CVE-2025-21988
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
In the netfs subsystem of the Linux kernel, a bug was found in the read_collect function. When multiple subrequests donated data to the same request, they overwrote the prev_donated field, causing data corruption and a BUG() panic.
Risk Assessment
The organization is at risk of data corruption and system crashes during network file read operations, which may lead to data loss or service disruptions.
Recommendation
Update the Linux kernel to a version containing the fix for CVE-2025-21988.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: fs/netfs/read_collect: add to next->prev_donated If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front").