CVE - CVE-2025-21772

CVE-ID
CVE-2025-21772	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:https://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5 URL:https://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5 MISC:https://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f URL:https://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f MISC:https://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27 URL:https://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27 MISC:https://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0 URL:https://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0 MISC:https://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b URL:https://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b
Assigning CNA
kernel.org
Date Record Created
20241229	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20241229)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)