81dd7678a69c66f7746cf, < 1b8b67f3c5e5169535e26efedd3e422172e2db64 | 5.15
  • linux_kernel≥ 5.15, < 5.15.180 | ≥ 5.16, < 6.1.132 | ≥ 6.2, < 6.6.85 | ≥ 6.7, < 6.12.21 | ≥ 6.13, < 6.13.9 | 6.14:rc1 | 6.14:rc2 | 6.14:rc3 | 6.14:rc4 | 6.14:rc5
Debian1 product
  • linux< 6.1.133-1 | < 6.12.21-1

3 vendors · 141 products

References

42 links
Show all 42 references