Review reviewHigh

CVE-2025-21789

Linux Linux, linux kernel

In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code for negative lengths Commit 69e3a6aa6be2 ("LoongArch: Add checksum optimization for 64-bit system") would cause an undefined shift and an out-of-bounds read. Commit 8bd795fedb84 ("arm64: csum: Fix OoB access in IP checksum code for negative lengths") fixes the same issue on ARM64.

CVSS: 7.1
EPSS: 0.23%
CISA KEV: Not listed
Published: 2025.02.27

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability0.23%

Technical severityCVSS 7.1

Vulnerability overview

Affected product and versions

Product: Linux Linux, linux kernel
Affected versions: >= 69e3a6aa6be21de6aaf38130fad97ecde34a193c < 964a8895704a22efc06a2a3276b624a5ae985a06, >= 69e3a6aa6be21de6aaf38130fad97ecde34a193c < 9f15a8df542c0f08732a67d1a14ee7c22948fb97, >= 69e3a6aa6be21de6aaf38130fad97ecde34a193c < d6508ffff32b44b6d0de06704034e4eef1c307a7, >= 69e3a6aa6be21de6aaf38130fad97ecde34a193c < 6287f1a8c16138c2ec750953e35039634018c84a, >= 6.4, >= 6.4 < 6.6.79, >= 6.7 < 6.12.16, >= 6.13 < 6.13.4, 6.14
Fixed versions: 6.6.79, 6.12.16, 6.13.4

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux Linux, linux kernel and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CWE: CWE-125