CVE-2025-21772
Description
In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().
Predictions
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
| OS | Version | Status | Fixed in |
|---|---|---|---|
| sles | affected | | |
| debian | bookworm | fixed | 6.1.129-1 |
| debian | bullseye | fixed | 5.10.237-1 |
| debian | forky | fixed | 6.12.16-1 |
| debian | sid | fixed | 6.12.16-1 |
| debian | trixie | fixed | 6.12.16-1 |
| linux-kernel | affected | 5.4.291 | |
| linux-kernel | 6.14 | affected | |
References
- https://git.kernel.org/stable/c/213ba5bd81b7e97ac6e6190b8f3bc6ba76123625
- https://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5
- https://git.kernel.org/stable/c/40a35d14f3c0dc72b689061ec72fc9b193f37d1f
- https://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f
- https://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27
- https://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0
- https://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b
- https://git.kernel.org/stable/c/a3e77da9f843e4ab93917d30c314f0283e28c124
- https://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://www.suse.com/security/cve/CVE-2025-21772.html
- https://security-tracker.debian.org/tracker/CVE-2025-21772
CWEs
CWE-787
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.