CVE-2025-70100

A divide-by-zero vulnerability in the ext4blocksetlbsize function in src/ext4blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 filesystem image that results in a zero logical block size. The vulnerability is triggered during mount o...

Vulnerabilities of functions ext4_put_super and dump_orphan_list in the Linux operating system’s kernel, which allow attackers to compromise the confidentiality, integrity, and accessibility of protected information

The vulnerability of the ext4putsuper function fs/ext4/super.c and the dumporphanlist function fs/ext4/super.c in the Linux kernel is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and...