CVE-2025-21772 - CVE House
Back to Database
Status published Unknown CVE-2025-21772

partitions: mac: fix handling of bogus partition table

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: partitions: mac: fix handling of bogus partition table Fix several issues in partition probing: - The bailout for a bad partoffset must use put_dev_sector(), since the preceding read_part_sector() succeeded. - If the partition table claims a silly sector size like 0xfff bytes (which results in partition table entries straddling sector boundaries), bail out instead of accessing out-of-bounds memory. - We must not assume that the partition table contains proper NUL termination - use strnlen() and strncmp() instead of strlen() and strcmp().

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-21772

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

Linux
Vulnerable Versions:
02e2a5bfebe99edcf9d694575a75032d53fe1b73, 81a319c5c29913a23947f3d28513974682f3af03, 34a906cd9f6445d9510841667eff0d980279ebf3, 2a27f61bd411e564eb4651c18d225f6e9e1de534, 69aad7e01c8e883e9d2f8dc5523bd419bd02d2aa, 7f4f03c4a1e9a4b9679feafe7625a780864a4e76, 3.2.75, 3.4.113, 3.10.99, 3.12.56, 3.14.63, 4.4, 0, 5.4.291, 5.10.235, 5.15.179, 6.1.129, 6.6.79, 6.12.16, 6.13.4, 6.14

Timeline

Official Publish: February 27th, 2025
Last Modified: May 23rd, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.