CVE-2025-21665

filemap: avoid truncating 64-bit offset to 32 bits

State: Published
Severity: 5.5 Medium
Published: Jan 31, 2025
Updated: May 11, 2026
Reserved: Dec 29, 2024

Description

In the Linux kernel, the following vulnerability has been resolved:

filemap: avoid truncating 64-bit offset to 32 bits

On 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem.

Scores

CVSS	Score	Vector	Source
3.1	5.5 Medium	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	CISA-ADP

Weaknesses

CWE-835 Loop with Unreachable Exit Condition ('Infinite Loop')

Affected Products

Product	Versions
LinuxLinux	54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 64e5fd96330df2ad278d1c4edcca581f26e5f76eAffected 54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 80fc836f3ebe2f2d2d2c80c698b7667974285a04Affected 54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 09528bb1a4123e2a234eac2bc45a0e51e78dab43Affected 54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 280f1fb89afc01e7376f59ae611d54ca69e9f967Affected 54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before f505e6c91e7a22d10316665a86d79f84d9f0ba76Affected
LinuxLinux	5.12Affected before 5.12Not affected 5.15.177 through 5.15.Not affected 6.1.127 through 6.1.Not affected 6.6.74 through 6.6.Not affected 6.12.11 through 6.12.Not affected 6.13 and laterNot affected

Product

Versions

LinuxLinux

54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 64e5fd96330df2ad278d1c4edcca581f26e5f76eAffected
54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 80fc836f3ebe2f2d2d2c80c698b7667974285a04Affected
54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 09528bb1a4123e2a234eac2bc45a0e51e78dab43Affected
54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before 280f1fb89afc01e7376f59ae611d54ca69e9f967Affected
54fa39ac2e00b1b8c2a7fe72e648773ffa48f76d to before f505e6c91e7a22d10316665a86d79f84d9f0ba76Affected

LinuxLinux

5.12Affected
before 5.12Not affected
5.15.177 through 5.15.*Not affected
6.1.127 through 6.1.*Not affected
6.6.74 through 6.6.*Not affected
6.12.11 through 6.12.*Not affected
6.13 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.