CVE-2025-21813Off-by-one Error in Linux

Severity
5.5MEDIUMNVD
EPSS
0.0%
top 94.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 27
Latest updateMay 7

Description

In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However since the recently added commit b729cc1ec21a ("timers/migration: Fix another race between hotplug and idle entry/exit") this check is not valid anymore because the old root is pre-accounted as a child

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages4 packages

NVDlinux/linux_kernel6.12.116.12.14+3
Debianlinux/linux_kernel< 6.12.15-1+1
CVEListV5linux/linux12ead225b7996252a8bc1a49b03aad57c0794880c6dd70e5b465a2b77c7a7c3d868736d302e29aec+3
debiandebian/linux< linux 6.12.15-1 (forky)

Patches

🔴Vulnerability Details

6
OSV
linux-azure, linux-azure-6.11 vulnerabilities2025-05-07
OSV
linux-realtime vulnerability2025-05-07
OSV
linux, linux-aws, linux-gcp, linux-gcp-6.11, linux-hwe-6.11, linux-lowlatency, linux-lowlatency-hwe-6.11, linux-oracle, linux-raspi vulnerability2025-05-06
OSV
linux-oem-6.11 vulnerabilities2025-05-06
GHSA
GHSA-xjrx-58mf-555f: In the Linux kernel, the following vulnerability has been resolved: timers/migration: Fix off-by-one root mis-connection Before attaching a new root2025-02-27

📋Vendor Advisories

6
Ubuntu
Linux kernel (Real-time) vulnerability2025-05-07
Ubuntu
Linux kernel (Azure) vulnerabilities2025-05-07
Ubuntu
Linux kernel (OEM) vulnerabilities2025-05-06
Ubuntu
Linux kernel vulnerability2025-05-06
Red Hat
kernel: timers/migration: Fix off-by-one root mis-connection2025-02-27
CVE-2025-21813 — Off-by-one Error in Linux | cvebase