CVE-2025-22107

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-22107
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22107.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-22107
Downstream
Related
Published
2025-04-16T14:12:55Z
Modified
2026-09-09T03:46:41Z
Summary
net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()
Details

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: sja1105: fix kasan out-of-bounds warning in sja1105_table_delete_entry()

There are actually 2 problems:

  • deleting the last element doesn't require the memmove of elements [i + 1, end) over it. Actually, element i+1 is out of bounds.
  • The memmove itself should move size - i - 1 elements, because the last element is out of bounds.

The out-of-bounds element still remains out of bounds after being accessed, so the problem is only that we touch it, not that it becomes in active use. But I suppose it can lead to issues if the out-of-bounds element is part of an unmapped page.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/22xxx/CVE-2025-22107.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6666cebc5e306f49a25bd20aa8c1cb8ef8950df5
Fixed
f85b9bfb08ba2b642d1810c6c4ae1e7b46f1776a
Fixed
f117d0467215d7f1d445ae16d2c799637e63dc6c
Fixed
b52153da1f42e2f4d6259257a7ba027331671a93
Fixed
4584486cfcca24b7b586da3377eb3cffd48669ec
Fixed
031e00249e9e6bee72ba66701c8f83b45fc4b8a2
Fixed
59b97641de03c081f26b3a8876628c765b5faa25
Fixed
5f2b28b79d2d1946ee36ad8b3dc0066f73c90481

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22107.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.2.0
Fixed
5.10.258
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.209
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.160
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.120
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.59
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.14.2

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-22107.json"