Len Overflow Vulnerability in ext4 Filesystem of Linux Kernel

CVE-2025-38222

What is CVE-2025-38222?

A len overflow vulnerability exists in the ext4 filesystem of the Linux kernel, specifically when managing inline data. This issue arises during write operations where the parameter length is incorrectly handled due to truncation in the data preparation phase. As a result, a call to ext4_prepare_inline_data may receive an inaccurate length parameter, which leads to runtime errors when attempting to write past the allocated inline data size. This can potentially disrupt system stability and data integrity, requiring diligent attention from system administrators and users to ensure that systems are updated and secure.

References