CVE-2025-68266

MEDIUM
中文标题:
(暂无数据)
英文标题:
bfs: Reconstruct file type when loading from disk
CVSS分数: -1.0
发布时间: 2025-12-16 14:47:06
漏洞类型: (暂无数据)
状态: PUBLISHED
数据质量分数: 0.40
数据版本: v4
漏洞描述
中文描述:

(暂无数据)

英文描述:

In the Linux kernel, the following vulnerability has been resolved: bfs: Reconstruct file type when loading from disk syzbot is reporting that S_IFMT bits of inode->i_mode can become bogus when the S_IFMT bits of the 32bits "mode" field loaded from disk are corrupted or when the 32bits "attributes" field loaded from disk are corrupted. A documentation says that BFS uses only lower 9 bits of the "mode" field. But I can't find an explicit explanation that the unused upper 23 bits (especially, the S_IFMT bits) are initialized with 0. Therefore, ignore the S_IFMT bits of the "mode" field loaded from disk. Also, verify that the value of the "attributes" field loaded from disk is either BFS_VREG or BFS_VDIR (because BFS supports only regular files and the root directory).

CWE类型:
(暂无数据)
标签:
(暂无数据)
受影响产品
厂商 产品 版本 版本范围 平台 CPE
Linux Linux - < 77899444d46162aeb65f229590c26ba266864223 - cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*
Linux Linux 2.6.12 - - cpe:2.3:a:linux:linux:2.6.12:*:*:*:*:*:*:*
解决方案
中文解决方案:
(暂无数据)
英文解决方案:
(暂无数据)
临时解决方案:
(暂无数据)
参考链接
无标题 OTHER
cve.org
访问
无标题 OTHER
cve.org
访问
无标题 OTHER
cve.org
访问
416baaa9-dc9f-4396-8d5f-8c081fb06d67 OTHER
nvd.nist.gov
访问
416baaa9-dc9f-4396-8d5f-8c081fb06d67 OTHER
nvd.nist.gov
访问
416baaa9-dc9f-4396-8d5f-8c081fb06d67 OTHER
nvd.nist.gov
访问
416baaa9-dc9f-4396-8d5f-8c081fb06d67 OTHER
nvd.nist.gov
访问
CVSS评分详情
-1.0
LOW
CVSS向量: NOT_EXTRACTED
CVSS版本: NOT_EXTRACTED
机密性
N/A
完整性
N/A
可用性
N/A
时间信息
发布时间:
2025-12-16 14:47:06
修改时间:
2026-01-02 15:34:44
创建时间:
2026-01-12 02:12:29
更新时间:
2026-01-20 03:10:37
利用信息
暂无可利用代码信息
数据源详情
数据源 记录ID 版本 提取时间
CVE cve_CVE-2025-68266 2026-01-04 02:04:25 2026-01-12 02:12:29
NVD nvd_CVE-2025-68266 2025-12-19 03:25:39 2026-01-12 02:28:13
版本与语言
当前版本: v4
主要语言: EN
支持语言:
EN
安全公告
暂无安全公告信息
变更历史
v4 NVD
2026-01-20 03:10:37
references_count: 5 → 7
查看详细变更
  • references_count: 5 -> 7
v3 NVD
2026-01-12 03:36:52
references_count: 3 → 5
查看详细变更
  • references_count: 3 -> 5
v2 NVD
2026-01-12 02:28:13
affected_products_count: 4 → 2; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
  • affected_products_count: 4 -> 2
  • data_sources: ['cve'] -> ['cve', 'nvd']