CVE-2025-39795: debian linux — Fix

Description

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors.

Is your site exposed to CVE-2025-39795?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.5

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness Type (CWE)

CWE-674 CWE-674

Affected Products

Vendor	Product	Versions
linux	linux_kernel	5.10 — 5.10.241
linux	linux_kernel	5.11 — 5.15.190
linux	linux_kernel	5.16 — 6.1.149
linux	linux_kernel	6.2 — 6.6.103
linux	linux_kernel	6.7 — 6.12.43
linux	linux_kernel	6.13 — 6.15.11
linux	linux_kernel	6.16 — 6.16.2
debian	debian_linux	All

References

Advisories & Patches

https://git.kernel.org/stable/c/14beeef4aafecc8a41de534e31fb5be94739392f https://git.kernel.org/stable/c/31f2f080898e50cbf2bae62d35f9f2a997547b38 https://git.kernel.org/stable/c/3b9d69f0e68aa6b0acd9791c45d445154a8c66e9 https://git.kernel.org/stable/c/418751910044649baa2b424ea31cce3fc4dcc253 https://git.kernel.org/stable/c/448dfecc7ff807822ecd47a5c052acedca7d09e8 https://git.kernel.org/stable/c/46aa80ef49594ed7de685ecbc673b291e9a2c159 https://git.kernel.org/stable/c/5e276e6ff9aacf8901b9c3265c3cdd2568c9fff2 https://git.kernel.org/stable/c/8b3ce085b52e674290cbfdd07034e7653ffbe4dc

Other References

https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html https://cert-portal.siemens.com/productcert/html/ssa-032379.html https://cert-portal.siemens.com/productcert/html/ssa-082556.html

Frequently Asked Questions

What is CVE-2025-39795? +

In the Linux kernel, the following vulnerability has been resolved: block: avoid possible overflow for chunk_sectors check in blk_stack_limits() In blk_stack_limits(), we check that the t->chunk_sectors value is a multiple of the t->physical_block_size value. However, by finding the chunk_sectors value in bytes, we may overflow the unsigned int which holds chunk_sectors, so change the check to be based on sectors. It has a CVSS v3.1 base score of 5.5 (MEDIUM).

How severe is CVE-2025-39795? +

CVE-2025-39795 has a CVSS v3.1 score of 5.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2025-39795? +

CVE-2025-39795 affects products from debian, linux, specifically: debian_linux, linux_kernel. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2025-39795? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2026-8936

Fixed a VM panic caused by unbounded recursion in the grpcfuse kernel module when a container created deeply nested directories …

CVE-2025-10728

When the module renders a Svg file that contains a <pattern> element, it might end up rendering it recursively leading …

CVE-2025-11896

In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via the "UseCMap" entry, leads to infinite recursion …

CVE-2026-46689

Kanidm is an identity management platform. Prior to version 1.9.3, a single unauthenticated GET to any /scim/v1/... endpoint with a …

CVE-2026-44844

eml_parser serves as a python module for parsing eml files and returning various information found in the e-mail as well …

CVE-2026-41673

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to …

CVE-2025-39795