CVE-2025-68251
Description
In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that `clusterofs` can be larger than `lclustersize` for !NONHEAD `lclusters` in corrupted subpage compact indexes, e.g.: blocksize = lclustersize = 512 lcn = 6 clusterofs = 515 Move the corresponding check for full compress indexes to `z_erofs_load_lcluster_from_disk()` to also cover subpage compact compress indexes. It also fixes the position of `m->type >= Z_EROFS_LCLUSTER_TYPE_MAX` check, since it should be placed right after `z_erofs_load_{compact,full}_lcluster()`.
How to fix
- Linux Linuxb18a82503a67a530d48f5a5b429e162749fe2c89, dbfac1b85d0753996ddfef636934d431b588dd1f, 8675447a8794983f2b7e694b378112772c17635e, e13d315ae077bb7c3c6027cc292401bc0f4ec683, 6.6.160, 6.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 3f691aa676f29586e83e6c032713554a290418c3 ≤ v < b18a82503a67a530d48f5a5b429e162749fe2c89, 8d2517aaeea3ab8651bb517bca8f3c8664d318ea ≤ v < dbfac1b85d0753996ddfef636934d431b588dd1f, 8d2517aaeea3ab8651bb517bca8f3c8664d318ea ≤ v < 8675447a8794983f2b7e694b378112772c17635e, 8d2517aaeea3ab8651bb517bca8f3c8664d318ea ≤ v < e13d315ae077bb7c3c6027cc292401bc0f4ec683, 22438a34d383ec2789eaf450728e38abc53051f8, 6.6.16 ≤ v < 6.6.160, 6.7.4 ≤ v < 6.8, 6.8 | b18a82503a67a530d48f5a5b429e162749fe2c89, dbfac1b85d0753996ddfef636934d431b588dd1f, 8675447a8794983f2b7e694b378112772c17635e, e13d315ae077bb7c3c6027cc292401bc0f4ec683, 6.6.160, 6.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.