Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-22001

accel/qaic: Fix integer overflow in qaic_validate_req()

Description

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaic_validate_req() These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an integer wrapping bug.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ff13be8303336ead5621712f2c55012d738878b5 to < 4b2a170c25862ad116bd31be6b9841646b4862e8affected
  • ff13be8303336ead5621712f2c55012d738878b5 to < b362fc904d264a88b4af20baae9e82491c285e9caffected
  • ff13be8303336ead5621712f2c55012d738878b5 to < 57fae0c505f49bb1e3d5660cd2cc49697ed85f7caffected
  • ff13be8303336ead5621712f2c55012d738878b5 to < 67d15c7aa0864dfd82325c7e7e7d8548b5224c7baffected

Linux Linux

Default version status: affected

  • 6.4affected
  • 0 to < 6.4unaffected
  • 6.6.85 to ≤ 6.6.*unaffected
  • 6.12.21 to ≤ 6.12.*unaffected
  • 6.13.9 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References