Critical severity9.8NVD Advisory· Published Feb 27, 2025· Updated Jul 30, 2026

CVE-2025-21748

Description

In the Linux kernel, the following vulnerability has been resolved:

ksmbd: fix integer overflows on 32 bit systems

On 32bit systems the addition operations in ipc_msg_alloc() can potentially overflow leading to memory corruption. Add bounds checking using KSMBD_IPC_MAX_PAYLOAD to avoid overflow.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Linux/Kernel3 versions
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15,<6.1.129
- (no CPE)
- (no CPE)range: 5.15
osv-coords2 versions
pkg:deb/ubuntu/[email protected]?arch=source&distro=oracular pkg:linux/kernel
< 6.11.0-1014.15+ 1 more
- (no CPE)range: < 6.11.0-1014.15
- (no CPE)range: >= 5.15.0, < 5.15.179

Patches

Vulnerability mechanics

References

git.kernel.org/stable/c/760568c1f62ea874e8fb492f9cfa4f47b4b8391envdPatch
git.kernel.org/stable/c/82f59d64e6297f270311b16b5dcf65be406d1ea3nvdPatch
git.kernel.org/stable/c/aab98e2dbd648510f8f51b83fbf4721206ccae45nvdPatch
git.kernel.org/stable/c/b4b902737746c490258de5cb55cab39e79927a67nvdPatch
git.kernel.org/stable/c/ecb9947fa7c99a77b04d43404c6988a0d326e4a0nvdPatch
git.kernel.org/stable/c/f3b9fb2764591d792d160f375851013665a9e820nvd
lists.debian.org/debian-lts-announce/2025/03/msg00028.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000