Answer in brief
CVE-2025-38692 records a Medium severity (CVSS 5.5) vulnerability in exfat: add cluster chain loop check for dir. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 5.5. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Product | Affected versions | Fixed versions |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | Not reported | Not reported |
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | 5.7 | Not reported |
| Linux/Linuxgeneric | >=1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 <1715f0996f7baf817c73613aeda500c4f73a6bd6 || >=1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 <868f23286c1a13162330fa6c614fe350f78e3f82 || >=1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 <aa8fe7b7b73d4c9a41bb96cb3fb3092f794ecb33 || >=1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 <e2066ca3ef49a30920d8536fa366b2a183a808ee || >=1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 <4c3cda20c4cf1871e27868d08fda06b79bc7d568 || >=1acf1a564b6034b5af1e7fb23cb98cb3bb4f6003 <99f9a97dce39ad413c39b92c90393bbd6778f3fd | 1715f0996f7baf817c73613aeda500c4f73a6bd6, 868f23286c1a13162330fa6c614fe350f78e3f82, aa8fe7b7b73d4c9a41bb96cb3fb3092f794ecb33, e2066ca3ef49a30920d8536fa366b2a183a808ee, 4c3cda20c4cf1871e27868d08fda06b79bc7d568, 99f9a97dce39ad413c39b92c90393bbd6778f3fd |
Published upstream
Sep 4, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 30, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 28, 2026
In the Linux kernel, the following vulnerability has been resolved: exfat: add cluster chain loop check for dir An infinite loop may occur if the following conditions occur due to file system corruption. (1) Condition for exfat_count_dir_entries() to loop infinitely. - The cluster chain includes a loop. - There is no UNUSED entry in the cluster chain. (2) Condition for exfat_create_upcase_table() to loop infinitely. - The cluster chain of the root directory includes a loop. - There are no UNUSED entry and up-case table entry in the cluster chain of the root directory. (3) Condition for exfat_load_bitmap() to loop infinitely. - The cluster chain of the root directory includes a loop. - There are no UNUSED entry and bitmap entry in the cluster chain of the root directory. (4) Condition for exfat_find_dir_entry() to loop infinitely. - The cluster chain includes a loop. - The unused directory entries were exhausted by some operation. (5) Condition for exfat_check_dir_empty() to loop infinitely. - The cluster chain includes a loop. - The unused directory entries were exhausted by some operation. - All files and sub-directories under the directory are deleted. This commit adds checks to break the above infinite loop.
Quoted source text, attributed separately from HOL analysis.