Potential System Crashes in Linux Kernel's EROFS Due to Encoded Extents Issue

CVE-2025-40241

What is CVE-2025-40241?

A vulnerability affecting the Linux kernel's EROFS filesystem may allow crafted invalid cases related to newly introduced encoded extents to cause system crashes. Specifically, corrupted images can lead to out-of-bounds access due to improper handling of extent lengths and addresses. Users are advised to apply the latest updates to mitigate this risk.

References