PT-2025-6935 · Linux+7 · Linux Kernel+7

Jiaji Qin + 1 · Published 2025-01-13 · Updated 2025-10-03 · CVE-2025-21699

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Linux Kernel (affected versions not specified)

Description: A vulnerability in the Linux kernel has been resolved, specifically in the gfs2 module. The issue occurs when flipping the GFS2 DIF JDATA flag, which determines whether pages in the address space use buffer heads or iomap folio state structs. Since these two cannot be mixed, the address space of an inode needs to be truncated when the flag is flipped.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

ALT-PU-2025-12647

ALT-PU-2025-3122

ALT-PU-2025-3469

ALT-PU-2025-3514

ALT-PU-2025-5437

AZL-56843

BDU:2025-11846

CVE-2025-21699

DLA-4075-1

DLA-4076-1

MGASA-2025-0078

MGASA-2025-0079

OESA-2025-1204

OESA-2025-1205

OPENSUSE-SU-2025_0833-1

OPENSUSE-SU-2025_0835-1

OPENSUSE-SU-2025_0847-1

OPENSUSE-SU-2025_0853-1

OPENSUSE-SU-2025_0855-1

OPENSUSE-SU-2025_0856-1

OPENSUSE-SU-2025_0955-1

SUSE-SU-2025:0784-1

SUSE-SU-2025:0833-1

SUSE-SU-2025:0833-2

SUSE-SU-2025:0835-1

SUSE-SU-2025:0847-1

SUSE-SU-2025:0853-1

SUSE-SU-2025:0855-1

SUSE-SU-2025:0856-1

SUSE-SU-2025:0867-1

SUSE-SU-2025:0945-1

SUSE-SU-2025:0955-1

SUSE-SU-2025:20190-1

SUSE-SU-2025:20192-1

SUSE-SU-2025:20260-1

SUSE-SU-2025:20270-1

SUSE-SU-2025_0833-1

SUSE-SU-2025_0833-2

SUSE-SU-2025_0835-1

SUSE-SU-2025_0847-1

SUSE-SU-2025_0855-1

SUSE-SU-2025_0856-1

SUSE-SU-2025_0955-1

USN-7387-1

USN-7387-2

USN-7387-3

USN-7388-1

USN-7389-1

USN-7390-1

USN-7391-1

USN-7392-1

USN-7392-2

USN-7392-3

USN-7392-4

USN-7393-1

USN-7401-1

USN-7407-1

USN-7413-1

USN-7421-1

USN-7445-1

USN-7448-1

USN-7458-1

USN-7459-1

USN-7459-2

USN-7463-1

USN-7539-1

USN-7540-1

USN-7595-1

USN-7595-2

USN-7595-3

USN-7595-4

USN-7595-5

USN-7596-1

USN-7596-2

USN-7653-1

Affected Products

Alt Linux

Astra Linux

Debian

Linux Kernel

Linuxmint

Red Os

Suse

Ubuntu

References · 1718

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21699.json · Exploit
• https://ubuntu.com/security/CVE-2024-50059 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56602 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-56594 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50185 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50249 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49868 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7653-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50205 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50151 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-57791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-21676 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-2312 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-50086 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-49995 · Vendor Advisory