Vulnerability · Published Apr 1, 2025 · Assigned by Linux

CVE-2025-21963cifs: Fix integer overflow while processing acdirmax mount option

Medium 5.5

In plain English

A medium-severity integer overflow in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)5.5Medium
Exploit odds (30 days)0.2%top 89.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix integer overflow while processing acdirmax mount option User-provided mount parameter acdirmax of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow. Found by Linux Verification Center (linuxtesting.org) with SVACE.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9kernel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug-devel-matched5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-debug-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-devel-matched5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-64k-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-abi-stablelists5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-cross-headers5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-devel-matched5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-debug-uki-virt5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-devel-matched5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-doc5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-headers5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-debug5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-debug-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-debug-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-debug-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-debug-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-debug-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-64k-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug-kvm5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-debug-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-kvm5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-rt-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-tools5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-tools-libs5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-tools-libs-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-uki-virt5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-uki-virt-addons5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump-devel5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump-devel-matched5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump-modules5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump-modules-core5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9kernel-zfcpdump-modules-extra5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9libperf5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9perf5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9python3-perf5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9rtla5.14.0-570.22.1.el9_6ALSA-2025:9080
AlmaLinux:9rv5.14.0-570.22.1.el9_6ALSA-2025:9080
Debian:12linux6.1.133-1DEBIAN-CVE-2025-21963
Debian:13linux6.12.20-1DEBIAN-CVE-2025-21963
Debian:14linux6.12.20-1DEBIAN-CVE-2025-21963
Rocky Linux:10kernel0:6.12.0-55.17.1.el10_0RLSA-2025:9079
Ubuntu:22.04:LTSlinux5.15.0-142.152USN-7591-1
Ubuntu:22.04:LTSlinux5.15.0-142.152UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux6.8.0-84.84UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93USN-7591-4
Ubuntu:22.04:LTSlinux-aws5.15.0-1086.93UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-aws6.8.0-1039.41UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1039.41~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100USN-7597-1
Ubuntu:22.04:LTSlinux-azure5.15.0-1091.100UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-azure6.8.0-1038.44UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-azure-6.116.11.0-1018.18~24.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1036.42~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-fde5.15.0-1091.100.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-azure-nvidia6.8.0-1025.27UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94USN-7591-1
Ubuntu:22.04:LTSlinux-gcp5.15.0-1085.94UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-gcp6.8.0-1040.42UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-gcp-6.116.11.0-1016.16~24.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1040.42~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gke5.15.0-1083.89USN-7591-1
Ubuntu:24.04:LTSlinux-gke6.8.0-1036.40UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76USN-7591-1
Ubuntu:22.04:LTSlinux-gkeop5.15.0-1068.76UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1023.25UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-hwe-6.116.11.0-28.28~24.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-85.85~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-ibm5.15.0-1078.81USN-7591-1
Ubuntu:24.04:LTSlinux-ibm6.8.0-1037.37UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1037.37~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-intelno fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-intel-iotg5.15.0-1081.87USN-7591-5
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-kvm5.15.0-1082.87USN-7591-1
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-lowlatency5.15.0-142.152USN-7591-1
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-84.84.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.116.11.0-1015.16~24.04.2UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-84.84.1~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia5.15.0-1080.81UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1039.42UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-nvidia-6.116.11.0-1012.12UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1039.42~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1039.42.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra5.15.0-1039.39UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1010.10UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28USN-7591-1
Ubuntu:22.04:LTSlinux-nvidia-tegra-igx5.15.0-1028.28UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-oem-6.116.11.0-1024.24UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oracle5.15.0-1083.89USN-7591-1
Ubuntu:24.04:LTSlinux-oracle6.8.0-1037.38UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1037.38~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-raspi5.15.0-1080.83USN-7591-6
Ubuntu:24.04:LTSlinux-raspi6.8.0-1039.43UBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-84.84~22.04.1UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2025-21963
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1018.19UBUNTU-CVE-2025-21963
Ubuntu:22.04:LTSlinux-xilinx-zynqmp5.15.0-1050.54UBUNTU-CVE-2025-21963

Affected products (as reported)

VendorProductVersions
Linux Linux 4c9f948142a550af416a2bfb5e56d29ce29e92cf – before 0c26edf477e093cefc41637f5bccc102e1a773994c9f948142a550af416a2bfb5e56d29ce29e92cf – before 39d086bb3558da9640ef335f97453e01d32578a14c9f948142a550af416a2bfb5e56d29ce29e92cf – before 9e438d0410a4002d24f420f2c28897ba2dc0af644c9f948142a550af416a2bfb5e56d29ce29e92cf – before 2809a79bc64964ce02e0c5f2d6bd39b9d09bdb3c4c9f948142a550af416a2bfb5e56d29ce29e92cf – before 6124cbf73e3dea7591857dd63b8ccece28952afd4c9f948142a550af416a2bfb5e56d29ce29e92cf – before 5b29891f91dfb8758baf1e2217bef4b16b2b165b
Linux Linux 5.12

Weakness: CWE-190 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References