CVE-2025-21772

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-21772
In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/213ba5bd81b7e97ac6e6190b8f3bc6ba76123625 Patch
https://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5 Patch
https://git.kernel.org/stable/c/40a35d14f3c0dc72b689061ec72fc9b193f37d1f Patch
https://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f Patch
https://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27 Patch
https://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0 Patch
https://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b Patch
https://git.kernel.org/stable/c/a3e77da9f843e4ab93917d30c314f0283e28c124 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
History

28 Oct 2025, 20:30

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/213ba5bd81b7e97ac6e6190b8f3bc6ba76123625 - () https://git.kernel.org/stable/c/213ba5bd81b7e97ac6e6190b8f3bc6ba76123625 - Patch
References () https://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5 - () https://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5 - Patch
References () https://git.kernel.org/stable/c/40a35d14f3c0dc72b689061ec72fc9b193f37d1f - () https://git.kernel.org/stable/c/40a35d14f3c0dc72b689061ec72fc9b193f37d1f - Patch
References () https://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f - () https://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f - Patch
References () https://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27 - () https://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27 - Patch
References () https://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0 - () https://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0 - Patch
References () https://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b - () https://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b - Patch
References () https://git.kernel.org/stable/c/a3e77da9f843e4ab93917d30c314f0283e28c124 - () https://git.kernel.org/stable/c/a3e77da9f843e4ab93917d30c314f0283e28c124 - Patch
CWE CWE-787
CPE cpe:2.3:o:linux:linux_kernel:6.14:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.14:rc1:*:*:*:*:*:*
First Time Linux linux Kernel
Linux

13 Mar 2025, 13:15

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/213ba5bd81b7e97ac6e6190b8f3bc6ba76123625 -
  • () https://git.kernel.org/stable/c/40a35d14f3c0dc72b689061ec72fc9b193f37d1f -
  • () https://git.kernel.org/stable/c/a3e77da9f843e4ab93917d30c314f0283e28c124 -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: particiones: mac: se corrige el manejo de la tabla de particiones falsa Corrige varios problemas en el sondeo de particiones: - El rescate para un partoffset incorrecto debe usar put_dev_sector(), ya que el read_part_sector() anterior tuvo éxito. - Si la tabla de particiones reclama un tamaño de sector tonto como 0xfff bytes (lo que da como resultado que las entradas de la tabla de particiones se extiendan a ambos lados de los límites del sector), salga en lugar de acceder a la memoria fuera de los límites. - No debemos asumir que la tabla de particiones contiene la terminación NUL adecuada: use strnlen() y strncmp() en lugar de strlen() y strcmp().

27 Feb 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-02-27 03:15

Updated : 2025-10-28 20:30

NVD link : CVE-2025-21772

Mitre link : CVE-2025-21772

CVE.ORG link : CVE-2025-21772

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write