Upstream information

CVE-2025-39888 at MITRE

Description

In the Linux kernel, the following vulnerability has been resolved:

fuse: Block access to folio overlimit

syz reported a slab-out-of-bounds Write in fuse_dev_do_write.

When the number of bytes to be retrieved is truncated to the upper limit
by fc->max_pages and there is an offset, the oob is triggered.

Add a loop termination condition to prevent overruns.

SUSE information

Overall state of this security issue: Does not affect SUSE products

SUSE Bugzilla entry: 1250387 [NEW]

No SUSE Security Announcements cross referenced.


SUSE Timeline for this CVE

CVE page created: Tue Sep 23 14:46:44 2025
CVE page last modified: Tue Sep 23 14:46:44 2025