CVE-2025-21772

Summary

In the Linux kernel, the following vulnerability has been resolved:

partitions: mac: fix handling of bogus partition table

Fix several issues in partition probing:

  • The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded.
  • If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory.
  • We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().

Affected Software

VendorProductVersion RangeStatus
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < a3e77da9f843e4ab93917d30c314f0283e28c124affected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 213ba5bd81b7e97ac6e6190b8f3bc6ba76123625affected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 40a35d14f3c0dc72b689061ec72fc9b193f37d1faffected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 27a39d006f85e869be68c1d5d2ce05e5d6445bf5affected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 92527100be38ede924768f4277450dfe8a40e16baffected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 6578717ebca91678131d2b1f4ba4258e60536e9faffected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 7fa9706722882f634090bfc9af642bf9ed719e27affected
LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 < 80e648042e512d5a767da251d44132553fe04ae0affected
LinuxLinux81a319c5c29913a23947f3d28513974682f3af03affected
LinuxLinux34a906cd9f6445d9510841667eff0d980279ebf3affected
LinuxLinux2a27f61bd411e564eb4651c18d225f6e9e1de534affected
LinuxLinux69aad7e01c8e883e9d2f8dc5523bd419bd02d2aaaffected
LinuxLinux7f4f03c4a1e9a4b9679feafe7625a780864a4e76affected
LinuxLinux3.2.75 < 3.3affected
LinuxLinux3.4.113 < 3.5affected
LinuxLinux3.10.99 < 3.11affected
LinuxLinux3.12.56 < 3.13affected
LinuxLinux3.14.63 < 3.15affected
LinuxLinux4.4affected
LinuxLinux0 < 4.4unaffected
LinuxLinux5.4.291 <= 5.4.*unaffected
LinuxLinux5.10.235 <= 5.10.*unaffected
LinuxLinux5.15.179 <= 5.15.*unaffected
LinuxLinux6.1.129 <= 6.1.*unaffected
LinuxLinux6.6.79 <= 6.6.*unaffected
LinuxLinux6.12.16 <= 6.12.*unaffected
LinuxLinux6.13.4 <= 6.13.*unaffected
LinuxLinux6.14 <= *unaffected

Weaknesses

ADP Enrichment

CVE Program Container

Additional References

Additional References

References