CVE-2025-21736

nilfs2: fix possible int overflows in nilfs_fiemap()

published February 27, 2025

CVSS
—
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix possible int overflows in nilfs_fiemap()

Since nilfs_bmap_lookup_contig() in nilfs_fiemap() calculates its result

by being prepared to go through potentially maxblocks == INT_MAX blocks,

the value in n may experience an overflow caused by left shift of blkbits.

While it is extremely unlikely to occur, play it safe and cast right hand

expression to wider type to mitigate the issue.

Found by Linux Verification Center (linuxtesting.org) with static analysis

tool SVACE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.1th percentile
Published
2025-02-27T02:12Z
EPSS history
Timeline
  • 27 FEB 02:12Z
    nilfs2: fix possible int overflows in nilfs_fiemap()
    cvelistv5