Riskcovery

CVE-2025-22117

ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()

State
Published
Severity
8.7 High
Published
Apr 16, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw()

Fix using the untrusted value of proto->raw.pkt_len in function ice_vc_fdir_parse_raw() by verifying if it does not exceed the VIRTCHNL_MAX_SIZE_RAW_PACKET value.

Scores

CVSSScoreVectorSource
3.18.7 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 99f419df8a5c5e1a58822203989f77712d01d410 to before 363377af2c9e874fbba3a199408f8ec7b37906f7Affected
  • 99f419df8a5c5e1a58822203989f77712d01d410 to before 362f704ba73a359db9cded567e891d9a8f081875Affected
  • 99f419df8a5c5e1a58822203989f77712d01d410 to before 1388dd564183a5a18ec4a966748037736b5653c5Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.80 through 6.12.*Not affected
  • 6.14.2 through 6.14.*Not affected
  • 6.15 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.