CVE-2025-22079: ocfs2: validate l_tree_depth to avoid out-of-bounds access

Severity: high (CVSS 7.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-04-16 · updated 2026-07-30
Weakness: CWE-125

Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate l_tree_depth to avoid out-of-bounds access The l_tree_depth field is 16-bit (__le16), but the actual maximum depth is limited to OCFS2_MAX_PATH_DEPTH. Add a check to prevent out-of-bounds access if l_tree_depth has an invalid value, which may occur when reading from a corrupted mounted disk [1].

Affected products

Linux kernel: from 2.6.16 before 5.4.292; from 5.5 before 5.10.236; from 5.11 before 5.15.180; from 5.16 before 6.1.134; from 6.2 before 6.6.87; from 6.7 before 6.12.23 — fixed in 5.10.236, 5.15.180, 5.4.292, 6.1.134, 6.12.23, 6.13.11

How to fix

Upgrade to a fixed version: Linux kernel 5.10.236, 5.15.180, 5.4.292, 6.1.134. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-22079 or the next vulnerability affects your stack