Answer in brief
CVE-2025-40198 records a Unknown severity vulnerability in ext4: avoid potential buffer over-read in parse_apply_sb_mount_options(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2025-40198 records a Unknown severity vulnerability in ext4: avoid potential buffer over-read in parse_apply_sb_mount_options(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <7bf46ff83a0ef11836e38ebd72cdc5107209342d || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <b2bac84fde28fb6a88817b8b761abda17a1d300b || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <e651294218d2684302ee5ed95ccf381646f3e5b4 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <01829af7656b56d83682b3491265d583d502e502 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <2a0cf438320cdb783e0378570744c0ef0d83e934 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <a6e94557cd05adc82fae0400f6e17745563e5412 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 | 7bf46ff83a0ef11836e38ebd72cdc5107209342d, b2bac84fde28fb6a88817b8b761abda17a1d300b, e651294218d2684302ee5ed95ccf381646f3e5b4, 01829af7656b56d83682b3491265d583d502e502, 2a0cf438320cdb783e0378570744c0ef0d83e934, a6e94557cd05adc82fae0400f6e17745563e5412, 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 |
| Linux/Linuxgeneric | 2.6.36 | Not reported |
Published upstream
Nov 12, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure s_mount_opts is NUL terminated. Harden parse_apply_sb_mount_options() by treating s_mount_opts as a potential __nonstring.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <7bf46ff83a0ef11836e38ebd72cdc5107209342d || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <b2bac84fde28fb6a88817b8b761abda17a1d300b || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <e651294218d2684302ee5ed95ccf381646f3e5b4 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <01829af7656b56d83682b3491265d583d502e502 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <2a0cf438320cdb783e0378570744c0ef0d83e934 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <a6e94557cd05adc82fae0400f6e17745563e5412 || >=8b67f04ab9de5d8f3a71aef72bf02c995a506db5 <8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 | 7bf46ff83a0ef11836e38ebd72cdc5107209342d, b2bac84fde28fb6a88817b8b761abda17a1d300b, e651294218d2684302ee5ed95ccf381646f3e5b4, 01829af7656b56d83682b3491265d583d502e502, 2a0cf438320cdb783e0378570744c0ef0d83e934, a6e94557cd05adc82fae0400f6e17745563e5412, 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8 |
| Linux/Linuxgeneric | 2.6.36 | Not reported |
Published upstream
Nov 12, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 5, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 5, 2026
In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure s_mount_opts is NUL terminated. Harden parse_apply_sb_mount_options() by treating s_mount_opts as a potential __nonstring.
Quoted source text, attributed separately from HOL analysis.