Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-21772

partitions: mac: fix handling of bogus partition table

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < a3e77da9f843e4ab93917d30c314f0283e28c124affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 213ba5bd81b7e97ac6e6190b8f3bc6ba76123625affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 40a35d14f3c0dc72b689061ec72fc9b193f37d1faffected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 27a39d006f85e869be68c1d5d2ce05e5d6445bf5affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 92527100be38ede924768f4277450dfe8a40e16baffected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 6578717ebca91678131d2b1f4ba4258e60536e9faffected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 7fa9706722882f634090bfc9af642bf9ed719e27affected
  • 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 80e648042e512d5a767da251d44132553fe04ae0affected
  • 81a319c5c29913a23947f3d28513974682f3af03affected
  • 34a906cd9f6445d9510841667eff0d980279ebf3affected
  • 2a27f61bd411e564eb4651c18d225f6e9e1de534affected
  • 69aad7e01c8e883e9d2f8dc5523bd419bd02d2aaaffected
  • 7f4f03c4a1e9a4b9679feafe7625a780864a4e76affected
  • 3.2.75 to < 3.3affected
  • 3.4.113 to < 3.5affected
  • 3.10.99 to < 3.11affected
  • 3.12.56 to < 3.13affected
  • 3.14.63 to < 3.15affected

Linux Linux

Default version status: affected

  • 4.4affected
  • 0 to < 4.4unaffected
  • 5.4.291 to ≤ 5.4.*unaffected
  • 5.10.235 to ≤ 5.10.*unaffected
  • 5.15.179 to ≤ 5.15.*unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.79 to ≤ 6.6.*unaffected
  • 6.12.16 to ≤ 6.12.*unaffected
  • 6.13.4 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References