01 Record

CVE-2025-40198

ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

HighPUBLISHEDCNA: Linux

CNA base score7.8 CVSS v3.xCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

View raw JSON

02 Description

ext4: avoid potential buffer over-read in parse_apply_sb_mount_options()

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpacttotalSuccessful exploitation gives total control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.16% probability of exploitation activity in the next 30 days.

EPSS percentile

Equal to or higher than the score of 5.2% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD analysis status

Deferred. NVD last modified this record on 2026-10-19.

Red Hat severity

Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-11-12 21:56Z11 MO AGO
Last updated: 2026-10-15 22:02Z13 DAYS AGO
Reserved: 2025-04-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: High (CVSS 7.8)
CNA CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 3efba82d8557b5b3bf73dba3765bf75410e9f70019150111e38889a4c108b732

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < 7bf46ff83a0ef11836e38ebd72cdc5107209342d, 8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < b2bac84fde28fb6a88817b8b761abda17a1d300b, 8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < e651294218d2684302ee5ed95ccf381646f3e5b4, 8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < 01829af7656b56d83682b3491265d583d502e502, 8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < 2a0cf438320cdb783e0378570744c0ef0d83e934, 8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < a6e94557cd05adc82fae0400f6e17745563e5412, 8b67f04ab9de5d8f3a71aef72bf02c995a506db5 to < 8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8, 2.6.36—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7bf46ff83a0ef11836e38ebd72cdc5107209342d
git.kernel.orghttps://git.kernel.org/stable/c/b2bac84fde28fb6a88817b8b761abda17a1d300b
git.kernel.orghttps://git.kernel.org/stable/c/e651294218d2684302ee5ed95ccf381646f3e5b4
git.kernel.orghttps://git.kernel.org/stable/c/01829af7656b56d83682b3491265d583d502e502
git.kernel.orghttps://git.kernel.org/stable/c/2a0cf438320cdb783e0378570744c0ef0d83e934
git.kernel.orghttps://git.kernel.org/stable/c/a6e94557cd05adc82fae0400f6e17745563e5412
git.kernel.orghttps://git.kernel.org/stable/c/8ecb790ea8c3fc69e77bace57f14cf0d7c177bd8

07 Fixed in

Debian 12

linux
Fixed in 6.1.158-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.57-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 6.17.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.