Out-of-Bounds Write Vulnerability in Linux Kernel Affects Cache Information Management

CVE-2025-21785

Summary

The vulnerability in the Linux kernel pertains to an out-of-bounds write related to the cacheinfo array. Although there was an existing bounds check for the array size during cache level detection and population, it failed to consider cache levels that utilize separate data and instruction caches. This oversight could potentially lead to improper memory access and corruption. The vulnerability has been addressed by enhancing the population index increment specifically for leaf nodes, rather than any populated level, thus preventing the potential for out-of-bounds writes.

References