In the Linux kernel, the following vulnerability has been resolved:
ext4: avoid potential buffer over-read in parseapplysbmountoptions()
Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure smountopts is NUL terminated. Harden parseapplysbmountoptions() by treating smountopts as a potential __nonstring.
[
{
"id": "CVE-2025-40198-260801fa",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a0cf438320cdb783e0378570744c0ef0d83e934",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243253091856895064186234533542065805823",
"241742486522580608581771158009263176566",
"318411116927692957934063645923499440633",
"125531004106643796764114614228811635901",
"195803648650022727439464989569926972366",
"74374446377422350088830075111676832309",
"308428733138672184308776959792844373902",
"304499124256800468313930143483651801371",
"93094971699019160037001497450845927462",
"90309265943885096838450361488530043854",
"147068682450489684122525589089193553373",
"44484371210019070790339797398322851441",
"122152640731902602389366871450823241333",
"26567742250547690376368450926527045549",
"4262241932671670824972725655549527947",
"73290236769066492872578691847120132257",
"260393226707728127937616819542859217001",
"131194905392754355989949477764029661442",
"304392028224783586379868436945031300186",
"120167372074642456152719612280418850311",
"214976540824882538056223573808501894997",
"277216656895248310226903554029026510418",
"203022925539004598441382510880273638758"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-3ab6c89b",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2bac84fde28fb6a88817b8b761abda17a1d300b",
"signature_type": "Function",
"digest": {
"function_hash": "216552969603152971033506012971407354688",
"length": 31277.0
},
"deprecated": false,
"target": {
"function": "ext4_fill_super",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-3dd96769",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243253091856895064186234533542065805823",
"241742486522580608581771158009263176566",
"318411116927692957934063645923499440633",
"125531004106643796764114614228811635901",
"195803648650022727439464989569926972366",
"74374446377422350088830075111676832309",
"308428733138672184308776959792844373902",
"304499124256800468313930143483651801371",
"93094971699019160037001497450845927462",
"90309265943885096838450361488530043854",
"147068682450489684122525589089193553373",
"44484371210019070790339797398322851441",
"122152640731902602389366871450823241333",
"26567742250547690376368450926527045549",
"4262241932671670824972725655549527947",
"73290236769066492872578691847120132257",
"260393226707728127937616819542859217001",
"131194905392754355989949477764029661442",
"304392028224783586379868436945031300186",
"120167372074642456152719612280418850311",
"214976540824882538056223573808501894997",
"277216656895248310226903554029026510418",
"203022925539004598441382510880273638758"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-438eeba2",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e651294218d2684302ee5ed95ccf381646f3e5b4",
"signature_type": "Function",
"digest": {
"function_hash": "191095364612336638147631605629601709039",
"length": 1116.0
},
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-43caa22b",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bf46ff83a0ef11836e38ebd72cdc5107209342d",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"329770244732956270546958551813601292374",
"261700485349677555782565054190226958560",
"278779011964739034492249182647812762033",
"15023508356845767553073815924194773283",
"244355151565609595902877864771577752771",
"225940506929340360391940398841718150510",
"174579800384906241054397131143052759094",
"324479459781749583087654178369856337663",
"236484624683331817581450280545912609596",
"288570127801526313377545619175363154749",
"310620642577648559941548360744265134280",
"33690756005756991009539843461856052747",
"187303358610396764676795782252162123522",
"85107811618925325040471561929847806941",
"145696622828116775913801029534617641972"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-46d31af4",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@b2bac84fde28fb6a88817b8b761abda17a1d300b",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"329770244732956270546958551813601292374",
"261700485349677555782565054190226958560",
"278779011964739034492249182647812762033",
"15023508356845767553073815924194773283",
"244355151565609595902877864771577752771",
"225940506929340360391940398841718150510",
"174579800384906241054397131143052759094",
"324479459781749583087654178369856337663",
"236484624683331817581450280545912609596",
"288570127801526313377545619175363154749",
"310620642577648559941548360744265134280",
"33690756005756991009539843461856052747",
"187303358610396764676795782252162123522",
"85107811618925325040471561929847806941",
"145696622828116775913801029534617641972"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-53dfe2c8",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2a0cf438320cdb783e0378570744c0ef0d83e934",
"signature_type": "Function",
"digest": {
"function_hash": "191095364612336638147631605629601709039",
"length": 1116.0
},
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-7e884183",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6e94557cd05adc82fae0400f6e17745563e5412",
"signature_type": "Function",
"digest": {
"function_hash": "191095364612336638147631605629601709039",
"length": 1116.0
},
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-91ff55df",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01829af7656b56d83682b3491265d583d502e502",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243253091856895064186234533542065805823",
"241742486522580608581771158009263176566",
"318411116927692957934063645923499440633",
"125531004106643796764114614228811635901",
"195803648650022727439464989569926972366",
"74374446377422350088830075111676832309",
"308428733138672184308776959792844373902",
"304499124256800468313930143483651801371",
"93094971699019160037001497450845927462",
"90309265943885096838450361488530043854",
"147068682450489684122525589089193553373",
"44484371210019070790339797398322851441",
"122152640731902602389366871450823241333",
"26567742250547690376368450926527045549",
"4262241932671670824972725655549527947",
"73290236769066492872578691847120132257",
"260393226707728127937616819542859217001",
"131194905392754355989949477764029661442",
"304392028224783586379868436945031300186",
"120167372074642456152719612280418850311",
"214976540824882538056223573808501894997",
"277216656895248310226903554029026510418",
"203022925539004598441382510880273638758"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-b96012ff",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@e651294218d2684302ee5ed95ccf381646f3e5b4",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243253091856895064186234533542065805823",
"241742486522580608581771158009263176566",
"318411116927692957934063645923499440633",
"125531004106643796764114614228811635901",
"195803648650022727439464989569926972366",
"74374446377422350088830075111676832309",
"308428733138672184308776959792844373902",
"304499124256800468313930143483651801371",
"93094971699019160037001497450845927462",
"90309265943885096838450361488530043854",
"147068682450489684122525589089193553373",
"44484371210019070790339797398322851441",
"122152640731902602389366871450823241333",
"26567742250547690376368450926527045549",
"4262241932671670824972725655549527947",
"73290236769066492872578691847120132257",
"260393226707728127937616819542859217001",
"131194905392754355989949477764029661442",
"304392028224783586379868436945031300186",
"120167372074642456152719612280418850311",
"214976540824882538056223573808501894997",
"277216656895248310226903554029026510418",
"203022925539004598441382510880273638758"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-e6b536dc",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7bf46ff83a0ef11836e38ebd72cdc5107209342d",
"signature_type": "Function",
"digest": {
"function_hash": "140872814041393361148248388917689850476",
"length": 29752.0
},
"deprecated": false,
"target": {
"function": "ext4_fill_super",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-f3862f52",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@01829af7656b56d83682b3491265d583d502e502",
"signature_type": "Function",
"digest": {
"function_hash": "191095364612336638147631605629601709039",
"length": 1116.0
},
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-f56269be",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8",
"signature_type": "Function",
"digest": {
"function_hash": "191095364612336638147631605629601709039",
"length": 1116.0
},
"deprecated": false,
"target": {
"function": "parse_apply_sb_mount_options",
"file": "fs/ext4/super.c"
}
},
{
"id": "CVE-2025-40198-f7f2efe9",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@a6e94557cd05adc82fae0400f6e17745563e5412",
"signature_type": "Line",
"digest": {
"threshold": 0.9,
"line_hashes": [
"243253091856895064186234533542065805823",
"241742486522580608581771158009263176566",
"318411116927692957934063645923499440633",
"125531004106643796764114614228811635901",
"195803648650022727439464989569926972366",
"74374446377422350088830075111676832309",
"308428733138672184308776959792844373902",
"304499124256800468313930143483651801371",
"93094971699019160037001497450845927462",
"90309265943885096838450361488530043854",
"147068682450489684122525589089193553373",
"44484371210019070790339797398322851441",
"122152640731902602389366871450823241333",
"26567742250547690376368450926527045549",
"4262241932671670824972725655549527947",
"73290236769066492872578691847120132257",
"260393226707728127937616819542859217001",
"131194905392754355989949477764029661442",
"304392028224783586379868436945031300186",
"120167372074642456152719612280418850311",
"214976540824882538056223573808501894997",
"277216656895248310226903554029026510418",
"203022925539004598441382510880273638758"
]
},
"deprecated": false,
"target": {
"file": "fs/ext4/super.c"
}
}
]