CVE-2025-22001

Description

In the Linux kernel, the following vulnerability has been resolved: accel/qaic: Fix integer overflow in qaic_validate_req() These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an integer wrapping bug.

Reserved 2024-12-29 | Published 2025-04-03 | Updated 2025-05-04 | Assigner Linux

Product status

Default status
unaffected

ff13be8303336ead5621712f2c55012d738878b5 before 4b2a170c25862ad116bd31be6b9841646b4862e8
affected

ff13be8303336ead5621712f2c55012d738878b5 before b362fc904d264a88b4af20baae9e82491c285e9c
affected

ff13be8303336ead5621712f2c55012d738878b5 before 57fae0c505f49bb1e3d5660cd2cc49697ed85f7c
affected

ff13be8303336ead5621712f2c55012d738878b5 before 67d15c7aa0864dfd82325c7e7e7d8548b5224c7b
affected

Default status
affected

6.4
affected

Any version before 6.4
unaffected

6.6.85
unaffected

6.12.21
unaffected

6.13.9
unaffected

6.14
unaffected

References

git.kernel.org/...c/4b2a170c25862ad116bd31be6b9841646b4862e8

git.kernel.org/...c/b362fc904d264a88b4af20baae9e82491c285e9c

git.kernel.org/...c/57fae0c505f49bb1e3d5660cd2cc49697ed85f7c

git.kernel.org/...c/67d15c7aa0864dfd82325c7e7e7d8548b5224c7b

cve.org (CVE-2025-22001)

nvd.nist.gov (CVE-2025-22001)

Download JSON