Linux Kernel Vulnerability in ext4 File System

CVE-2025-38701

What is CVE-2025-38701?

A vulnerability exists in the ext4 file system of the Linux kernel where a BUG_ON trigger occurs if an inode has the INLINE_DATA_FL flag set but lacks the necessary system.data extended attribute. This flaw can be exploited through specially crafted filesystems, leading to improper error handling. Instead of crashing the system, the code should report the situation as a corrupted filesystem, ensuring more graceful error management and system stability.

References