U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. Vulnerabilities

CVE-2025-22079 Detail

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth field is 16-bit (__le16), but the actual maximum depth is limited to OCFS2_MAX_PATH_DEPTH. Add a check to prevent out-of-bounds access if l_tree_depth has an invalid value, which may occur when reading from a corrupted mounted disk [1].


Metrics

 
NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.
CVSS 4.0 Severity and Vector Strings:

NIST CVSS score
NIST: NVD
N/A
NVD assessment not yet provided.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to [email protected].

URL Source(s) Tag(s)
https://git.kernel.org/stable/c/11e24802e73362aa2948ee16b8fb4e32635d5b2a kernel.org
https://git.kernel.org/stable/c/17c99ab3db2ba74096d36c69daa6e784e98fc0b8 kernel.org
https://git.kernel.org/stable/c/3d012ba4404a0bb517658699ba85e6abda386dc3 kernel.org
https://git.kernel.org/stable/c/49d2a2ea9d30991bae82107f9523915b91637683 kernel.org
https://git.kernel.org/stable/c/538ed8b049ef801a86c543433e5061a91cc106e3 kernel.org
https://git.kernel.org/stable/c/a406aff8c05115119127c962cbbbbd202e1973ef kernel.org
https://git.kernel.org/stable/c/b942f88fe7d2d789e51c5c30a675fa1c126f5a6d kernel.org
https://git.kernel.org/stable/c/e95d97c9c8cd0c239b7b59c79be0f6a9dcf7905c kernel.org
https://git.kernel.org/stable/c/ef34840bda333fe99bafbd2d73b70ceaaf9eba66 kernel.org

Weakness Enumeration

CWE-ID CWE Name Source

Change History

1 change records found show changes

Quick Info

CVE Dictionary Entry:
CVE-2025-22079
NVD Published Date:
04/16/2025
NVD Last Modified:
04/17/2025
Source:
kernel.org