Skip to content
Heist/ feed
Back to feed
HighFix available

misc: fastrpc: Fix copy buffer page size

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies the buffer and pass it to the remote subsystem. There is a problem with current implementation of page size calculation which is not considering the offset in the calculation. This might lead to passing of improper and out-of-bounds page size which could result in memory issue. Calculate page start and page end using the offset adjusted address instead of absolute address.

Products
Kernel
Affected versions
Not specified
Fixed versions
6.1.129, 6.12.14, 6.13.3, 6.6.78
CVEs
CVE-2025-21734
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 07:05 UTC · Revision 1

Source evidence

misc: fastrpc: Fix copy buffer page size

core-osv · Original source

Published 27 Feb 2025, 02:12 UTC

In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies the buffer and pass it to the remote subsystem. There is a problem with current implementation of page size calculation which is not considering the offset in the calculation. This might lead to passing of improper and out-of-bounds page size which could result in memory issue. Calculate page start and page end using the offset adjusted address instead of absolute address.

osv:CVE-2025-21734

Kernel

Fixed versions: 6.1.129, 6.6.78, 6.12.14, 6.13.3

Complete source record
{
  "id": "62c9d437615e65f4358644f8ff0bb2d4566adab3a373e965d564be63a25c272a",
  "url": "https://osv.dev/vulnerability/CVE-2025-21734",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "misc: fastrpc: Fix copy buffer page size",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: misc: fastrpc: Fix copy buffer page size For non-registered buffer, fastrpc driver copies the buffer and pass it to the remote subsystem. There is a problem with current implementation of page size calculation which is not considering the offset in the calculation. This might lead to passing of improper and out-of-bounds page size which could result in memory issue. Calculate page start and page end using the offset adjusted address instead of absolute address.",
    "evidence": "osv:CVE-2025-21734",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "6.1.129",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.78",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.14",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.13.3",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-21734",
      "aliases": [
        "CVE-2025-21734"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "02b45b47fbe84e23699bb6bdc74d4c2780e282b4"
                },
                {
                  "fixed": "c56ba3ea8e3c9a69a992aad18f7a65e43e51d623"
                },
                {
                  "fixed": "c0464bad0e85fcd5d47e4297d1e410097c979e55"
                },
                {
                  "fixed": "24a79c6bc8de763f7c50f4f84f8b0c183bc25a51"
                },
                {
                  "fixed": "c3f7161123fcbdc64e90119ccce292d8b66281c4"
                },
                {
                  "fixed": "e966eae72762ecfdbdb82627e2cda48845b9dd66"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21734.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.2.0"
                },
                {
                  "fixed": "6.1.129"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.78"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.14"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.13.3"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-21734.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:26.815036577Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/24a79c6bc8de763f7c50f4f84f8b0c183bc25a51",
        "https://git.kernel.org/stable/c/c0464bad0e85fcd5d47e4297d1e410097c979e55",
        "https://git.kernel.org/stable/c/c3f7161123fcbdc64e90119ccce292d8b66281c4",
        "https://git.kernel.org/stable/c/c56ba3ea8e3c9a69a992aad18f7a65e43e51d623",
        "https://git.kernel.org/stable/c/e966eae72762ecfdbdb82627e2cda48845b9dd66",
        "https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21734.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-21734",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21734.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-21734",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 493194,
  "published_at": "2025-02-27T02:12:11.663+00:00"
}