Infinite Loop Vulnerability in Linux Kernel exFAT Implementation by Linux Foundation

CVE-2025-38692

What is CVE-2025-38692?

In the exFAT implementation of the Linux kernel, a vulnerability exists that can lead to an infinite loop caused by file system corruption. This happens when the cluster chain contains a loop, and there are no available entries in the cluster. Specifically, several functions such as exfat_count_dir_entries() and exfat_load_bitmap() can get trapped in an infinite loop under certain conditions. This vulnerability highlights the importance of adding checks to detect and break such loops to maintain system stability and integrity.

References