AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-40287

UNKNOWN · CVSS N/A EPSS 0.18%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-12-06 · Last synced 2026-08-04

CyberRota Analysis

This vulnerability has an unknown severity rating. It affects Linux. It may lead to a denial-of-service condition.

CVE
CVE-2025-40287
Severity
UNKNOWN
CVSS
N/A
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: exfat: fix improper check of dentry.stream.valid_size We found an infinite loop bug in the exFAT file system that can lead to a Denial-of-Service (DoS) condition. When a dentry in an exFAT filesystem is malformed, the following system calls — SYS_openat, SYS_ftruncate, and SYS_pwrite64 — can cause the kernel to hang. Root cause analysis shows that the size validation code in exfat_find() does not check whether dentry.stream.valid_size is negative. As a result, the system calls mentioned above can succeed and eventually trigger the DoS issue. This patch adds a check for negative dentry.stream.valid_size to prevent this vulnerability.