In the Linux kernel, the following vulnerability has been resolved:

block: avoid possible overflow for chunk_sectors check in blk_stack_limits()

In blk_stack_limits(), we check that the t->chunk_sectors value is a
multiple of the t->physical_block_size value.

However, by finding the chunk_sectors value in bytes, we may overflow
the unsigned int which holds chunk_sectors, so change the check to be
based on sectors.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00032.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux
  • Linux Kernel
Advisories
Source ID Title
Debian DSA Debian DSA DSA-6009-1 linux security update
EUVD EUVD EUVD-2025-29059 In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors.
Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/14beeef4aafecc8a41de534e31fb5be94739392f cve-icon cve-icon
https://git.kernel.org/stable/c/31f2f080898e50cbf2bae62d35f9f2a997547b38 cve-icon cve-icon
https://git.kernel.org/stable/c/3b9d69f0e68aa6b0acd9791c45d445154a8c66e9 cve-icon cve-icon
https://git.kernel.org/stable/c/418751910044649baa2b424ea31cce3fc4dcc253 cve-icon cve-icon
https://git.kernel.org/stable/c/448dfecc7ff807822ecd47a5c052acedca7d09e8 cve-icon cve-icon
https://git.kernel.org/stable/c/46aa80ef49594ed7de685ecbc673b291e9a2c159 cve-icon cve-icon
https://git.kernel.org/stable/c/5e276e6ff9aacf8901b9c3265c3cdd2568c9fff2 cve-icon cve-icon
https://git.kernel.org/stable/c/8b3ce085b52e674290cbfdd07034e7653ffbe4dc cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2025091223-CVE-2025-39795-c418@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39795 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39795 cve-icon
History

Tue, 30 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Mon, 15 Sep 2025 10:45:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Fri, 12 Sep 2025 16:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors.
Title block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-09-29T05:59:35.732Z

Reserved: 2025-04-16T07:20:57.132Z

Link: CVE-2025-39795

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-12T16:15:33.850

Modified: 2025-09-15T15:21:42.937

Link: CVE-2025-39795

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-12T00:00:00Z

Links: CVE-2025-39795 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-09-15T10:43:47Z