CVE-2025-21785: linux kernel Memory Corruption — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level).

Is your site exposed to CVE-2025-21785?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-787 Out-of-bounds Write

Affected Products

Vendor	Product	Versions
linux	linux_kernel	4.0 — 6.1.129
linux	linux_kernel	6.2 — 6.6.79
linux	linux_kernel	6.7 — 6.12.16
linux	linux_kernel	6.13 — 6.13.4
linux	linux_kernel	All
linux	linux_kernel	All

References

Advisories & Patches

https://git.kernel.org/stable/c/4ff25f0b18d1d0174c105e4620428bcdc1213860 https://git.kernel.org/stable/c/67b99a2b5811df4294c2ad50f9bff3b6a08bd618 https://git.kernel.org/stable/c/715eb1af64779e1b1aa0a7b2ffb81414d9f708e5 https://git.kernel.org/stable/c/875d742cf5327c93cba1f11e12b08d3cce7a88d2 https://git.kernel.org/stable/c/ab90894f33c15b14c1cee6959ab6c8dcb09127f8

Other References

https://git.kernel.org/stable/c/4371ac7b494e933fffee2bd6265d18d73c4f05aa https://git.kernel.org/stable/c/88a3e6afaf002250220793df99404977d343db14 https://git.kernel.org/stable/c/e4fde33107351ec33f1a64188612fbc6ca659284 https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html

Frequently Asked Questions

What is CVE-2025-21785? +

In the Linux kernel, the following vulnerability has been resolved: arm64: cacheinfo: Avoid out-of-bounds write to cacheinfo array The loop that detects/populates cache information already has a bounds check on the array size but does not account for cache levels with separate data/instructions cache. Fix this by incrementing the index for any populated leaf (instead of any populated level). It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2025-21785? +

CVE-2025-21785 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching.

What products are affected by CVE-2025-21785? +

CVE-2025-21785 affects products from linux, specifically: linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-21785? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-8358

LibreOffice Calc can import tracked changes from a spreadsheet document. A heap buffer overflow existed when a document reused the …

CVE-2026-8356

LibreOffice can import presentations in the legacy binary PPT format. A stack buffer overflow existed when importing a colour-replacement record. …

CVE-2026-6040

A heap use-after-free existed when importing the blank-width characters of an ODF number format. A position value read from the …

CVE-2026-6039

LibreOffice can import drawings in the DXF format used by CAD software. A heap buffer overflow existed when importing a …

CVE-2026-15422

The illumos SCTP inbound path performs association lookup for INIT ACK chunks without adequately validating the address parameters carried in …

CVE-2026-15997

Out-of-bounds write vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on ARM allows Overflow Buffers. This vulnerability is …

CVE-2025-21785