PT-2025-49439 · Microsoft+4 · Exfat+4
Published
2025-07-12
·
Updated
2026-05-07
·
CVE-2025-40307
CVSS v2.0
4.6
Medium
| Vector | AV:L/AC:L/Au:S/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The Linux kernel contains a flaw within the exFAT file system related to the validation of cluster allocation bits in the allocation bitmap. Specifically, the system reads and utilizes the allocation bitmap without proper checks, potentially leading to issues when handling exFAT images with incorrectly set cluster bits. A crafted exFAT image can cause the system to allocate clusters incorrectly, potentially leading to the deletion or reallocation of existing entries during directory creation using
mkdir. The issue arises because the allocation bitmap is not adequately validated, allowing clusters to be incorrectly marked as available and subsequently reallocated. The patch introduces exfat test bitmap range to validate the correct marking of clusters used for the allocation bitmap.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Allocation of Resources Without Limits
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Debian
Linuxmint
Linux Kernel
Ubuntu
Exfat