Buffer Overflow Vulnerability in Linux Kernel Affecting Extended Attributes

CVE-2025-39735

Summary

A vulnerability in the Linux kernel related to extended attributes can cause a buffer overflow due to improper validation of attribute sizes. In the function 'ea_get()', an integer overflow occurs when size checks lead to an excessively large size being utilized in subsequent processing. This flaw can cause memory access violations, ultimately leading to potential arbitrary code execution or system compromise if exploited by an attacker. It is crucial for users of affected Linux kernel versions to apply the necessary updates to mitigate this risk.

References