THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2025-40307 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking

[NVD] CVE-2025-40307 (HIGH 7.8) — In the Linux kernel, the following vulnerability has been resolved: exfat: validate cluster allocation bits of the allocation bitmap syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking

lownvdPublished 2025-12-08

CVE-2025-40307 CVSS: 7.8 HIGH Published: 2025-12-08T01:16:02.950

In the Linux kernel, the following vulnerability has been resolved:

exfat: validate cluster allocation bits of the allocation bitmap

syzbot created an exfat image with cluster bits not set for the allocation bitmap. exfat-fs reads and uses the allocation bitmap without checking this. The problem is that if the start cluster of the

Indicators of compromise

CVE-2025-40307cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2025-40307