Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

redhat логотип

CVE-2025-21966

Опубликовано: 01 апр. 2025
Источник: redhat
CVSS3: 7

Описание

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

A flaw was found in the Linux kernel's dm-flakey driver. An incorrect parameter is passed during block input/output (I/O) request initialization when using the optional corrupt_bio_byte testing feature. A local user with administrative privileges could trigger this flaw when configuring storage device tables, causing memory corruption and a Denial of Service (DoS) through a system crash.

Отчет

This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because exploitation requires elevated privileges (such as root or CAP_SYS_ADMIN) to configure device-mapper tables, restricting the attack vector to administrative users. The issue exists within dm-flakey, a non-default testing target utilized primarily for simulating storage hardware errors during diagnostic or filesystem testing. Because the affected corrupt_bio_byte parameter is an optional setting rarely deployed in standard production environments, the overall operational risk remains low.

Затронутые пакеты

ПлатформаПакетСостояниеРекомендацияРелиз
Red Hat Enterprise Linux 6kernelOut of support scope
Red Hat Enterprise Linux 7kernelOut of support scope
Red Hat Enterprise Linux 7kernel-rtOut of support scope
Red Hat Enterprise Linux 8kernelNot affected
Red Hat Enterprise Linux 8kernel-rtNot affected
Red Hat Enterprise Linux 10kernelFixedRHSA-2025:795619.05.2025
Red Hat Enterprise Linux 9kernelFixedRHSA-2025:790319.05.2025
Red Hat Enterprise Linux 9kernelFixedRHSA-2025:790319.05.2025

Показывать по

Дополнительная информация

Статус:

Moderate
Дефект:
CWE-119
https://bugzilla.redhat.com/show_bug.cgi?id=2356605kernel: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

7 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
ubuntu
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

CVSS3: 7.8
nvd
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

CVSS3: 6.7
msrc
больше 1 года назад

dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature

CVSS3: 7.8
debian
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: d ...

CVSS3: 7.8
github
больше 1 года назад

In the Linux kernel, the following vulnerability has been resolved: dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature Fix memory corruption due to incorrect parameter being passed to bio_init

7 High

CVSS3