{
  "cveId": "CVE-2025-40241",
  "url": "https://patchblox.com/security/cve/CVE-2025-40241",
  "summary": "CVE-2025-40241 is fixed in linux on 1 platform by DEBIAN-CVE-2025-40241 (version 6.17.6-1), released December 4, 2025. It is not reported as exploited. Patch Radar priority: High.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: fix crafted invalid cases for encoded ext...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  erofs: fix crafted invalid cases for encoded extents  Robert recently reported two corrupted images that can cause system crashes, which are related to the new encoded extents introduced in Linux 6.15:    - The first one [1] has plen != 0 (e.g. plen == 0x2000000) but     (plen \u0026 Z_EROFS_EXTENT_PLEN_MASK) == 0. It is used to represent     special extents such as sparse extents (!EROFS_MAP_MAPPED), but     previously only plen == 0 was handled;    - The second one [2] has pa 0xffffffffffdcffed and plen 0xb4000,     then \u0022cur [0xfffffffffffff000] \u002B= bvec.bv_len [0x1000]\u0022 in     \u0022} while ((cur \u002B= bvec.bv_len) \u003C end);\u0022 wraps around, causing an     out-of-bound access of pcl-\u003Ecompressed_bvecs[] in     z_erofs_submit_queue().  EROFS only supports 48-bit physical block     addresses (up to 1EiB for 4k blocks), so add a sanity check to     enforce this.",
  "published": "2025-12-04T16:16:17Z",
  "severity": "high",
  "cvss": 7.8,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
  "epss": 0.00153,
  "epssPercentile": 0.04479,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.17.6-1",
      "fix": "DEBIAN-CVE-2025-40241",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-40241",
      "released": "2025-12-04T16:16:17Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T13:06:02Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}