CVE-2025-22001
- Source
- https://cve.org/CVERecord?id=CVE-2025-22001
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-22001.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2025-22001
- Downstream
- Related
- Published
- 2025-04-03T07:19:04Z
- Modified
- 2026-08-12T03:30:19Z
- Severity
-
- 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- accel/qaic: Fix integer overflow in qaic_validate_req()
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Fix integer overflow in qaic_validate_req()
These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an integer wrapping bug.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22001.json" }- References
-
- https://git.kernel.org/stable/c/4b2a170c25862ad116bd31be6b9841646b4862e8
- https://git.kernel.org/stable/c/57fae0c505f49bb1e3d5660cd2cc49697ed85f7c
- https://git.kernel.org/stable/c/67d15c7aa0864dfd82325c7e7e7d8548b5224c7b
- https://git.kernel.org/stable/c/b362fc904d264a88b4af20baae9e82491c285e9c
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22001.json
- https://nvd.nist.gov/vuln/detail/CVE-2025-22001
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedff13be8303336ead5621712f2c55012d738878b5Fixed4b2a170c25862ad116bd31be6b9841646b4862e8Fixedb362fc904d264a88b4af20baae9e82491c285e9cFixed57fae0c505f49bb1e3d5660cd2cc49697ed85f7cFixed67d15c7aa0864dfd82325c7e7e7d8548b5224c7b