{"id":"CVE-2025-68251","revision":"a8342e8f121b44e7b3c8d5aa1a85804a","records":[{"revision":"a8342e8f121b44e7b3c8d5aa1a85804a","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-68251","aliases":[],"title":"erofs: avoid infinite loops due to corrupted subpage compact indexes","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: avoid infinite loops due to corrupted subpage compact indexes\n\nRobert reported an infinite loop observed by two crafted images.\n\nThe root cause is that `clusterofs` can be larger than `lclustersize`\nfor !NONHEAD `lclusters` in corrupted subpage compact indexes, e.g.:\n\n  blocksize = lclustersize = 512   lcn = 6   clusterofs = 515\n\nMove the corresponding check for full compress indexes to\n`z_erofs_load_lcluster_from_disk()` to also cover subpage compact\ncompress indexes.\n\nIt also fixes the position of `m->type >= Z_EROFS_LCLUSTER_TYPE_MAX`\ncheck, since it should be placed right after\n`z_erofs_load_{compact,full}_lcluster()`.","state":0,"publishedAt":"2025-12-16T14:32:17.979+00:00","modifiedAt":"2026-10-21T12:38:08.014+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/erofs/zmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"3f691aa676f29586e83e6c032713554a290418c3\",\n                            \"lessThan\": \"b18a82503a67a530d48f5a5b429e162749fe2c89\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d2517aaeea3ab8651bb517bca8f3c8664d318ea\",\n                            \"lessThan\": \"dbfac1b85d0753996ddfef636934d431b588dd1f\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d2517aaeea3ab8651bb517bca8f3c8664d318ea\",\n                            \"lessThan\": \"8675447a8794983f2b7e694b378112772c17635e\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"8d2517aaeea3ab8651bb517bca8f3c8664d318ea\",\n                            \"lessThan\": \"e13d315ae077bb7c3c6027cc292401bc0f4ec683\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"22438a34d383ec2789eaf450728e38abc53051f8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"6.6.16\",\n                            \"lessThan\": \"6.6.160\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.7.4\",\n                            \"lessThan\": \"6.8\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/erofs/zmap.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.8\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.8\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.6.160\",\n                            \"lessThanOrEqual\": \"6.6.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.12.91\",\n                            \"lessThanOrEqual\": \"6.12.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.17.6\",\n                            \"lessThanOrEqual\": \"6.17.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/b18a82503a67a530d48f5a5b429e162749fe2c89","https://git.kernel.org/stable/c/dbfac1b85d0753996ddfef636934d431b588dd1f","https://git.kernel.org/stable/c/8675447a8794983f2b7e694b378112772c17635e","https://git.kernel.org/stable/c/e13d315ae077bb7c3c6027cc292401bc0f4ec683"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-68251","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-68251","identifiers":["CVE-2025-68251"]},"retained":false,"historicalAffected":[]}],"coverage":[]}