CVE-2025-68794
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
13/01/2026
Last modified:
13/01/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iomap: adjust read range correctly for non-block-aligned positions<br />
<br />
iomap_adjust_read_range() assumes that the position and length passed in<br />
are block-aligned. This is not always the case however, as shown in the<br />
syzbot generated case for erofs. This causes too many bytes to be<br />
skipped for uptodate blocks, which results in returning the incorrect<br />
position and length to read in. If all the blocks are uptodate, this<br />
underflows length and returns a position beyond the folio.<br />
<br />
Fix the calculation to also take into account the block offset when<br />
calculating how many bytes can be skipped for uptodate blocks.



