CVE-2025-37780

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

isofs: Prevent the use of too small fid

syzbot reported a slab-out-of-bounds Read in isofs_fh_to_parent. [1]

The handle_bytes value passed in by the reproducing program is equal to 12.

In handle_to_path(), only 12 bytes of memory are allocated for the structure

file_handle->f_handle member, which causes an out-of-bounds access when

accessing the member parent_block of the structure isofs_fid in isofs,

because accessing parent_block requires at least 16 bytes of f_handle.

Here, fh_len is used to indirectly confirm that the value of handle_bytes

is greater than 3 before accessing parent_block.

[1]

BUG: KASAN: slab-out-of-bounds in isofs_fh_to_parent+0x1b8/0x210 fs/isofs/export.c:183

Read of size 4 at addr ffff0000cc030d94 by task syz-executor215/6466

CPU: 1 UID: 0 PID: 6466 Comm: syz-executor215 Not tainted 6.14.0-rc7-syzkaller-ga2392f333575 #0

Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS G

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References