CVE-2025-68251

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue in the erofs component can lead to infinite loops when processing corrupted subpage compact indexes. This occurs because the clusterofs variable can exceed the lclustersize for non-head lclusters. The flaw is triggered by crafted images and involves the z erofs load lcluster from disk() function and the check for m->type >= Z EROFS LCLUSTER TYPE MAX following the z erofs load {compact,full} lcluster() functions.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.