01 Record

CVE-2025-21772

partitions: mac: fix handling of bogus partition table

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

View raw JSON

02 Description

partitions: mac: fix handling of bogus partition table

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.24% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 14.8% of scored records. A rank, not a probability.
NVD base score: 7.8 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-07-30.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-02-27 02:18Z1 YR AGO

Last updated

2026-08-05 11:54Z1 MO AGO

Reserved

2024-12-29

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-787Out-of-bounds WriteBase
CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

31655881d8bb34e9bd9b7b62a01239acd3f141fb94c8fbdced9917ea72f51f30

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < a3e77da9f843e4ab93917d30c314f0283e28c124, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 213ba5bd81b7e97ac6e6190b8f3bc6ba76123625, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 40a35d14f3c0dc72b689061ec72fc9b193f37d1f, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 27a39d006f85e869be68c1d5d2ce05e5d6445bf5, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 92527100be38ede924768f4277450dfe8a40e16b, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 6578717ebca91678131d2b1f4ba4258e60536e9f, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 7fa9706722882f634090bfc9af642bf9ed719e27, 02e2a5bfebe99edcf9d694575a75032d53fe1b73 to < 80e648042e512d5a767da251d44132553fe04ae0, 81a319c5c29913a23947f3d28513974682f3af03, 34a906cd9f6445d9510841667eff0d980279ebf3, 2a27f61bd411e564eb4651c18d225f6e9e1de534, 69aad7e01c8e883e9d2f8dc5523bd419bd02d2aa, 7f4f03c4a1e9a4b9679feafe7625a780864a4e76, 3.2.75 to < 3.3, 3.4.113 to < 3.5, 3.10.99 to < 3.11, 3.12.56 to < 3.13, 3.14.63 to < 3.15, 4.4—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/a3e77da9f843e4ab93917d30c314f0283e28c124
git.kernel.orghttps://git.kernel.org/stable/c/213ba5bd81b7e97ac6e6190b8f3bc6ba76123625
git.kernel.orghttps://git.kernel.org/stable/c/40a35d14f3c0dc72b689061ec72fc9b193f37d1f
git.kernel.orghttps://git.kernel.org/stable/c/27a39d006f85e869be68c1d5d2ce05e5d6445bf5
git.kernel.orghttps://git.kernel.org/stable/c/92527100be38ede924768f4277450dfe8a40e16b
git.kernel.orghttps://git.kernel.org/stable/c/6578717ebca91678131d2b1f4ba4258e60536e9f
git.kernel.orghttps://git.kernel.org/stable/c/7fa9706722882f634090bfc9af642bf9ed719e27
git.kernel.orghttps://git.kernel.org/stable/c/80e648042e512d5a767da251d44132553fe04ae0
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/05/msg00030.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/03/msg00028.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-265688.html

01 Record index

CVE-2025-21772

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-21772

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References