Answer in brief
CVE-2025-68251 records a Unknown severity vulnerability in erofs: avoid infinite loops due to corrupted subpage compact indexes. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=3f691aa676f29586e83e6c032713554a290418c3 <b18a82503a67a530d48f5a5b429e162749fe2c89 || >=8d2517aaeea3ab8651bb517bca8f3c8664d318ea <dbfac1b85d0753996ddfef636934d431b588dd1f || >=8d2517aaeea3ab8651bb517bca8f3c8664d318ea <8675447a8794983f2b7e694b378112772c17635e || >=8d2517aaeea3ab8651bb517bca8f3c8664d318ea <e13d315ae077bb7c3c6027cc292401bc0f4ec683 || 22438a34d383ec2789eaf450728e38abc53051f8 || >=6.6.16 <6.6.160 || >=6.7.4 <6.8 | b18a82503a67a530d48f5a5b429e162749fe2c89, dbfac1b85d0753996ddfef636934d431b588dd1f, 8675447a8794983f2b7e694b378112772c17635e, e13d315ae077bb7c3c6027cc292401bc0f4ec683, 6.6.160, 6.8 |
| Linux/Linuxgeneric | 6.8 | Not reported |
Published upstream
Dec 16, 2025
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 21, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Oct 21, 2026
In the Linux kernel, the following vulnerability has been resolved: erofs: avoid infinite loops due to corrupted subpage compact indexes Robert reported an infinite loop observed by two crafted images. The root cause is that `clusterofs` can be larger than `lclustersize` for !NONHEAD `lclusters` in corrupted subpage compact indexes, e.g.: blocksize = lclustersize = 512 lcn = 6 clusterofs = 515 Move the corresponding check for full compress indexes to `z_erofs_load_lcluster_from_disk()` to also cover subpage compact compress indexes. It also fixes the position of `m->type >= Z_EROFS_LCLUSTER_TYPE_MAX` check, since it should be placed right after `z_erofs_load_{compact,full}_lcluster()`.
Quoted source text, attributed separately from HOL analysis.