Vulnerability Database

299,749

Total vulnerabilities in the database

CVE-2025-21772

In the Linux kernel, the following vulnerability has been resolved:

partitions: mac: fix handling of bogus partition table

Fix several issues in partition probing:

  • The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded.
  • If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory.
  • We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().
  • Published: Feb 27, 2025
  • Updated: Nov 4, 2025
  • CVE: CVE-2025-21772
  • Severity: High
  • Exploit:

CVSS v3:

  • Severity: High
  • Score: 7.8
  • AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWEs:

Software From Fixed in
linux / linux_kernel - 5.4.291
linux / linux_kernel 5.5 5.10.235
linux / linux_kernel 5.11 5.15.179
linux / linux_kernel 5.16 6.1.129
linux / linux_kernel 6.2 6.6.79
linux / linux_kernel 6.7 6.12.16
linux / linux_kernel 6.13 6.13.4
linux / linux_kernel 6.14-rc1 6.14-rc1.x
linux / linux_kernel 6.14-rc2 6.14-rc2.x