In the Linux kernel, the following vulnerability has been resolved:
erofs: handle NONHEAD !delta[1] lclusters gracefully
syzbot reported a WARNING in iomap_iter_done: iomap_fiemap+0x73b/0x9b0 fs/iomap/fiemap.c:80 ioctl_fiemap fs/ioctl.c:220 [inline]
Generally, NONHEAD lclusters won't have delta[1]==0, except for crafted images and filesystems created by pre-1.0 mkfs versions.
Previously, it would immediately bail out if delta[1]==0, which led to inadequate decompressed lengths (thus FIEMAP is impacted). Treat it as delta[1]=1 to work around these legacy mkfs versions.
`lclusterbits > 14` is illegal for compact indexes, error out too.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Feb 10, 2025 | Dec 27, 2024 |
| Ubuntu | — | Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1026-oemUpgrade linux-image-6.8.0-58-lowlatencyUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1028-gcpUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.1-1020-realtimeUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1027-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-58-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-58-lowlatency-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-azure-nvidiaUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtualUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1027-azureUpgrade linux-image-6.8.0-58-genericUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.8.0-1026-nvidiaUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1027-azure-fdeUpgrade linux-image-6.8.0-1026-nvidia-lowlatency-64kUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-1023-gkeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-2023-raspi-realtimeUpgrade linux-image-6.8.0-1024-ibmUpgrade linux-image-6.8.0-1028-raspiUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-6.8.0-1026-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-1026-nvidia-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1028-gcp-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1024-oracleUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-oracleUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1010-gkeopUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1024-oracle-64k | Feb 20, 2025 | Dec 27, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Dec 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub