CVE-2025-21772

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
27/02/2025
Last modified:
13/03/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> partitions: mac: fix handling of bogus partition table<br /> <br /> Fix several issues in partition probing:<br /> <br /> - The bailout for a bad partoffset must use put_dev_sector(), since the<br /> preceding read_part_sector() succeeded.<br /> - If the partition table claims a silly sector size like 0xfff bytes<br /> (which results in partition table entries straddling sector boundaries),<br /> bail out instead of accessing out-of-bounds memory.<br /> - We must not assume that the partition table contains proper NUL<br /> termination - use strnlen() and strncmp() instead of strlen() and<br /> strcmp().

Impact