CVE-2025-38692

(2) Condition for exfatcreateupcase_table() to loop infinitely. - The cluster chain of the root directory includes a loop. - There are no UNUSED entry and up-case table entry in the cluster chain of the root directory.

(3) Condition for exfatloadbitmap() to loop infinitely. - The cluster chain of the root directory includes a loop. - There are no UNUSED entry and bitmap entry in the cluster chain of the root directory.

(4) Condition for exfatfinddir_entry() to loop infinitely. - The cluster chain includes a loop. - The unused directory entries were exhausted by some operation.

(5) Condition for exfatcheckdir_empty() to loop infinitely. - The cluster chain includes a loop. - The unused directory entries were exhausted by some operation. - All files and sub-directories under the directory are deleted.

This commit adds checks to break the above infinite loop.

Database specific

{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38692.json"
}

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type: GIT
Repo: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events: Introduced

1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003

Fixed

868f23286c1a13162330fa6c614fe350f78e3f82

Fixed

aa8fe7b7b73d4c9a41bb96cb3fb3092f794ecb33

Fixed

e2066ca3ef49a30920d8536fa366b2a183a808ee

Fixed

4c3cda20c4cf1871e27868d08fda06b79bc7d568

Fixed

99f9a97dce39ad413c39b92c90393bbd6778f3fd

Affected versions

v5.*

v5.10

v5.10-rc1

v5.10-rc2

v5.10-rc3

v5.10-rc4

v5.10-rc5

v5.10-rc6

v5.10-rc7

v5.11

v5.11-rc1

v5.11-rc2

v5.11-rc3

v5.11-rc4

v5.11-rc5

v5.11-rc6

v5.11-rc7

v5.12

v5.12-rc1

v5.12-rc1-dontuse

v5.12-rc2

v5.12-rc3

v5.12-rc4

v5.12-rc5

v5.12-rc6

v5.12-rc7

v5.12-rc8

v5.13

v5.13-rc1

v5.13-rc2

v5.13-rc3

v5.13-rc4

v5.13-rc5

v5.13-rc6

v5.13-rc7

v5.14

v5.14-rc1

v5.14-rc2

v5.14-rc3

v5.14-rc4

v5.14-rc5

v5.14-rc6

v5.14-rc7

v5.15

v5.15-rc1

v5.15-rc2

v5.15-rc3

v5.15-rc4

v5.15-rc5

v5.15-rc6

v5.15-rc7

v5.16

v5.16-rc1

v5.16-rc2

v5.16-rc3

v5.16-rc4

v5.16-rc5

v5.16-rc6

v5.16-rc7

v5.16-rc8

v5.17

v5.17-rc1

v5.17-rc2

v5.17-rc3

v5.17-rc4

v5.17-rc5

v5.17-rc6

v5.17-rc7

v5.17-rc8

v5.18

v5.18-rc1

v5.18-rc2

v5.18-rc3

v5.18-rc4

v5.18-rc5

v5.18-rc6

v5.18-rc7

v5.19

v5.19-rc1

v5.19-rc2

v5.19-rc3

v5.19-rc4

v5.19-rc5

v5.19-rc6

v5.19-rc7

v5.19-rc8

v5.6

v5.6-rc2

v5.6-rc3

v5.6-rc4

v5.6-rc5

v5.6-rc6

v5.6-rc7

v5.7

v5.7-rc1

v5.7-rc2

v5.7-rc3

v5.7-rc4

v5.7-rc5

v5.7-rc6

v5.7-rc7

v5.8

v5.8-rc1

v5.8-rc2

v5.8-rc3

v5.8-rc4

v5.8-rc5

v5.8-rc6

v5.8-rc7

v5.9

v5.9-rc1

v5.9-rc2

v5.9-rc3

v5.9-rc4

v5.9-rc5

v5.9-rc6

v5.9-rc7

v5.9-rc8

v6.*

v6.0

v6.0-rc1

v6.0-rc2

v6.0-rc3

v6.0-rc4

v6.0-rc5

v6.0-rc6

v6.0-rc7

v6.1

v6.1-rc1

v6.1-rc2

v6.1-rc3

v6.1-rc4

v6.1-rc5

v6.1-rc6

v6.1-rc7

v6.1-rc8

v6.10

v6.10-rc1

v6.10-rc2

v6.10-rc3

v6.10-rc4

v6.10-rc5

v6.10-rc6

v6.10-rc7

v6.11

v6.11-rc1

v6.11-rc2

v6.11-rc3

v6.11-rc4

v6.11-rc5

v6.11-rc6

v6.11-rc7

v6.12

v6.12-rc1

v6.12-rc2

v6.12-rc3

v6.12-rc4

v6.12-rc5

v6.12-rc6

v6.12-rc7

v6.12.1

v6.12.10

v6.12.11

v6.12.12

v6.12.13

v6.12.14

v6.12.15

v6.12.16

v6.12.17

v6.12.18

v6.12.19

v6.12.2

v6.12.20

v6.12.21

v6.12.22

v6.12.23

v6.12.24

v6.12.25

v6.12.26

v6.12.27

v6.12.28

v6.12.29

v6.12.3

v6.12.30

v6.12.31

v6.12.32

v6.12.33

v6.12.34

v6.12.35

v6.12.36

v6.12.37

v6.12.38

v6.12.39

v6.12.4

v6.12.40

v6.12.41

v6.12.42

v6.12.5

v6.12.6

v6.12.7

v6.12.8

v6.12.9

v6.13

v6.13-rc1

v6.13-rc2

v6.13-rc3

v6.13-rc4

v6.13-rc5

v6.13-rc6

v6.13-rc7

v6.14

v6.14-rc1

v6.14-rc2

v6.14-rc3

v6.14-rc4

v6.14-rc5

v6.14-rc6

v6.14-rc7

v6.15

v6.15-rc1

v6.15-rc2

v6.15-rc3

v6.15-rc4

v6.15-rc5

v6.15-rc6

v6.15-rc7

v6.15.1

v6.15.10

v6.15.2

v6.15.3

v6.15.4

v6.15.5

v6.15.6

v6.15.7

v6.15.8

v6.15.9

v6.16

v6.16-rc1

v6.16-rc2

v6.16-rc3

v6.16-rc4

v6.16-rc5

v6.16-rc6

v6.16-rc7

v6.16.1

v6.2

v6.2-rc1

v6.2-rc2

v6.2-rc3

v6.2-rc4

v6.2-rc5

v6.2-rc6

v6.2-rc7

v6.2-rc8

v6.3

v6.3-rc1

v6.3-rc2

v6.3-rc3

v6.3-rc4

v6.3-rc5

v6.3-rc6

v6.3-rc7

v6.4

v6.4-rc1

v6.4-rc2

v6.4-rc3

v6.4-rc4

v6.4-rc5

v6.4-rc6

v6.4-rc7

v6.5

v6.5-rc1

v6.5-rc2

v6.5-rc3

v6.5-rc4

v6.5-rc5

v6.5-rc6

v6.5-rc7

v6.6

v6.6-rc1

v6.6-rc2

v6.6-rc3

v6.6-rc4

v6.6-rc5

v6.6-rc6

v6.6-rc7

v6.6.1

v6.6.10

v6.6.100

v6.6.101

v6.6.102

v6.6.11

v6.6.12

v6.6.13

v6.6.14

v6.6.15

v6.6.16

v6.6.17

v6.6.18

v6.6.19

v6.6.2

v6.6.20

v6.6.21

v6.6.22

v6.6.23

v6.6.24

v6.6.25

v6.6.26

v6.6.27

v6.6.28

v6.6.29

v6.6.3

v6.6.30

v6.6.31

v6.6.32

v6.6.33

v6.6.34

v6.6.35

v6.6.36

v6.6.37

v6.6.38

v6.6.39

v6.6.4

v6.6.40

v6.6.41

v6.6.42

v6.6.43

v6.6.44

v6.6.45

v6.6.46

v6.6.47

v6.6.48

v6.6.49

v6.6.5

v6.6.50

v6.6.51

v6.6.52

v6.6.53

v6.6.54

v6.6.55

v6.6.56

v6.6.57

v6.6.58

v6.6.59

v6.6.6

v6.6.60

v6.6.61

v6.6.62

v6.6.63

v6.6.64

v6.6.65

v6.6.66

v6.6.67

v6.6.68

v6.6.69

v6.6.7

v6.6.70

v6.6.71

v6.6.72

v6.6.73

v6.6.74

v6.6.75

v6.6.76

v6.6.77

v6.6.78

v6.6.79

v6.6.8

v6.6.80

v6.6.81

v6.6.82

v6.6.83

v6.6.84

v6.6.85

v6.6.86

v6.6.87

v6.6.88

v6.6.89

v6.6.9

v6.6.90

v6.6.91

v6.6.92

v6.6.93

v6.6.94

v6.6.95

v6.6.96

v6.6.97

v6.6.98

v6.6.99

v6.7

v6.7-rc1

v6.7-rc2

v6.7-rc3

v6.7-rc4

v6.7-rc5

v6.7-rc6

v6.7-rc7

v6.7-rc8

v6.8

v6.8-rc1

v6.8-rc2

v6.8-rc3

v6.8-rc4

v6.8-rc5

v6.8-rc6

v6.8-rc7

v6.9

v6.9-rc1

v6.9-rc2

v6.9-rc3

v6.9-rc4

v6.9-rc5

v6.9-rc6

v6.9-rc7

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38692.json"

vanir_signatures

[
    {
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-3a663ad2",
        "deprecated": false,
        "target": {
            "file": "fs/exfat/super.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "287979977646569438561472069786238864340",
                "98439136091736233295156537534036011056",
                "130520988694193191847309104044538682340",
                "210082837988046089616723537539733881773",
                "297539795340547896495803480351246979324",
                "62283024546041977556516429049883808734",
                "159769400204728882529283944168655692157",
                "172665504412284596424900734823123457760",
                "263388791930598084397397441318999823721",
                "110691290604550396544359334430244072732",
                "123330894058159819435103612115640820121",
                "111224437064372194578201176714007398205",
                "183277761885586768677519466042228955761",
                "18315959744379929495878423056239323046",
                "332837051080753395664149473518531568404",
                "31034835170379503314626911728402725535",
                "86074094098556825240495764703637828386",
                "264775406190590837054576809421122242139",
                "136371926142405552767310266427934067720",
                "47412190801197939004687152080666948076",
                "320855406874430754923095377311119302682",
                "5055280984937673361533746666695776759",
                "91526873137341429060676578965461674686",
                "135954284715442525590514388622285679365",
                "28173629654705455313720772253361522979",
                "262731865190895671666441513956802756744",
                "127378147918681050727780803338519924714",
                "27899135388811198207578868089747376911",
                "235359167236347033660353532807903162925",
                "118597161129218167785307479871667651195",
                "189259690767464436010712360361476449010",
                "214540467750996094472343315460964051607",
                "225668498412496279826905226533570522145",
                "204963535860521317840595432332856289227",
                "145632836471154027547889002236637041240",
                "104881310087119359681572959906506566976",
                "306883271621313833949287434186435831162"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-3fc204d3",
        "deprecated": false,
        "target": {
            "function": "__exfat_fill_super",
            "file": "fs/exfat/super.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 814.0,
            "function_hash": "46043784942184880876515258005338649475"
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-56619e6a",
        "deprecated": false,
        "target": {
            "function": "exfat_count_dir_entries",
            "file": "fs/exfat/dir.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 722.0,
            "function_hash": "175128792248120392296281749389768256249"
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-594071d1",
        "deprecated": false,
        "target": {
            "function": "exfat_fill_super",
            "file": "fs/exfat/super.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 1950.0,
            "function_hash": "91404022924654409256316736674774701894"
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-6ee3af7f",
        "deprecated": false,
        "target": {
            "function": "exfat_read_root",
            "file": "fs/exfat/super.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 1497.0,
            "function_hash": "171215609767820336018900247811723940660"
        }
    },
    {
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-723b5c05",
        "deprecated": false,
        "target": {
            "file": "fs/exfat/namei.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "322797181441925007182953702231821707329",
                "280087246540576465068034023154680845660",
                "310466119126620327276212670415664853724",
                "232129888492251777334774355772438081301",
                "84800916171736288205555262793781806634",
                "275712039324205108139527380469342010025",
                "221248162431109261746806878845294110540",
                "315297764493019680029647061223872528043"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-7773f792",
        "deprecated": false,
        "target": {
            "function": "exfat_find_dir_entry",
            "file": "fs/exfat/dir.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 3371.0,
            "function_hash": "124549081789448651979225942165199699358"
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-9cc0af33",
        "deprecated": false,
        "target": {
            "function": "exfat_count_num_clusters",
            "file": "fs/exfat/fatent.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 570.0,
            "function_hash": "103989914907863969858669326130316572167"
        }
    },
    {
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-acf93707",
        "deprecated": false,
        "target": {
            "file": "fs/exfat/dir.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "124093884980676403654106115989689407544",
                "227398920015315454471470127370796610503",
                "88077562265436251755429171016901063079",
                "104676466022511732485875907293453949513",
                "316639525761199737255643091691291686488",
                "84375483490616903425614799254548625953",
                "202840931315777637163581510192314769653",
                "191689469322977674256160515287059830785",
                "164476782892277939016014850625082164802",
                "269153315233461206804612695048609008156",
                "53137992348099410847486595726161074533",
                "272885973249140811480943681436041550430",
                "84800916171736288205555262793781806634",
                "275712039324205108139527380469342010025",
                "221248162431109261746806878845294110540",
                "35691647777484311671972821667085789267"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-e771859f",
        "deprecated": false,
        "target": {
            "function": "exfat_check_dir_empty",
            "file": "fs/exfat/namei.c"
        },
        "signature_version": "v1",
        "digest": {
            "length": 793.0,
            "function_hash": "63553075166090444752666308126044650048"
        }
    },
    {
        "signature_type": "Line",
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@868f23286c1a13162330fa6c614fe350f78e3f82",
        "id": "CVE-2025-38692-f6f229d6",
        "deprecated": false,
        "target": {
            "file": "fs/exfat/fatent.c"
        },
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "157226035434880795947398414522754340122",
                "279347204241534876537137913312952531460",
                "20724986383765540390756402148918541548"
            ],
            "threshold": 0.9
        }
    }
]