CVE-2025-22079 – This CVE-2025-22079 is an out-of-bounds read/wr... (How to Fix)

Q: What is the severity of CVE-2025-22079?

CVE-2025-22079 has a CVSS score of 7.1 (HIGH). This CVE-2025-22079 is an out-of-bounds read/write vulnerability in the Linux kernel's OCFS2 filesystem driver. Attackers could potentially cause kernel crashes, information disclosure, or privilege escalation by exploiting corrupted disk images. Systems using OCFS2 filesystems are affected.

📋 TL;DR

This CVE-2025-22079 is an out-of-bounds read/write vulnerability in the Linux kernel's OCFS2 filesystem driver. Attackers could potentially cause kernel crashes, information disclosure, or privilege escalation by exploiting corrupted disk images. Systems using OCFS2 filesystems are affected.

💻 Affected Systems

Products:

Linux kernel

Versions: Specific kernel versions with vulnerable OCFS2 code (check git commits for exact ranges)

Operating Systems: Linux distributions using affected kernel versions

Default Config Vulnerable: ✅ No

Notes: Only affects systems using OCFS2 filesystems. Most Linux systems don't use OCFS2 by default.

📦 What is this software?

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

Linux Kernel by Linux

The Linux Kernel is the core component of the Linux operating system, serving as the critical interface between computer hardware and software processes. As the heart of millions of servers, cloud infrastructure, embedded systems, Android devices, and IoT deployments worldwide, the Linux Kernel mana...

Learn more about Linux Kernel →

⚠️ Risk & Real-World Impact

🔴

Worst Case

Kernel panic leading to system crash, potential information disclosure from kernel memory, or local privilege escalation to root.

🟠

Likely Case

System crash or denial of service when accessing corrupted OCFS2 filesystems, potentially leading to data corruption.

🟢

If Mitigated

Minimal impact if systems don't use OCFS2 filesystems or have proper access controls limiting who can mount filesystems.

🌐 Internet-Facing: LOW - Requires local access or ability to mount filesystems, not directly exploitable over network.

🏢 Internal Only: MEDIUM - Internal users with ability to mount filesystems could exploit, but requires specific OCFS2 usage.

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: MEDIUM

Requires ability to mount a specially crafted OCFS2 filesystem or access to corrupted disk. Local access needed.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Kernel versions containing commits: 11e24802e73362aa2948ee16b8fb4e32635d5b2a, 17c99ab3db2ba74096d36c69daa6e784e98fc0b8, 3d012ba4404a0bb517658699ba85e6abda386dc3, 49d2a2ea9d30991bae82107f9523915b91637683, 538ed8b049ef801a86c543433e5061a91cc106e3

Vendor Advisory: https://git.kernel.org/stable/c/11e24802e73362aa2948ee16b8fb4e32635d5b2a

Restart Required: Yes

Instructions:

1. Update Linux kernel to patched version from your distribution. 2. Reboot system to load new kernel. 3. Verify OCFS2 module loads correctly if used.

🔧 Temporary Workarounds

Disable OCFS2 module

linux

Prevent loading of OCFS2 kernel module if not needed

echo 'install ocfs2 /bin/false' >> /etc/modprobe.d/disable-ocfs2.conf
rmmod ocfs2 2>/dev/null || true

Restrict filesystem mounting

linux

Limit who can mount filesystems to prevent malicious OCFS2 mounts

chmod 700 /bin/mount
setfacl -m u:root:rwx /bin/mount

🧯 If You Can't Patch

Avoid using OCFS2 filesystems entirely
Implement strict access controls on systems that must use OCFS2

🔍 How to Verify

Check if Vulnerable:

Check if OCFS2 module is loaded: lsmod | grep ocfs2. If loaded and kernel version is unpatched, system is vulnerable.

Check Version:

uname -r

Verify Fix Applied:

Check kernel version includes the fix commits or verify OCFS2 module validates l_tree_depth properly.

📡 Detection & Monitoring

Log Indicators:

Kernel oops messages related to OCFS2
System crashes when mounting filesystems
dmesg errors mentioning ocfs2 or out-of-bounds

Network Indicators:

None - local vulnerability only

SIEM Query:

source="kernel" AND ("ocfs2" OR "out-of-bounds" OR "general protection fault")

📊 Metadata

CVE ID: CVE-2025-22079

CVSS v3 Score: 7.1 (HIGH)

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE: CWE-125

EPSS Score: 0.06% exploit probability (17.6th percentile)

Published: April 16, 2025

Last Updated: November 3, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-22079, you might also want to check these: