PT-2025-27993 · Linux+5 · Linux Kernel+5
Published
2025-07-04
·
Updated
2026-04-20
·
CVE-2025-38218
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions:
Linux kernel versions prior to 6.15.0-rc1+ #191
Description:
A vulnerability in the Linux kernel has been resolved, which could lead to a kernel panic when mounting a corrupted image. The issue occurs due to inconsistent metadata in the image, causing an out-of-bounds access in the sit bitmap. This happens when the sit bitmap size is too small, resulting in an incorrect calculation of the sit blk cnt. The vulnerability can be triggered by resizing an image, which generates a corrupted image that, when mounted, causes a kernel panic.
Recommendations:
For Linux kernel versions prior to 6.15.0-rc1+ #191, update to a newer version that includes the fix for the sanity check on sit bitmap size to avoid the kernel panic. As a temporary workaround, consider avoiding the use of the resize functionality until a patch is available. Restrict access to the f2fs file system to minimize the risk of exploitation.
Exploit
Fix
Improper Resource Release
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Ubuntu