Executive Summary

Informations
Name CVE-2025-21770 First vendor Publication 2025-02-27
Vendor Cve Last vendor Modification 2025-03-05

Security-Database Scoring CVSS v3

Cvss vector : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Overall CVSS Score 5.5
Base Score 5.5 Environmental Score 5.5
impact SubScore 3.6 Temporal Score 5.5
Exploitabality Sub Score 1.8
 
Attack Vector Local Attack Complexity Low
Privileges Required Low User Interaction None
Scope Unchanged Confidentiality Impact None
Integrity Impact None Availability Impact High
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector :
Cvss Base Score N/A Attack Range N/A
Cvss Impact Score N/A Attack Complexity N/A
Cvss Expoit Score N/A Authentication N/A
Calculate full CVSS 2.0 Vectors scores

Detail

In the Linux kernel, the following vulnerability has been resolved:

iommu: Fix potential memory leak in iopf_queue_remove_device()

The iopf_queue_remove_device() helper removes a device from the per-iommu iopf queue when PRI is disabled on the device. It responds to all outstanding iopf's with an IOMMU_PAGE_RESP_INVALID code and detaches the device from the queue.

However, it fails to release the group structure that represents a group of iopf's awaiting for a response after responding to the hardware. This can cause a memory leak if iopf_queue_remove_device() is called with pending iopf's.

Fix it by calling iopf_free_group() after the iopf group is responded.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21770

CWE : Common Weakness Enumeration

% Id Name
100 % CWE-401 Failure to Release Memory Before Removing Last Reference ('Memory Leak')

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 8
Os 3713

Sources (Detail)

https://git.kernel.org/stable/c/90d5429cd2921ca2714684ed525898d431bb9283
https://git.kernel.org/stable/c/9759ae2cee7cd42b95f1c48aa3749bd02b5ddb08
https://git.kernel.org/stable/c/db60d2d896a17decd58d143eef92cf22eb0a0176
Source Url

Alert History

If you want to see full details history, please login or register.
0
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Date Informations
2025-06-26 02:40:58
  • Multiple Updates
2025-06-25 12:38:01
  • Multiple Updates
2025-06-24 02:45:25
  • Multiple Updates
2025-05-27 02:52:26
  • Multiple Updates
2025-03-29 03:46:30
  • Multiple Updates
2025-03-28 13:49:00
  • Multiple Updates
2025-03-28 03:24:20
  • Multiple Updates
2025-03-25 16:30:08
  • Multiple Updates
2025-03-25 03:30:09
  • Multiple Updates
2025-03-19 03:18:41
  • Multiple Updates
2025-03-18 03:31:39
  • Multiple Updates
2025-03-14 00:21:04
  • Multiple Updates
2025-03-13 21:20:58
  • Multiple Updates
2025-03-06 14:15:13
  • Multiple Updates
2025-03-06 03:09:46
  • Multiple Updates
2025-03-05 21:20:47
  • Multiple Updates
2025-02-27 09:20:31
  • First insertion