CVE-2025-71161

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains an issue within the dm-verity component related to recursive forward error correction. The recursive correction mechanism can lead to a denial-of-service condition. The fec read bufs function includes a loop with up to 253 iterations, potentially calling the verity hash for block function recursively up to four levels deep, resulting in a maximum of 4 billion iterations. This can cause the udev-worker process to become unresponsive. Additionally, the recursive correction does not function as intended due to data overwriting within shared buffers (fio->bufs) during recursive calls to verity hash for block.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.