CVE-2025-38415

A flaw was found in the Linux kernel's Squashfs filesystem. A local attacker can exploit this vulnerability by simultaneously mounting a Squashfs filesystem and issuing a specific input/output control (ioctl) command. This can lead to an incorrect block size calculation, causing a shift-out-of-bounds error. This memory corruption vulnerability can result in a denial of service or potentially lead to more severe system compromise.

This moderate impact flaw in the Linux kernel's Squashfs filesystem is present in Red Hat Enterprise Linux 7, 8, 9, and 10, which allows a local attacker to cause a denial of service or a potential system compromise by simultaneously mounting a Squashfs filesystem and issuing a specific ioctl command, leading to an incorrect block size calculation and a shift-out-of-bounds read issue due to an incorrect function return problem.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.