IT

Tracker / CVE-2025-21772

CVE-2025-21772

High 7.8

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().

Affected products and versions

linux linux_kernel
linux linux_kernel · … → 5.4.291
linux linux_kernel · 5.11 → 5.15.179
linux linux_kernel · 5.16 → 6.1.129
linux linux_kernel · 5.5 → 5.10.235
linux linux_kernel · 6.13 → 6.13.4
linux linux_kernel · 6.2 → 6.6.79
linux linux_kernel · 6.7 → 6.12.16

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References