PT-2026-2884 · Linux+2 · Linux Kernel+2
Published
2025-01-01
·
Updated
2026-05-11
·
CVE-2025-71123
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.12.54-syzkaller-00144-g5f0270f1ba00
Description
The Linux kernel contains an issue in the ext4 filesystem related to string handling within the
parse apply sb mount options() function. The strscpy pad() function is improperly used when copying strings, potentially leading to a buffer overflow when handling non-null-terminated strings. This can result in a warning message: 'strnlen: detected buffer overflow'. The issue was discovered by the Linux Verification Center using Syzkaller. The s mount opts field, expected to be at most 63 characters long and null-terminated, is vulnerable due to incorrect buffer sizing.Recommendations
Update to Linux kernel version 6.12.54-syzkaller-00144-g5f0270f1ba00 or a later version to address this issue.
Exploit
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu