CVE-2025-37785: ext4: fix OOB read when checking dotdot dir

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 5.15.180.1-1
2. Upgrade

   Upgrade to a fixed release to a version that resolves this vulnerability.

   Fixed in 6.6.92.2-1
3. Upgrade

   Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

   Fixed in 4.4.0-1148.154
4. Upgrade

   Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

   Fixed in 4.15.0-1193.208~14.04.1
5. Upgrade

   Upgrade ubuntu/linux-lts-xenial to a version that resolves this vulnerability.

   Fixed in 4.4.0-273.307~14.04.1
6. Upgrade

   Upgrade ubuntu/linux to a version that resolves this vulnerability.

   Fixed in 4.4.0-273.307
7. Upgrade

   Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

   Fixed in 4.4.0-1186.201
8. Upgrade

   Upgrade ubuntu/linux-aws-hwe to a version that resolves this vulnerability.

   Fixed in 4.15.0-1185.198~16.04.1
9. Upgrade

   Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

   Fixed in 4.15.0-1193.208~16.04.1
10. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 4.15.0-1178.195~16.04.1
11. Upgrade

    Upgrade ubuntu/linux-hwe to a version that resolves this vulnerability.

    Fixed in 4.15.0-242.254~16.04.1
12. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.4.0-1149.160
13. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1148.159~16.04.1
14. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.4.0-1119.126
15. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 4.15.0-242.254
16. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 4.15.0-1185.198
17. Upgrade

    Upgrade ubuntu/linux-aws-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1151.161~18.04.1
18. Upgrade

    Upgrade ubuntu/linux-azure-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1193.208
19. Upgrade

    Upgrade ubuntu/linux-azure-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1154.161~18.04.1
20. Upgrade

    Upgrade ubuntu/linux-gcp-4.15 to a version that resolves this vulnerability.

    Fixed in 4.15.0-1178.195
21. Upgrade

    Upgrade ubuntu/linux-gcp-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1154.163~18.04.1
22. Upgrade

    Upgrade ubuntu/linux-hwe-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-222.242~18.04.1
23. Upgrade

    Upgrade ubuntu/linux-ibm-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1097.102~18.04.1
24. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 4.15.0-1168.173
25. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 4.15.0-1147.158
26. Upgrade

    Upgrade ubuntu/linux-oracle-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1149.159~18.04.1
27. Upgrade

    Upgrade ubuntu/linux-raspi-5.4 to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.147~18.04.1
28. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2123.129
29. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2102.108
30. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-1140.151
31. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 4.15.0-2086.92
32. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.4.0-222.242
33. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.4.0-1151.161
34. Upgrade

    Upgrade ubuntu/linux-aws-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1086.93~20.04.1
35. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.4.0-1154.161
36. Upgrade

    Upgrade ubuntu/linux-azure-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1091.100~20.04.1
37. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.4.0-1110.117
38. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1154.163
39. Upgrade

    Upgrade ubuntu/linux-gcp-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1085.94~20.04.1
40. Upgrade

    Upgrade ubuntu/linux-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-142.152~20.04.1
41. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1097.102
42. Upgrade

    Upgrade ubuntu/linux-ibm-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1078.81~20.04.1
43. Upgrade

    Upgrade ubuntu/linux-intel-iotg-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1083.89~20.04.1
44. Upgrade

    Upgrade ubuntu/linux-iot to a version that resolves this vulnerability.

    Fixed in 5.4.0-1055.58
45. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.4.0-1138.147
46. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-142.152~20.04.1
47. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1039.39~20.04.1
48. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.4.0-1149.159
49. Upgrade

    Upgrade ubuntu/linux-oracle-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1083.89~20.04.1
50. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.4.0-1134.147
51. Upgrade

    Upgrade ubuntu/linux-riscv-5.15 to a version that resolves this vulnerability.

    Fixed in 5.15.0-1081.85~20.04.1
52. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.4.0-1069.73
53. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1151.161+fips1
54. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1155.162+fips1
55. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1125.135
56. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.4.0-1154.163+fips1
57. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 5.15.0-142.152
58. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 5.15.0-1086.93
59. Upgrade

    Upgrade ubuntu/linux-aws-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1040.42~22.04.1
60. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 5.15.0-1091.100
61. Upgrade

    Upgrade ubuntu/linux-azure-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1040.46~22.04.1
62. Upgrade

    Upgrade ubuntu/linux-azure-fde to a version that resolves this vulnerability.

    Fixed in 5.15.0-1091.100.1
63. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1085.94
64. Upgrade

    Upgrade ubuntu/linux-gcp-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1041.43~22.04.1
65. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 5.15.0-1083.89
66. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 5.15.0-1068.76
67. Upgrade

    Upgrade ubuntu/linux-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-85.85~22.04.1
68. Upgrade

    Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1078.81
69. Upgrade

    Upgrade ubuntu/linux-ibm-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1038.38~22.04.1
70. Upgrade

    Upgrade ubuntu/linux-intel-iotg to a version that resolves this vulnerability.

    Fixed in 5.15.0-1081.87
71. Upgrade

    Upgrade ubuntu/linux-kvm to a version that resolves this vulnerability.

    Fixed in 5.15.0-1082.87
72. Upgrade

    Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

    Fixed in 5.15.0-142.152
73. Upgrade

    Upgrade ubuntu/linux-lowlatency-hwe-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-85.85.1~22.04.1
74. Upgrade

    Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

    Fixed in 5.15.0-1080.81
75. Upgrade

    Upgrade ubuntu/linux-nvidia-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1040.43~22.04.1
76. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

    Fixed in 5.15.0-1039.39
77. Upgrade

    Upgrade ubuntu/linux-nvidia-tegra-igx to a version that resolves this vulnerability.

    Fixed in 5.15.0-1028.28
78. Upgrade

    Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

    Fixed in 5.15.0-1083.89
79. Upgrade

    Upgrade ubuntu/linux-oracle-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-1037.38~22.04.1
80. Upgrade

    Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

    Fixed in 5.15.0-1080.83
81. Upgrade

    Upgrade ubuntu/linux-riscv-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.0-86.87~22.04.1
82. Upgrade

    Upgrade ubuntu/linux-xilinx-zynqmp to a version that resolves this vulnerability.

    Fixed in 5.15.0-1050.54
83. Upgrade

    Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

    Fixed in 5.15.0-1069.71
84. Upgrade

    Upgrade ubuntu/linux-intel-iot-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1079.81
85. Upgrade

    Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

    Fixed in 5.15.0-1086.95
86. Upgrade

    Upgrade ubuntu/linux-realtime-6.8 to a version that resolves this vulnerability.

    Fixed in 6.8.1-1035.36~22.04.1
87. Upgrade

    Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1086.93+fips1
88. Upgrade

    Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1091.100+fips1
89. Upgrade

    Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-142.152+fips1
90. Upgrade

    Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

    Fixed in 5.15.0-1085.94+fips1
91. Upgrade

    Upgrade ubuntu/linux to a version that resolves this vulnerability.

    Fixed in 6.8.0-85.85
92. Upgrade

    Upgrade ubuntu/linux-aws to a version that resolves this vulnerability.

    Fixed in 6.8.0-1040.42
93. Upgrade

    Upgrade ubuntu/linux-azure to a version that resolves this vulnerability.

    Fixed in 6.8.0-1040.46
94. Upgrade

    Upgrade ubuntu/linux-azure-6.11 to a version that resolves this vulnerability.

    Fixed in 6.11.0-1018.18~24.04.1
95. Upgrade

    Upgrade ubuntu/linux-azure-nvidia to a version that resolves this vulnerability.

    Fixed in 6.8.0-1025.27
96. Upgrade

    Upgrade ubuntu/linux-gcp to a version that resolves this vulnerability.

    Fixed in 6.8.0-1041.43
97. Upgrade

    Upgrade ubuntu/linux-gcp-6.11 to a version that resolves this vulnerability.

    Fixed in 6.11.0-1016.16~24.04.1
98. Upgrade

    Upgrade ubuntu/linux-gke to a version that resolves this vulnerability.

    Fixed in 6.8.0-1037.41
99. Upgrade

    Upgrade ubuntu/linux-gkeop to a version that resolves this vulnerability.

    Fixed in 6.8.0-1024.26
100. Upgrade

     Upgrade ubuntu/linux-hwe-6.11 to a version that resolves this vulnerability.

     Fixed in 6.11.0-28.28~24.04.1
101. Upgrade

     Upgrade ubuntu/linux-ibm to a version that resolves this vulnerability.

     Fixed in 6.8.0-1038.38
102. Upgrade

     Upgrade ubuntu/linux-lowlatency to a version that resolves this vulnerability.

     Fixed in 6.8.0-85.85.1
103. Upgrade

     Upgrade ubuntu/linux-lowlatency-hwe-6.11 to a version that resolves this vulnerability.

     Fixed in 6.11.0-1015.16~24.04.2
104. Upgrade

     Upgrade ubuntu/linux-nvidia to a version that resolves this vulnerability.

     Fixed in 6.8.0-1040.43
105. Upgrade

     Upgrade ubuntu/linux-nvidia-6.11 to a version that resolves this vulnerability.

     Fixed in 6.11.0-1012.12
106. Upgrade

     Upgrade ubuntu/linux-nvidia-lowlatency to a version that resolves this vulnerability.

     Fixed in 6.8.0-1040.43.1
107. Upgrade

     Upgrade ubuntu/linux-nvidia-tegra to a version that resolves this vulnerability.

     Fixed in 6.8.0-1012.12
108. Upgrade

     Upgrade ubuntu/linux-oem-6.11 to a version that resolves this vulnerability.

     Fixed in 6.11.0-1024.24
109. Upgrade

     Upgrade ubuntu/linux-oracle to a version that resolves this vulnerability.

     Fixed in 6.8.0-1037.38
110. Upgrade

     Upgrade ubuntu/linux-raspi to a version that resolves this vulnerability.

     Fixed in 6.8.0-1040.44
111. Upgrade

     Upgrade ubuntu/linux-xilinx to a version that resolves this vulnerability.

     Fixed in 6.8.0-1018.19
112. Upgrade

     Upgrade ubuntu/linux-bluefield to a version that resolves this vulnerability.

     Fixed in 6.8.0-1012.16
113. Upgrade

     Upgrade ubuntu/linux-raspi-realtime to a version that resolves this vulnerability.

     Fixed in 6.8.0-2031.32
114. Upgrade

     Upgrade ubuntu/linux-realtime to a version that resolves this vulnerability.

     Fixed in 6.8.1-1035.36
115. Upgrade

     Upgrade ubuntu/linux-aws-fips to a version that resolves this vulnerability.

     Fixed in 6.8.0-1040.42+fips1
116. Upgrade

     Upgrade ubuntu/linux-azure-fips to a version that resolves this vulnerability.

     Fixed in 6.8.0-1040.46+fips1
117. Upgrade

     Upgrade ubuntu/linux-fips to a version that resolves this vulnerability.

     Fixed in 6.8.0-85.85+fips1
118. Upgrade

     Upgrade ubuntu/linux-gcp-fips to a version that resolves this vulnerability.

     Fixed in 6.8.0-1041.43+fips1
119. Upgrade

     Upgrade debian/linux to a version that resolves this vulnerability.

     Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1

Event History

Parent advisories

This vulnerability appears in the following advisories.

• DSA-5907

Peer vulnerabilities

Found alongside the following vulnerabilities.

• DLA-4178-1
• DLA-4193-1

Frequently Asked Questions