Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2025-21988

fs/netfs/read_collect: add to next->prev_donated

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front").

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ee4cdf7ba857a894ad1650d6ab77669cbbfa329e to < 62b9ad7e52d4777f7e775ee1f0ad2452f6041024affected
  • ee4cdf7ba857a894ad1650d6ab77669cbbfa329e to < e25cec3b76aba47a49138d2162fc809c6cd49c9eaffected
  • ee4cdf7ba857a894ad1650d6ab77669cbbfa329e to < e2d46f2ec332533816417b60933954173f602121affected

Linux Linux

Default version status: affected

  • 6.12affected
  • 0 to < 6.12unaffected
  • 6.12.20 to ≤ 6.12.*unaffected
  • 6.13.8 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References