Description

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).

INFO

Published Date :

2025-02-27T02:18:25.938Z

Last Modified :

2025-11-03T20:59:30.431Z

Source :

Linux
AFFECTED PRODUCTS

The following products are affected by CVE-2025-21785 vulnerability.

Vendors Products
Linux
  • Linux Kernel
Redhat
  • Enterprise Linux
  • Rhel Aus
  • Rhel E4s
  • Rhel Eus
  • Rhel Tus
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-21785.

URL Resource
https://git.kernel.org/stable/c/4371ac7b494e933fffee2bd6265d18d73c4f05aa cve-icon cve-icon
https://git.kernel.org/stable/c/4ff25f0b18d1d0174c105e4620428bcdc1213860 cve-icon cve-icon
https://git.kernel.org/stable/c/67b99a2b5811df4294c2ad50f9bff3b6a08bd618 cve-icon cve-icon
https://git.kernel.org/stable/c/715eb1af64779e1b1aa0a7b2ffb81414d9f708e5 cve-icon cve-icon
https://git.kernel.org/stable/c/875d742cf5327c93cba1f11e12b08d3cce7a88d2 cve-icon cve-icon
https://git.kernel.org/stable/c/88a3e6afaf002250220793df99404977d343db14 cve-icon cve-icon
https://git.kernel.org/stable/c/ab90894f33c15b14c1cee6959ab6c8dcb09127f8 cve-icon cve-icon
https://git.kernel.org/stable/c/e4fde33107351ec33f1a64188612fbc6ca659284 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025022608-CVE-2025-21785-184c@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-21785 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-21785 cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact