PT-2025-27725 · Linux+4 · Linux Kernel+4
Published
2025-05-19
·
Updated
2026-03-04
·
CVE-2025-38139
CVSS v3.1
7.1
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.15.0-rc6-syzkaller-00052-g9f35e33144ae
Description:
A vulnerability in the Linux kernel has been resolved, related to the resetting of the subrequest iterator in netfs retry write stream(). The issue occurs when the iterator may have been shortened by a previous retry, causing the amount of data to be written by the subrequest to be incorrect. This can lead to an error in iov iter revert(), resulting in a slab-out-of-bounds bug. The vulnerability can be exploited, causing a denial-of-service.
Recommendations:
For Linux kernel versions prior to 6.15.0-rc6-syzkaller-00052-g9f35e33144ae, update to a newer version that includes the fix for the netfs subrequest iterator resetting issue. As a temporary workaround, consider disabling the netfs retry write stream() function until a patch is available. Restrict access to the vulnerable netfs module to minimize the risk of exploitation. Avoid using the
subreq->len variable in the affected API endpoint until the issue is resolved.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Linuxmint
Linux Kernel
Red Os
Ubuntu