Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-21789

LoongArch: csum: Fix OoB access in IP checksum code for negative lengths

Description

In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths Commit 69e3a6aa6be2 ("LoongArch: Add checksum optimization for 64-bit system") would cause an undefined shift and an out-of-bounds read. Commit 8bd795fedb84 ("arm64: csum: Fix OoB access in IP checksum code for negative lengths") fixes the same issue on ARM64.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 69e3a6aa6be21de6aaf38130fad97ecde34a193c to < 964a8895704a22efc06a2a3276b624a5ae985a06affected
  • 69e3a6aa6be21de6aaf38130fad97ecde34a193c to < 9f15a8df542c0f08732a67d1a14ee7c22948fb97affected
  • 69e3a6aa6be21de6aaf38130fad97ecde34a193c to < d6508ffff32b44b6d0de06704034e4eef1c307a7affected
  • 69e3a6aa6be21de6aaf38130fad97ecde34a193c to < 6287f1a8c16138c2ec750953e35039634018c84aaffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.79 to ≤ 6.6.*unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References