CVE-2025-22001

In the Linux kernel, the following vulnerability has been resolved:

accel/qaic: Fix integer overflow in qaic_validate_req()

These are u64 variables that come from the user via qaic_attach_slice_bo_ioctl(). Use check_add_overflow() to ensure that the math doesn't have an integer wrapping bug.

This vulnerability is evaluated with a Moderate impact because exploitation requires local access to interact with the device interface, restricting the potential blast radius to a denial of service. Red Hat Enterprise Linux is not affected by this flaw as the Qualcomm Cloud AI accelerator driver is not enabled or shipped in supported Red Hat kernels. Furthermore, potential exposure is constrained to environments equipped with specialized Qualcomm AI accelerator hardware.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.