CVE-2025-21667 — Infinite Loop in Linux
Severity
5.5MEDIUMNVD
OSV5.9
EPSS
0.0%
top 97.76%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJan 31
Latest updateJul 17
Description
In the Linux kernel, the following vulnerability has been resolved:
iomap: avoid avoid truncating 64-bit offset to 32 bits
on 32-bit kernels, iomap_write_delalloc_scan() was inadvertently using a
32-bit position due to folio_next_index() returning an unsigned long.
This could lead to an infinite loop when writing to an xfs filesystem.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6
Affected Packages6 packages
▶CVEListV5linux/linux38be53c3fd7f4f4bd5de319a323d72f9f6beb16d — 7ca4bd6b754913910151acce00be093f03642725+4