Linux Kernel Vulnerability in Partition Table Handling
CVE-2025-21772
Summary
A vulnerability has been identified in the Linux kernel's handling of partition tables. This problem arises during the processing of defective partition tables, where improper handling can lead to access violations. Specifically, issues include failing to correctly validate sector sizes given as absurd values, which could allow for out-of-bounds memory access. Additionally, assumptions about the null termination of partition table entries may lead to incorrect memory operations. Proper safeguards have been implemented to mitigate these risks, ensuring robust partition probing and enhancing overall system security.
Affected Version(s)
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 27a39d006f85e869be68c1d5d2ce05e5d6445bf5
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 92527100be38ede924768f4277450dfe8a40e16b
Linux 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 6578717ebca91678131d2b1f4ba4258e60536e9f
References
Timeline
Vulnerability published
Vulnerability Reserved