CVE-2025-71123

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix string copying in parse_apply_sb_mount_options()

strscpy_pad() can't be used to copy a non-NUL-term string into a NUL-term

string of possibly bigger size. Commit 0efc5990bca5 ("string.h: Introduce

memtostr() and memtostr_pad()") provides additional information in that

regard. So if this happens, the following warning is observed:

strnlen: detected buffer overflow: 65 byte read of buffer size 64

WARNING: CPU: 0 PID: 28655 at lib/string_helpers.c:1032 __fortify_report+0x96/0xc0 lib/string_helpers.c:1032

Modules linked in:

CPU: 0 UID: 0 PID: 28655 Comm: syz-executor.3 Not tainted 6.12.54-syzkaller-00144-g5f0270f1ba00 #0

Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-debian-1.16.3-2 04/01/2014

RIP: 0010:__fortify_report+0x96/0xc0 lib/string_helpers.c:1032

Call Trace:

<TASK>

__fortify_panic+0x1f/0x30 lib/string_helpers.c:1039

strnlen include/linux/fortify-string.h:235 [inline]

sized_st

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References