CVE-2025-21785

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

State: Published
Severity: 7.8 High
Published: Feb 27, 2025
Updated: Oct 15, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array

The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	5d425c18653731af62831d30a4fa023d532657a9 to before 4371ac7b494e933fffee2bd6265d18d73c4f05aaAffected 5d425c18653731af62831d30a4fa023d532657a9 to before e4fde33107351ec33f1a64188612fbc6ca659284Affected 5d425c18653731af62831d30a4fa023d532657a9 to before 88a3e6afaf002250220793df99404977d343db14Affected 5d425c18653731af62831d30a4fa023d532657a9 to before 4ff25f0b18d1d0174c105e4620428bcdc1213860Affected 5d425c18653731af62831d30a4fa023d532657a9 to before ab90894f33c15b14c1cee6959ab6c8dcb09127f8Affected 5d425c18653731af62831d30a4fa023d532657a9 to before 715eb1af64779e1b1aa0a7b2ffb81414d9f708e5Affected 5d425c18653731af62831d30a4fa023d532657a9 to before 67b99a2b5811df4294c2ad50f9bff3b6a08bd618Affected 5d425c18653731af62831d30a4fa023d532657a9 to before 875d742cf5327c93cba1f11e12b08d3cce7a88d2Affected
LinuxLinux	4.0Affected before 4.0Not affected 5.4.291 through 5.4.Not affected 5.10.235 through 5.10.Not affected 5.15.179 through 5.15.Not affected 6.1.129 through 6.1.Not affected 6.6.79 through 6.6.Not affected 6.12.16 through 6.12.Not affected 6.13.4 through 6.13.*Not affected 6.14 and laterNot affected

Product

Versions

LinuxLinux

5d425c18653731af62831d30a4fa023d532657a9 to before 4371ac7b494e933fffee2bd6265d18d73c4f05aaAffected
5d425c18653731af62831d30a4fa023d532657a9 to before e4fde33107351ec33f1a64188612fbc6ca659284Affected
5d425c18653731af62831d30a4fa023d532657a9 to before 88a3e6afaf002250220793df99404977d343db14Affected
5d425c18653731af62831d30a4fa023d532657a9 to before 4ff25f0b18d1d0174c105e4620428bcdc1213860Affected
5d425c18653731af62831d30a4fa023d532657a9 to before ab90894f33c15b14c1cee6959ab6c8dcb09127f8Affected
5d425c18653731af62831d30a4fa023d532657a9 to before 715eb1af64779e1b1aa0a7b2ffb81414d9f708e5Affected
5d425c18653731af62831d30a4fa023d532657a9 to before 67b99a2b5811df4294c2ad50f9bff3b6a08bd618Affected
5d425c18653731af62831d30a4fa023d532657a9 to before 875d742cf5327c93cba1f11e12b08d3cce7a88d2Affected

LinuxLinux

4.0Affected
before 4.0Not affected
5.4.291 through 5.4.*Not affected
5.10.235 through 5.10.*Not affected
5.15.179 through 5.15.*Not affected
6.1.129 through 6.1.*Not affected
6.6.79 through 6.6.*Not affected
6.12.16 through 6.12.*Not affected
6.13.4 through 6.13.*Not affected
6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.