Integer Overflow Vulnerability in Linux Kernel Package: linux (Debian 13 & 14)
Summary
DEBIAN-CVE-2025-22080: In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Prevent integer overflow in hdr_first_de() The "de_off" and "used" variables come from the disk so they both need to check. Affects linux versions < 6.12.25-1. Fixed in 6.12.25-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of the Linux operating system, responsible for managing hardware and system resources. It provides essential services for all other parts of the operating system and is known for its stability and performance. However, vulnerabilities can arise, such as the one identified in the ntfs3 file system, which can lead to severe security risks if not addressed promptly.
Vulnerability Detail
In the Linux kernel, specifically within the ntfs3 file system, an integer overflow vulnerability has been discovered. This issue arises from the handling of the 'de_off' and 'used' variables, which are derived from disk data. On 32-bit systems, if both variables exceed UINT_MAX - 16, an integer overflow occurs, potentially leading to unexpected behavior or system crashes. This vulnerability can be exploited to compromise system integrity and security.
How To Fix
Minimum fixed version
6.12.25-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade linuxTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, no specific workarounds are provided for this vulnerability. The best course of action is to apply the patch as soon as it is available.
Conclusion
The integer overflow vulnerability in the Linux kernel's ntfs3 file system poses a significant risk to system stability and security. It is crucial for users of Debian 13 and 14 to update their linux package to the patched version 6.12.25-1 to mitigate this risk. Continuous monitoring for vulnerabilities is essential for maintaining a secure environment.
See every vulnerability recorded for linux →
FAQ
The vulnerability is an integer overflow issue in the ntfs3 file system of the Linux kernel, which can lead to system instability.
You can use tools like Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected.
Exploitation of this vulnerability could lead to system crashes, data corruption, or unauthorized access to system resources.
Yes, a patch is available in version 6.12.25-1 of the linux package for both Debian 13 and 14.
Regularly update your packages and monitor for vulnerabilities using tools like Vulert to maintain system security.
References
Related vulnerabilities
Recent vulnerabilities recorded for linux.
