CVE-2025-22001

accel/qaic: Fix integer overflow in qaic_validate_req()

State: Published
Severity: 7.8 High
Published: Apr 3, 2025
Updated: Aug 5, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

accel/qaic: Fix integer overflow in qaic_validate_req()

These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an integer wrapping bug.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-190 Integer Overflow or Wraparound

Affected Products

Product	Versions
LinuxLinux	ff13be8303336ead5621712f2c55012d738878b5 to before 4b2a170c25862ad116bd31be6b9841646b4862e8Affected ff13be8303336ead5621712f2c55012d738878b5 to before b362fc904d264a88b4af20baae9e82491c285e9cAffected ff13be8303336ead5621712f2c55012d738878b5 to before 57fae0c505f49bb1e3d5660cd2cc49697ed85f7cAffected ff13be8303336ead5621712f2c55012d738878b5 to before 67d15c7aa0864dfd82325c7e7e7d8548b5224c7bAffected
LinuxLinux	6.4Affected before 6.4Not affected 6.6.85 through 6.6.Not affected 6.12.21 through 6.12.Not affected 6.13.9 through 6.13.*Not affected 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.