CVE-2025-68251
Linux Kernel 6.8-6.17.6 - Denial of Service via Corrupted EROFS Subpage Compact Indexes
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that `clusterofs` can be larger than `lclustersize` for !NONHEAD `lclusters` in corrupted subpage compact indexes, e.g.: blocksize = lclustersize = 512 lcn = 6 clusterofs = 515 Move the corresponding check for full compress indexes to `z_erofs_load_lcluster_from_disk()` to also cover subpage compact compress indexes. It also fixes the position of `m->type >= Z_EROFS_LCLUSTER_TYPE_MAX` check, since it should be placed right after `z_erofs_load_{compact,full}_lcluster()`.
Scores
EPSS
0.0002
EPSS Percentile
7.0%
Details
Status
published
Products (13)
linux/Kernel
6.8.0 - 6.17.6linux
Linux/Linux
< 6.8
Linux/Linux
22438a34d383ec2789eaf450728e38abc53051f8
Linux/Linux
3f691aa676f29586e83e6c032713554a290418c3
Linux/Linux
6.12.91 - 6.12.*
Linux/Linux
6.17.6 - 6.17.*
Linux/Linux
6.18
Linux/Linux
6.6.16 - 6.7
Linux/Linux
6.7.4 - 6.8
Linux/Linux
6.8
... and 3 more
Published
Dec 16, 2025
Tracked Since
Feb 18, 2026