QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2025-40198

Back to search

CVE-2025-40198

Published: Nov 12, 2025

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid potential buffer over-read in parse_apply_sb_mount_options() Unlike other strings in the ext4 superblock, we rely on tune2fs to make sure s_mount_opts is NUL terminated. Harden parse_apply_sb_mount_options() by treating s_mount_opts as a potential __nonstring.

VendorProductVersions

Linux

Linux

affected
8b67f04ab9de5d8f3a71aef72bf02c995a506db5 - < 7bf46ff83a0ef11836e38ebd72cdc5107209342d
affected
8b67f04ab9de5d8f3a71aef72bf02c995a506db5 - < b2bac84fde28fb6a88817b8b761abda17a1d300b
affected
8b67f04ab9de5d8f3a71aef72bf02c995a506db5 - < e651294218d2684302ee5ed95ccf381646f3e5b4
affected
8b67f04ab9de5d8f3a71aef72bf02c995a506db5 - < 01829af7656b56d83682b3491265d583d502e502
affected
8b67f04ab9de5d8f3a71aef72bf02c995a506db5 - < 2a0cf438320cdb783e0378570744c0ef0d83e934

+2 more versions

Linux

Linux

affected
2.6.36
unaffected
0 - < 2.6.36
unaffected
5.4.301 - <= 5.4.*
unaffected
5.10.246 - <= 5.10.*
unaffected
6.1.158 - <= 6.1.*

+4 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now