Out-of-Bounds Access in Linux Kernel Affecting LoongArch and ARM64 Architectures

CVE-2025-21789

Summary

A vulnerability in the Linux kernel has been identified, which involves out-of-bounds (OoB) access due to an issue in the IP checksum code. The root cause stems from a specific change made in commit 69e3a6aa6be2 that introduces the possibility of an undefined shift, leading to abnormal access patterns. This issue is particularly relevant for both LoongArch and ARM64 architectures, with a fix provided in subsequent commits to ensure security and stability in TCP/IP checksum operations.

References