Integer underflow in Linux kernel

1) Integer underflow

EUVDB-ID: #VU107761

Risk: Low

CVSSv4.0: 5.9 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2025-23138

CWE-ID: CWE-191 - Integer underflow

Exploit availability: No

Description

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to integer underflow within the watch_queue_set_size() function in kernel/watch_queue.c. A local user can execute arbitrary code.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Linux kernel: All versions

CPE2.3

• cpe:2.3:o:linux_foundation:linux_kernel:*:*:*:*:*:*:*:*

External links

https://git.kernel.org/stable/c/205028ebba838938d3b264dda1d0708fa7fe1ade
https://git.kernel.org/stable/c/2d680b988656bb556c863d8b46d9b9096842bf3d
https://git.kernel.org/stable/c/471c89b7d4f58bd6082f7c1fe14d4ca15c7f1284
https://git.kernel.org/stable/c/56ec918e6c86c1536870e4373e91eddd0c44245f
https://git.kernel.org/stable/c/6dafa27764183738dc5368b669b71e3d0d154f12
https://git.kernel.org/stable/c/8658c75343ed00e5e154ebbe24335f51ba8db547
https://git.kernel.org/stable/c/d40e3537265dea9e3c33021874437ff26dc18787
https://git.kernel.org/stable/c/f13abc1e8e1a3b7455511c4e122750127f6bc9b0

Q & A

Can this vulnerability be exploited remotely?

No. This vulnerability can be exploited locally. The attacker should have authentication credentials and successfully authenticate on the system.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.