Riskcovery

CVE-2025-21962

cifs: Fix integer overflow while processing closetimeo mount option

State
Published
Severity
5.5 Medium
Published
Apr 1, 2025
Updated
May 23, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix integer overflow while processing closetimeo mount option

User-provided mount parameter closetimeo of type u32 is intended to have an upper limit, but before it is validated, the value is converted from seconds to jiffies which can lead to an integer overflow.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCISA-ADP

Weaknesses

  • CWE-190 Integer Overflow or Wraparound

Affected Products

ProductVersions
LinuxLinux
  • 1d9cad9c5873097ea141ffc5da1e7921ce765aa8 to before 513f6cf2e906a504b7ab0b62b2eea993a6f64558Affected
  • 5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to before 9968fcf02cf6b0f78fbacf3f63e782162603855aAffected
  • 5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to before 6c13fcb7cf59ae65940da1dfea80144e42921e53Affected
  • 5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to before 1c46673be93dd2954f44fe370fb4f2b8e6214224Affected
  • 5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to before b24edd5c191c2689c59d0509f0903f9487eb6317Affected
  • 5efdd9122eff772eae2feae9f0fc0ec02d4846a3 to before d5a30fddfe2f2e540f6c43b59cf701809995faefAffected
  • 5.15.107 to before 5.15.180Affected
LinuxLinux
  • 6.0Affected
  • before 6.0Not affected
  • 5.15.180 through 5.15.*Not affected
  • 6.1.132 through 6.1.*Not affected
  • 6.6.84 through 6.6.*Not affected
  • 6.12.20 through 6.12.*Not affected
  • 6.13.8 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.