CVE-2025-21966

dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

State: Published
Severity: 7.8 High
Published: Apr 1, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

Fix memory corruption due to incorrect parameter being passed to bio_init

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	CISA-ADP

Weaknesses

CWE-787 Out-of-bounds Write

Affected Products

Product	Versions
LinuxLinux	1d9a943898533e83f20370c0e1448d606627522e to before 818330f756f3800c37d738bd36bce60eac949938Affected 1d9a943898533e83f20370c0e1448d606627522e to before 5a87e46da2418c57b445371f5ca0958d5779ba5fAffected 1d9a943898533e83f20370c0e1448d606627522e to before da070843e153471be4297a12fdaa64023276f40eAffected 1d9a943898533e83f20370c0e1448d606627522e to before 57e9417f69839cb10f7ffca684c38acd28ceb57bAffected
LinuxLinux	6.5Affected before 6.5Not affected 6.6.84 through 6.6.Not affected 6.12.20 through 6.12.Not affected 6.13.8 through 6.13.*Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.