CVE-2025-39924: erofs: fix invalid algorithm for encoded extents
In the Linux kernel, the following vulnerability has been resolved:
erofs: fix invalid algorithm for encoded extents
The current algorithm sanity checks do not properly apply to new encoded extents.
Unify the algorithm check with ZEROFSCOMPRESSION(RUNTIME)MAX and ensure consistency with sbi->availablecompralgs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39924?
CVE-2025-39924 has a medium severity rating due to its potential impact on the Linux kernel's encoding practices.
How do I fix CVE-2025-39924?
Fixing CVE-2025-39924 involves updating the Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are impacted by CVE-2025-39924?
CVE-2025-39924 affects various versions of the Linux kernel that utilize the erofs compression algorithm.
What are the symptoms of the CVE-2025-39924 vulnerability?
The symptoms of CVE-2025-39924 may include improper handling of encoded extents, leading to potential data integrity issues.
Is there a workaround for CVE-2025-39924?
Currently, the best approach for CVE-2025-39924 is to apply the kernel patch rather than relying on a workaround.