CVE-2025-21667

Katalog CVE

CVSS 5.5 · Medium EPSS 0,22%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada linux kernel. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: iomap: avoid avoid truncating 64-bit offset to 32 bits on 32-bit kernels, iomap_write_delalloc_scan() was inadvertently using a 32-bit position due to folio_next_index() returning an unsigned long. This could lead to an infinite loop when writing to an xfs filesystem.

Rincian

Terbit di NVD

31 Januari 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/402ce16421477e27f30b57d6d1a6dc248fa3a4e4 patch
• https://git.kernel.org/stable/c/7ca4bd6b754913910151acce00be093f03642725 patch
• https://git.kernel.org/stable/c/91371922704c8d82049ef7c2ad974d0a2cd1174d patch
• https://git.kernel.org/stable/c/c13094b894de289514d84b8db56d1f2931a0bade patch
• https://lists.debian.org/debian-lts-announce/2025/03/msg00001.html