CVE-2025-39924
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-01

Last updated on: 2025-12-11

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: erofs: fix invalid algorithm for encoded extents The current algorithm sanity checks do not properly apply to new encoded extents. Unify the algorithm check with Z_EROFS_COMPRESSION(_RUNTIME)_MAX and ensure consistency with sbi->available_compr_algs.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-01
Last Modified
2025-12-11
Generated
2026-06-16
AI Q&A
2025-10-01
EPSS Evaluated
2026-06-15
NVD
CVE-2025-39924
Affected Vendors & Products
Showing 6 associated CPEs
Vendor Product Version / Range
linux linux_kernel From 6.15 (inc) to 6.16.8 (exc)
linux linux_kernel 6.17
linux linux_kernel 6.17
linux linux_kernel 6.17
linux linux_kernel 6.17
linux linux_kernel 6.17
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-NVD-CWE-noinfo
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel relates to the erofs filesystem where the algorithm used for encoded extents was invalid. The existing sanity checks did not properly apply to new encoded extents, leading to inconsistencies. The fix involved unifying the algorithm check with Z_EROFS_COMPRESSION(_RUNTIME)_MAX and ensuring consistency with the available compression algorithms in the system.

Impact Analysis

The vulnerability could potentially cause issues with the handling of encoded extents in the erofs filesystem, possibly leading to incorrect processing or errors when accessing compressed data. This might affect system stability or data integrity when using the affected filesystem.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-39924. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart