NetSight
IP …
high7.8

CVE-2025-22079

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth field is 16-bit…

Impact

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth field is 16-bit (__le16), but the actual maximum depth is limited to OCFS2_MAX_PATH_DEPTH. Add a check to prevent out-of-bounds access if l_tree_depth has an invalid value, which may occur when reading from a corrupted mounted disk [1].

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.16 before 5.4.292
from 5.5 before 5.10.236
from 5.11 before 5.15.180
from 5.16 before 6.1.134
from 6.2 before 6.6.87
from 6.7 before 6.12.23

Weakness classification

CWE-125

References