CVE-2025-21772

Updated: 2025-11-10 00:07:25.366807

Description:

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.8

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

AlmaLinux 9.2 ESU kernel 5.14.0 7.8 HIGH Released CLSA-2025:1764151168 2025-11-27 10:27:38
CentOS 6 ELS kernel 2.6.32 7.8 HIGH In Testing 2025-11-05 04:54:59
CentOS 7 ELS kernel 3.10.0 7.8 HIGH In Testing 2025-11-05 04:54:57
CentOS 8.4 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1763731262 2025-11-21 21:22:38
CentOS 8.5 ELS kernel 4.18.0 7.8 HIGH Released CLSA-2025:1763734783 2025-11-21 21:22:39
CentOS Stream 8 ELS kernel 4.18.0 7.8 HIGH In Testing CLSA-2025:1763722365 2025-12-08 17:59:32
CloudLinux 7 ELS kernel 3.10.0 7.8 HIGH Ignored 2025-11-07 22:57:32 CloudLinux 6 and 7 support is limited and provided on demand. We strongly recommend upgrading to Clo...
Oracle Linux 6 ELS kernel 2.6.32 7.8 HIGH Needs Triage 2025-11-03 06:20:25
Oracle Linux 7 ELS kernel 3.10.0 7.8 HIGH Needs Triage 2025-11-03 06:20:28
Oracle Linux 7 ELS kernel-uek 5.4.17 7.8 HIGH Released CLSA-2025:1746479711 2025-05-08 04:11:27
Total: 16