Vulnerability · Published Apr 1, 2025 · Assigned by Linux

CVE-2025-21962cifs: Fix integer overflow while processing closetimeo mount option

Medium 5.5

In plain English

A medium-severity integer overflow in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 89.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing closetimeo mount option User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9kernel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-devel-matched5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-64k-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-abi-stablelists5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-cross-headers5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-devel-matched5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-debug-uki-virt5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-devel-matched5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-doc5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-headers5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-debug5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug-kvm5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-kvm5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-rt-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-tools5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-tools-libs5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-tools-libs-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-uki-virt5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-uki-virt-addons5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump-devel5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump-modules5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9libperf5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9perf5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9python3-perf5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9rtla5.14.0-570.32.1.el9_6ALSA-2025:12746
AlmaLinux:9rv5.14.0-570.32.1.el9_6ALSA-2025:12746
Debian:12linux6.1.133-1DEBIAN-CVE-2025-21962
Debian:13linux6.12.20-1DEBIAN-CVE-2025-21962
Debian:14linux6.12.20-1DEBIAN-CVE-2025-21962
Rocky Linux:10kernel0:6.12.0-55.17.1.el10_0RLSA-2025:9079
Rocky Linux:9kernel0:5.14.0-570.32.1.el9_6RLSA-2025:12746
Ubuntu:22.04:LTSlinux5.15.0-142.152UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux5.15.0-142.152USN-7591-1
Ubuntu:24.04:LTSlinux6.8.0-84.84UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93USN-7591-4
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100USN-7597-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1091.100.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94USN-7591-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89USN-7591-1
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76USN-7591-1
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81USN-7591-1
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87USN-7591-5
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87USN-7591-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152USN-7591-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81USN-7591-1
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1010.10UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89USN-7591-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83USN-7591-6
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43UBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-84.84~22.04.1UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21962
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-21962
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2025-21962

Affected products (as reported)

VendorProductVersions
Linux Linux 1d9cad9c5873097ea141ffc5da1e7921ce765aa8 – before 513f6cf2e906a504b7ab0b62b2eea993a6f645585efdd9122eff772eae2feae9f0fc0ec02d4846a3 – before 9968fcf02cf6b0f78fbacf3f63e782162603855a5efdd9122eff772eae2feae9f0fc0ec02d4846a3 – before 6c13fcb7cf59ae65940da1dfea80144e42921e535efdd9122eff772eae2feae9f0fc0ec02d4846a3 – before 1c46673be93dd2954f44fe370fb4f2b8e62142245efdd9122eff772eae2feae9f0fc0ec02d4846a3 – before b24edd5c191c2689c59d0509f0903f9487eb63175efdd9122eff772eae2feae9f0fc0ec02d4846a3 – before d5a30fddfe2f2e540f6c43b59cf701809995faef5.15.107 – before 5.15.180
Linux Linux 6.0

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References