CVE-2025-39795

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-39795
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39795.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39795
Downstream
Related
Published
2025-09-12T15:59:32.037Z
Modified
2026-05-10T18:42:09.905078067Z
Summary
block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
Details

In the Linux kernel, the following vulnerability has been resolved:

block: avoid possible overflow for chunksectors check in blkstack_limits()

In blkstacklimits(), we check that the t->chunksectors value is a multiple of the t->physicalblock_size value.

However, by finding the chunksectors value in bytes, we may overflow the unsigned int which holds chunksectors, so change the check to be based on sectors.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39795.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
22ada802ede89829dd010a317d9b812b7df7111a
Fixed
418751910044649baa2b424ea31cce3fc4dcc253
Fixed
8b3ce085b52e674290cbfdd07034e7653ffbe4dc
Fixed
31f2f080898e50cbf2bae62d35f9f2a997547b38
Fixed
3b9d69f0e68aa6b0acd9791c45d445154a8c66e9
Fixed
46aa80ef49594ed7de685ecbc673b291e9a2c159
Fixed
5e276e6ff9aacf8901b9c3265c3cdd2568c9fff2
Fixed
14beeef4aafecc8a41de534e31fb5be94739392f
Fixed
448dfecc7ff807822ecd47a5c052acedca7d09e8

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39795.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.10.0
Fixed
5.10.241
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.190
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.149
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.103
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.43
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.15.11
Type
ECOSYSTEM
Events
Introduced
6.16.0
Fixed
6.16.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39795.json"