In the Linux kernel, the following vulnerability has been resolved:
vfio/platform: check the bounds of read/write syscalls
count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.
[
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1485932496a1b025235af8aa1e21988d6b7ccd54",
"digest": {
"length": 927.0,
"function_hash": "199626699772310660136025221771536130887"
},
"id": "CVE-2025-21687-03f8d6f8",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a20fcaa230f7472456d12cf761ed13938e320ac3",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-04f113f1",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f21636f24b6786c8b13f1af4319fa75ffcf17f38",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-11ba5695",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d19a8650fd3d7aed8d1af1d9a77f979a8430eba1",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-12cc40e1",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9377cdc118cf327248f1a9dde7b87de067681dc9",
"digest": {
"length": 927.0,
"function_hash": "199626699772310660136025221771536130887"
},
"id": "CVE-2025-21687-1b3e8da7",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92340e6c5122d823ad064984ef7513eba9204048",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-2879fa24",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d19a8650fd3d7aed8d1af1d9a77f979a8430eba1",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-376bce19",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1485932496a1b025235af8aa1e21988d6b7ccd54",
"digest": {
"length": 933.0,
"function_hash": "246995507394734997888516598869897344106"
},
"id": "CVE-2025-21687-3e5d4f6e",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@665cfd1083866f87301bbd232cb8ba48dcf4acce",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-3ea326cb",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92340e6c5122d823ad064984ef7513eba9204048",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-40c8cffd",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f65ce06387f8c1fb54bd59e18a8428248ec68eaf",
"digest": {
"length": 933.0,
"function_hash": "246995507394734997888516598869897344106"
},
"id": "CVE-2025-21687-50d96925",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c981c32c38af80737a2fedc16e270546d139ccdd",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-561ec168",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed81d82bb6e9df3a137f2c343ed689e6c68268ef",
"digest": {
"line_hashes": [
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"134070386669159691325897315884145452376",
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"134070386669159691325897315884145452376"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-5c154000",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed81d82bb6e9df3a137f2c343ed689e6c68268ef",
"digest": {
"length": 927.0,
"function_hash": "199626699772310660136025221771536130887"
},
"id": "CVE-2025-21687-624e986e",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bcb8a5b70b80143db9bf12dfa7d53636f824d53",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-6445bc16",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a20fcaa230f7472456d12cf761ed13938e320ac3",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-646ea009",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f21636f24b6786c8b13f1af4319fa75ffcf17f38",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-703f8757",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ed81d82bb6e9df3a137f2c343ed689e6c68268ef",
"digest": {
"length": 933.0,
"function_hash": "246995507394734997888516598869897344106"
},
"id": "CVE-2025-21687-772ad3c6",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c981c32c38af80737a2fedc16e270546d139ccdd",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-80708f9d",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f65ce06387f8c1fb54bd59e18a8428248ec68eaf",
"digest": {
"line_hashes": [
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"134070386669159691325897315884145452376",
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"134070386669159691325897315884145452376"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-898a34cd",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@92340e6c5122d823ad064984ef7513eba9204048",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-962b9309",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@665cfd1083866f87301bbd232cb8ba48dcf4acce",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-a6337322",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce9ff21ea89d191e477a02ad7eabf4f996b80a69",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-ab9477fc",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce9ff21ea89d191e477a02ad7eabf4f996b80a69",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-ae9b4f61",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f65ce06387f8c1fb54bd59e18a8428248ec68eaf",
"digest": {
"length": 927.0,
"function_hash": "199626699772310660136025221771536130887"
},
"id": "CVE-2025-21687-af0dffed",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@ce9ff21ea89d191e477a02ad7eabf4f996b80a69",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-b1197cc1",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f21636f24b6786c8b13f1af4319fa75ffcf17f38",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"88976516770443246642424440412396157882",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"88976516770443246642424440412396157882"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-c17bd88c",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9377cdc118cf327248f1a9dde7b87de067681dc9",
"digest": {
"length": 933.0,
"function_hash": "246995507394734997888516598869897344106"
},
"id": "CVE-2025-21687-c2923a62",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@9377cdc118cf327248f1a9dde7b87de067681dc9",
"digest": {
"line_hashes": [
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"18015291763268396259086439173561604454",
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"18015291763268396259086439173561604454"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-d10f0de2",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bcb8a5b70b80143db9bf12dfa7d53636f824d53",
"digest": {
"length": 824.0,
"function_hash": "62186949866509142801442954833111859313"
},
"id": "CVE-2025-21687-d2e4e80e",
"signature_version": "v1",
"target": {
"function": "vfio_platform_write_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@c981c32c38af80737a2fedc16e270546d139ccdd",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-d5f23e3b",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6bcb8a5b70b80143db9bf12dfa7d53636f824d53",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-dc012a13",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@665cfd1083866f87301bbd232cb8ba48dcf4acce",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-dc150b86",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1485932496a1b025235af8aa1e21988d6b7ccd54",
"digest": {
"line_hashes": [
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"134070386669159691325897315884145452376",
"194165884347743113812574738349200217640",
"304944647345091914005846757694798164650",
"134070386669159691325897315884145452376"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-f0c365e4",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Line",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a20fcaa230f7472456d12cf761ed13938e320ac3",
"digest": {
"line_hashes": [
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274",
"45392541667672534817158058755779063028",
"339772964569699816072141007815330566437",
"135779448876584715967967264046701657274"
],
"threshold": 0.9
},
"id": "CVE-2025-21687-f44a2a10",
"signature_version": "v1",
"target": {
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
},
{
"signature_type": "Function",
"deprecated": false,
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@d19a8650fd3d7aed8d1af1d9a77f979a8430eba1",
"digest": {
"length": 818.0,
"function_hash": "184695557517920404731735389654470068939"
},
"id": "CVE-2025-21687-f5296d95",
"signature_version": "v1",
"target": {
"function": "vfio_platform_read_mmio",
"file": "drivers/vfio/platform/vfio_platform_common.c"
}
}
]