{
  "cveId": "CVE-2025-68251",
  "url": "https://patchblox.com/security/cve/CVE-2025-68251",
  "summary": "CVE-2025-68251 is fixed in linux on 1 platform, first by DEBIAN-CVE-2025-68251, released December 16, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  erofs: avoid infinite loops due to corrupted sub...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  erofs: avoid infinite loops due to corrupted subpage compact indexes  Robert reported an infinite loop observed by two crafted images.  The root cause is that \u0060clusterofs\u0060 can be larger than \u0060lclustersize\u0060 for !NONHEAD \u0060lclusters\u0060 in corrupted subpage compact indexes, e.g.:    blocksize = lclustersize = 512   lcn = 6   clusterofs = 515  Move the corresponding check for full compress indexes to \u0060z_erofs_load_lcluster_from_disk()\u0060 to also cover subpage compact compress indexes.  It also fixes the position of \u0060m-\u003Etype \u003E= Z_EROFS_LCLUSTER_TYPE_MAX\u0060 check, since it should be placed right after \u0060z_erofs_load_{compact,full}_lcluster()\u0060.",
  "published": "2025-12-16T15:15:54Z",
  "severity": "",
  "epss": 0.00214,
  "epssPercentile": 0.11854,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.94-1",
      "fix": "DEBIAN-CVE-2025-68251",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-68251",
      "released": "2025-12-16T15:15:54Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "6.17.6-1",
      "fix": "DEBIAN-CVE-2025-68251",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2025-68251",
      "released": "2025-12-16T15:15:54Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}