CVE-2025-21736 — Integer Overflow or Wraparound in Linux

CWE-190 — Integer Overflow or Wraparound90 documents7 sources
Severity
5.5MEDIUMNVD
OSV8.8OSV7.8OSV7.1OSV5.9
EPSS
0.0%
top 96.13%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
LinuxLinux KernelDebian Linux+5 more
Timeline
PublishedFeb 27
Latest updateSep 3

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix possible int overflows in nilfs_fiemap() Since nilfs_bmap_lookup_contig() in nilfs_fiemap() calculates its result by being prepared to go through potentially maxblocks == INT_MAX blocks, the value in n may experience an overflow caused by left shift of blkbits. While it is extremely unlikely to occur, play it safe and cast right hand expression to wider type to mitigate the issue. Found by Linux Verification Cent…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages10 packages

▶NVDlinux/linux_kernel2.6.38 — 6.1.129+3
▶Debianlinux/linux_kernel< 5.10.237-1+3
▶Ubuntulinux/linux_kernel< 5.4.0-216.236+2

Patches

Patch: git.kernel.org ↗Patch: git.kernel.org ↗Patch: git.kernel.org ↗

🔴Vulnerability Details

44
OSV
linux-azure, linux-azure-6.8, linux-azure-nvidia vulnerabilities↗2025-09-03
▶
OSV
linux-raspi vulnerabilities↗2025-07-24
▶
OSV
linux-raspi-realtime vulnerabilities↗2025-07-24
▶
OSV
linux-gcp, linux-gcp-6.8 vulnerabilities↗2025-07-22
▶
OSV
linux-aws-6.8, linux-gke, linux-gkeop, linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency, linux-oracle, linux-oracle-6.8 vulnerabilities↗2025-07-22
▶

📋Vendor Advisories

45
Ubuntu
Linux kernel (Azure) vulnerabilities↗2025-09-03
▶
Ubuntu
Linux kernel (Raspberry Pi Real-time) vulnerabilities↗2025-07-24
▶
Ubuntu
Linux kernel (Raspberry Pi) vulnerabilities↗2025-07-24
▶
Ubuntu
Linux kernel (GCP) vulnerabilities↗2025-07-22
▶
Ubuntu
Linux kernel vulnerabilities↗2025-07-22
▶
CVE-2025-21736 — Integer Overflow or Wraparound | cvebase