CVE-2025-23150

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.12.0-rc6-syzkaller-00318-ga9cda7c0ffed

Description A use-after-free issue was detected in the ext4 insert dentry function due to out-of-bounds access caused by incorrect splitting in do split. This issue can lead to out-of-bounds access and subsequent use-after-free when having too many long name files in a single block. The problem was found by the Linux Verification Center with Syzkaller.

Recommendations As a temporary workaround, consider disabling the ext4 insert dentry function until a patch is available. To resolve the issue, update the Linux kernel to a version that includes the fix for the use-after-free issue in ext4 insert dentry.