CVE-2025-68266

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw related to file type reconstruction when loading from disk within the BFS filesystem. Specifically, the S IFMT bits of the inode->i mode can become invalid when the S IFMT bits of the "mode" field or the "attributes" field loaded from disk are corrupted. The BFS filesystem uses only the lower 9 bits of the "mode" field, and there is a lack of explicit documentation confirming that the unused upper 23 bits (including S IFMT) are initialized to zero. The issue arises because the system does not ignore the S IFMT bits of the "mode" field loaded from disk and does not verify that the "attributes" field is either BFS VREG or BFS VDIR.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.