CVE-2025-40179
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: verify orphan file size is not too big In principle orphan file can be arbitrarily large. However orphan replay needs to traverse it all and we also pin all its buffers in memory. Thus filesystems with absurdly large orphan files can lead to big amounts of memory consumed. Limit orphan file size to a sane value and also use kvmalloc() for allocating array of block descriptor structures to avoid large order allocations for sane but large orphan files.
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedNov 12, 2025
First seenNov 12, 2025
How to fix
Update
- Linux Linux95a21611b14ae0a401720645245a8db16f040995, 566a1d6084563bd07433025aa23bcea4427de107, 304fc34ff6fc8261138fd81f119e024ac3a129e9, a2d803fab8a6c6a874277cb80156dc114db91921, 2b9da798ff0f4d026c5f0f815047393ebe7d8859, 0a6ce20c156442a4ce2a404747bb0fb05d54eeb3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 ≤ v < 95a21611b14ae0a401720645245a8db16f040995, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 ≤ v < 566a1d6084563bd07433025aa23bcea4427de107, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 ≤ v < 304fc34ff6fc8261138fd81f119e024ac3a129e9, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 ≤ v < a2d803fab8a6c6a874277cb80156dc114db91921, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 ≤ v < 2b9da798ff0f4d026c5f0f815047393ebe7d8859, 02f310fcf47fa9311d6ba2946a8d19e7d7d11f37 ≤ v < 0a6ce20c156442a4ce2a404747bb0fb05d54eeb3, 5.15 | 95a21611b14ae0a401720645245a8db16f040995, 566a1d6084563bd07433025aa23bcea4427de107, 304fc34ff6fc8261138fd81f119e024ac3a129e9, a2d803fab8a6c6a874277cb80156dc114db91921, 2b9da798ff0f4d026c5f0f815047393ebe7d8859, 0a6ce20c156442a4ce2a404747bb0fb05d54eeb3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.