https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 19:52:53 +0000 https://vulnerability.circl.lu/vuln/cve-2025-68237 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mtdchar: fix integer overflow in read/write ioctls</p> <p>The &#34;req.start&#34; and &#34;req.len&#34; variables are u64 values that come from the user at the start of the function. We mask away the high 32 bits of &#34;req.len&#34; so that&#39;s capped at U32_MAX but the &#34;req.start&#34; variable can go up to U64_MAX which means that the addition can still integer overflow.</p> <p>Use check_add_overflow() to fix this bug.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>mtdchar: fix integer overflow in read/write ioctls</p> <p>The &#34;req.start&#34; and &#34;req.len&#34; variables are u64 values that come from the user at the start of the function. We mask away the high 32 bits of &#34;req.len&#34; so that&#39;s capped at U32_MAX but the &#34;req.start&#34; variable can go up to U64_MAX which means that the addition can still integer overflow.</p> <p>Use check_add_overflow() to fix this bug.</p> https://vulnerability.circl.lu/vuln/cve-2025-68237