Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21785

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 5d425c18653731af62831d30a4fa023d532657a9 to < 4371ac7b494e933fffee2bd6265d18d73c4f05aaaffected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < e4fde33107351ec33f1a64188612fbc6ca659284affected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < 88a3e6afaf002250220793df99404977d343db14affected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < 4ff25f0b18d1d0174c105e4620428bcdc1213860affected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < ab90894f33c15b14c1cee6959ab6c8dcb09127f8affected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < 715eb1af64779e1b1aa0a7b2ffb81414d9f708e5affected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < 67b99a2b5811df4294c2ad50f9bff3b6a08bd618affected
  • 5d425c18653731af62831d30a4fa023d532657a9 to < 875d742cf5327c93cba1f11e12b08d3cce7a88d2affected

Linux Linux

Default version status: affected

  • 4.0affected
  • 0 to < 4.0unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.79 to ≤ 6.6.*unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References