Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-39888

fuse: Block access to folio overlimit

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: fuse: Block access to folio overlimit syz reported a slab-out-of-bounds Write in fuse_dev_do_write. When the number of bytes to be retrieved is truncated to the upper limit by fc->max_pages and there is an offset, the oob is triggered. Add a loop termination condition to prevent overruns.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 3568a956932621cafadafc8b75fcf6dc06555105 to < 623719227b114d73a2cee45f1b343ced63ce09ecaffected
  • 3568a956932621cafadafc8b75fcf6dc06555105 to < 9d81ba6d49a7457784f0b6a71046818b86ec7e44affected

Linux Linux

Default version status: affected

  • 6.16affected
  • 0 to < 6.16unaffected
  • 6.16.8 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References