CVE-2025-68210: erofs: avoid infinite loop due to incomplete zstd-compressed data
In the Linux kernel, the following vulnerability has been resolved:
erofs: avoid infinite loop due to incomplete zstd-compressed data
Currently, the decompression logic incorrectly spins if compressed data is truncated in crafted (deliberately corrupted) images.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-68210?
CVE-2025-68210 is considered a high severity vulnerability due to the potential for denial of service resulting from an infinite loop.
How do I fix CVE-2025-68210?
To fix CVE-2025-68210, you should update your Linux kernel to a patched version that addresses the decompression logic vulnerability.
What does CVE-2025-68210 affect?
CVE-2025-68210 affects the Linux kernel's decompression logic when handling zstd-compressed data.
Can CVE-2025-68210 be exploited remotely?
CVE-2025-68210 may be exploited remotely if a vulnerable system processes deliberately corrupted compressed images.
What happens if CVE-2025-68210 is exploited?
Exploitation of CVE-2025-68210 could lead to a denial of service due to the infinite loop in the kernel, affecting system availability.