PT-2025-40098 · Linux+1 · Linux Kernel+1

Published 2025-10-01 · Updated 2025-12-11 · CVE-2025-39924

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description The Linux kernel contains an issue within the erofs filesystem related to encoded extents. The algorithm sanity checks do not correctly apply to new encoded extents, leading to inconsistencies. The algorithm check has been unified with Z EROFS COMPRESSION( RUNTIME) MAX and sbi->available compr algs to ensure consistency.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2025-39924

Affected Products

Astra Linux

Linux Kernel

References · 16

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39924.json · Exploit
• https://osv.dev/vulnerability/CVE-2025-39924 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-39924 · Security Note
• https://git.kernel.org/stable/c/db5d7abd379a8dcf030be8f52f99cadf7e397ba8 · Patch
• https://security-tracker.debian.org/tracker/CVE-2025-39924 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-39924 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-39924 · Security Note
• https://ubuntu.com/security/CVE-2025-39924 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-39924 · Vendor Advisory
• https://git.kernel.org/stable/c/131897c65e2b86cf14bec7379f44aa8fbb407526 · Patch
• https://twitter.com/dailycve/status/1999203313925898380 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1973312398472642715 · Twitter Post
• https://git.kernel.org/linus/131897c65e2b86cf14bec7379f44aa8fbb407526 · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://t.me/CVEtracker/33801 · Telegram Post