Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API docsPage
  • MCP serverPage
  • AboutPage
  • Data sourcesPage
  • Data statusPage
  • ChangelogPage
  • How it's builtPage
  • Support the projectPage

14 results

Back

CVE-2025-39795block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

Description

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors.

Timeline

  1. ID reserved

    By Linux

  2. · 5 months later

    Published

  3. · 14 months later

    Record updated

Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.

Scores

CVSS scores of CVE-2025-39795, by who scored it
Scored byCVSSScoreVector
NVDNVD · Modified3.1Medium5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS (exploitation in 30 days)
0.18% · top 93% of all CVEs (15 Nov 2026)
CISA SSVC
Exploitation: none · Automatable: no · Technical impact: partial
Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.5.

Affected products

  • Linux · Linux

    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 418751910044649baa2b424ea31cce3fc4dcc253
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 8b3ce085b52e674290cbfdd07034e7653ffbe4dc
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 31f2f080898e50cbf2bae62d35f9f2a997547b38
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 3b9d69f0e68aa6b0acd9791c45d445154a8c66e9
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 46aa80ef49594ed7de685ecbc673b291e9a2c159
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 5e276e6ff9aacf8901b9c3265c3cdd2568c9fff2
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 14beeef4aafecc8a41de534e31fb5be94739392f
    • affected 22ada802ede89829dd010a317d9b812b7df7111a – < 448dfecc7ff807822ecd47a5c052acedca7d09e8

  • Linux · Linux

    • affected 5.10
    • unaffected < 5.10
    • unaffected 5.10.241 – ≤ 5.10.*
    • unaffected 5.15.190 – ≤ 5.15.*
    • unaffected 6.1.149 – ≤ 6.1.*
    • unaffected 6.6.103 – ≤ 6.6.*
    • unaffected 6.12.43 – ≤ 6.12.*
    • unaffected 6.15.11 – ≤ 6.15.*
    • unaffected 6.16.2 – ≤ 6.16.*
    • unaffected 6.17 – ≤ *

References

References14

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

CVE-2025-39795 badge
[![CVE-2025-39795](https://cveledger.app/badge/CVE-2025-39795.svg)](https://cveledger.app/cve/CVE-2025-39795)

Record last updated .