Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2025-38692

Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
04/09/2025
Última modificación:
24/11/2025

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> exfat: add cluster chain loop check for dir<br /> <br /> An infinite loop may occur if the following conditions occur due to<br /> file system corruption.<br /> <br /> (1) Condition for exfat_count_dir_entries() to loop infinitely.<br /> - The cluster chain includes a loop.<br /> - There is no UNUSED entry in the cluster chain.<br /> <br /> (2) Condition for exfat_create_upcase_table() to loop infinitely.<br /> - The cluster chain of the root directory includes a loop.<br /> - There are no UNUSED entry and up-case table entry in the cluster<br /> chain of the root directory.<br /> <br /> (3) Condition for exfat_load_bitmap() to loop infinitely.<br /> - The cluster chain of the root directory includes a loop.<br /> - There are no UNUSED entry and bitmap entry in the cluster chain<br /> of the root directory.<br /> <br /> (4) Condition for exfat_find_dir_entry() to loop infinitely.<br /> - The cluster chain includes a loop.<br /> - The unused directory entries were exhausted by some operation.<br /> <br /> (5) Condition for exfat_check_dir_empty() to loop infinitely.<br /> - The cluster chain includes a loop.<br /> - The unused directory entries were exhausted by some operation.<br /> - All files and sub-directories under the directory are deleted.<br /> <br /> This commit adds checks to break the above infinite loop.

Productos y versiones vulnerables

CPE Desde Hasta
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 5.7 (incluyendo) 6.6.103 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.7 (incluyendo) 6.12.43 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.13 (incluyendo) 6.15.11 (excluyendo)
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* 6.16 (incluyendo) 6.16.2 (excluyendo)