Riskcovery

CVE-2025-68251

erofs: avoid infinite loops due to corrupted subpage compact indexes

State
Published
Severity
Not scored
Published
Dec 16, 2025
Updated
Oct 21, 2026
Reserved
Dec 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

erofs: avoid infinite loops due to corrupted subpage compact indexes

Robert reported an infinite loop observed by two crafted images.

The root cause is that `clusterofs` can be larger than `lclustersize` for !NONHEAD `lclusters` in corrupted subpage compact indexes, e.g.:

blocksize = lclustersize = 512 lcn = 6 clusterofs = 515

Move the corresponding check for full compress indexes to `z_erofs_load_lcluster_from_disk()` to also cover subpage compact compress indexes.

It also fixes the position of `m->type >= Z_EROFS_LCLUSTER_TYPE_MAX` check, since it should be placed right after `z_erofs_load_{compact,full}_lcluster()`.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 3f691aa676f29586e83e6c032713554a290418c3 to before b18a82503a67a530d48f5a5b429e162749fe2c89Affected
  • 8d2517aaeea3ab8651bb517bca8f3c8664d318ea to before dbfac1b85d0753996ddfef636934d431b588dd1fAffected
  • 8d2517aaeea3ab8651bb517bca8f3c8664d318ea to before 8675447a8794983f2b7e694b378112772c17635eAffected
  • 8d2517aaeea3ab8651bb517bca8f3c8664d318ea to before e13d315ae077bb7c3c6027cc292401bc0f4ec683Affected
  • 22438a34d383ec2789eaf450728e38abc53051f8Affected
  • 6.6.16 to before 6.6.160Affected
  • 6.7.4 to before 6.8Affected
LinuxLinux
  • 6.8Affected
  • before 6.8Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.91 through 6.12.*Not affected
  • 6.17.6 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.