CVE-2025-21964

cifs: Fix integer overflow while processing acregmax mount option

Medium · published April 1, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
9.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix integer overflow while processing acregmax mount option

User-provided mount parameter acregmax of type u32 is intended to have

an upper limit, but before it is validated, the value is converted from

seconds to jiffies which can lead to an integer overflow.

Found by Linux Verification Center (linuxtesting.org) with SVACE.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00203 · 9.7th percentile
Published
2025-04-01T15:47Z
EPSS history
Timeline
  • 01 APR 15:47Z
    cifs: Fix integer overflow while processing acregmax mount option
    cvelistv5