Improper Algorithm Validation in Linux Kernel Affects System Integrity

CVE-2025-39924

What is CVE-2025-39924?

This vulnerability in the Linux kernel pertains to an inadequate validation of algorithms utilized for encoded extents. It arises from the existing algorithm checks failing to appropriately account for newly encoded extents. To address this, the algorithm check needs to be aligned with Z_EROFS_COMPRESSION(_RUNTIME)_MAX, ensuring a consistent application with sbi->available_compr_algs. Without this critical adjustment, the system's integrity can be compromised, leading to potential security risks.

References