01 Record

CVE-2025-38701

ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 7.5% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-09-04 15:32Z1 YR AGO

Last updated

2026-07-14 12:42Z1 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-617Reachable AssertionBase

Data version

5.2

Document digest

d7dab1daf543e572446d3ac58170d1036d845cbbec712615a4993753b9fa77ac

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux67cf5b09a46f72e048501b84996f2f77bc42e947 to < 8085a7324d8ec448c4a764af7853e19bbd64e17a, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 1199a6399895f4767f0b9a68a6ff47c3f799b7c7, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 7f322c12df7aeed1755acd3c6fab48c7807795fb, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 2817ac83cb4732597bf36853fe13ca616f4ee4e2, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < d960f4b793912f35e9d72bd9d1e90553063fcbf1, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 81e7e2e7ba07e7c8cdce43ccad2f91adbc5a919c, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 279c87ef7b9da34f65c2e4db586e730b667a6fb9, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 8a6f89d42e61788605722dd9faf98797c958a7e5, 67cf5b09a46f72e048501b84996f2f77bc42e947 to < 099b847ccc6c1ad2f805d13cfbcc83f5b6d4bc42, 3.8—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/8085a7324d8ec448c4a764af7853e19bbd64e17a
git.kernel.orghttps://git.kernel.org/stable/c/1199a6399895f4767f0b9a68a6ff47c3f799b7c7
git.kernel.orghttps://git.kernel.org/stable/c/7f322c12df7aeed1755acd3c6fab48c7807795fb
git.kernel.orghttps://git.kernel.org/stable/c/2817ac83cb4732597bf36853fe13ca616f4ee4e2
git.kernel.orghttps://git.kernel.org/stable/c/d960f4b793912f35e9d72bd9d1e90553063fcbf1
git.kernel.orghttps://git.kernel.org/stable/c/81e7e2e7ba07e7c8cdce43ccad2f91adbc5a919c
git.kernel.orghttps://git.kernel.org/stable/c/279c87ef7b9da34f65c2e4db586e730b667a6fb9
git.kernel.orghttps://git.kernel.org/stable/c/8a6f89d42e61788605722dd9faf98797c958a7e5
git.kernel.orghttps://git.kernel.org/stable/c/099b847ccc6c1ad2f805d13cfbcc83f5b6d4bc42
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-082556.html
cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-032379.html

01 Record index

CVE-2025-38701

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38701

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References