AZL-87137
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-87137.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-87137
- Upstream
- Published
- 2025-12-16T15:15:54Z
- Modified
- 2026-08-29T05:27:27Z
- Summary
- CVE-2025-68251 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
erofs: avoid infinite loops due to corrupted subpage compact indexes
Robert reported an infinite loop observed by two crafted images.
The root cause is that
clusterofscan be larger thanlclustersizefor !NONHEADlclustersin corrupted subpage compact indexes, e.g.:blocksize = lclustersize = 512 lcn = 6 clusterofs = 515
Move the corresponding check for full compress indexes to
z_erofs_load_lcluster_from_disk()to also cover subpage compact compress indexes.It also fixes the position of
m->type >= Z_EROFS_LCLUSTER_TYPE_MAXcheck, since it should be placed right afterz_erofs_load_{compact,full}_lcluster(). - References