Riskcovery

CVE-2025-21772

partitions: mac: fix handling of bogus partition table

State
Published
Severity
7.8 High
Published
Feb 27, 2025
Updated
Oct 15, 2026
Reserved
Dec 29, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

partitions: mac: fix handling of bogus partition table

Fix several issues in partition probing:

- The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before a3e77da9f843e4ab93917d30c314f0283e28c124Affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 213ba5bd81b7e97ac6e6190b8f3bc6ba76123625Affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 40a35d14f3c0dc72b689061ec72fc9b193f37d1fAffected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 27a39d006f85e869be68c1d5d2ce05e5d6445bf5Affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 92527100be38ede924768f4277450dfe8a40e16bAffected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 6578717ebca91678131d2b1f4ba4258e60536e9fAffected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 7fa9706722882f634090bfc9af642bf9ed719e27Affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to before 80e648042e512d5a767da251d44132553fe04ae0Affected
  • 81a319c5c29913a23947f3d28513974682f3af03Affected
  • 34a906cd9f6445d9510841667eff0d980279ebf3Affected
  • 2a27f61bd411e564eb4651c18d225f6e9e1de534Affected
  • 69aad7e01c8e883e9d2f8dc5523bd419bd02d2aaAffected
  • 7f4f03c4a1e9a4b9679feafe7625a780864a4e76Affected
  • 3.2.75 to before 3.3Affected
  • 3.4.113 to before 3.5Affected
  • 3.10.99 to before 3.11Affected
  • 3.12.56 to before 3.13Affected
  • 3.14.63 to before 3.15Affected
LinuxLinux
  • 4.4Affected
  • before 4.4Not affected
  • 5.4.291 through 5.4.*Not affected
  • 5.10.235 through 5.10.*Not affected
  • 5.15.179 through 5.15.*Not affected
  • 6.1.129 through 6.1.*Not affected
  • 6.6.79 through 6.6.*Not affected
  • 6.12.16 through 6.12.*Not affected
  • 6.13.4 through 6.13.*Not affected
  • 6.14 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.