CVE-2025-68794
In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomap_adjust_read_range() assumes that the position and leng...
Affects 1 product across 5 vendors.
Arithmetic operation exceeds the maximum integer value, wrapping around and often leading to undersized allocations.
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
A vulnerability in the Linux kernel's iomap module could lead to incorrect handling of read operations for non-block-aligned positions, potentially causing data corruption or exposure.
BSID: BS-2026-GLOBAL-030486-I • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2025-68794?
What is the CVSS score for CVE-2025-68794?
Is CVE-2025-68794 actively exploited?
How do I remediate CVE-2025-68794?
What systems are affected by CVE-2025-68794?
| CVE ID | CVE-2025-68794 |
|---|---|
| BSID | BS-2026-GLOBAL-030486-I BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2026-01-13 |
| Last Modified | 2026-10-19 |
| ICS Relevance | 0% |
| Weakness (CWE) | |
| Source | NVD |
In the Linux kernel, the following vulnerability has been resolved: iomap: adjust read range correctly for non-block-aligned positions iomap_adjust_read_range() assumes that the position and length passed in are block-aligned. This is not always the case however, as shown in the syzbot generated case for erofs. This causes too many bytes to be skipped for uptodate blocks, which results in returning the incorrect position and length to read in. If all the blocks are uptodate, this underflows length and returns a position beyond the folio. Fix the calculation to also take into account the block offset when calculating how many bytes can be skipped for uptodate blocks.
Source: NIST NVD / MITRE CVE Database
The vulnerability arises from the iomap_adjust_read_range() function not properly handling non-block-aligned positions, which can lead to incorrect byte skipping and data handling issues.
Exploitation Likelihood: MEDIUM
| Vendor | Product | Affected Versions |
|---|---|---|
| Beyond | — | — |
| Block | — | — |
| Folio | — | — |
| Kernel | — | — |
| Linux | Linux | 4.19 |
No official vendor advisory link on record. See the CVE record →
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Confidence | MEDIUM |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 7c5970c7bfc338529f3119f78ffe29ad6e27d6f052f43adc017bb54b8c227a1c5cc8e24584c8b8545c5b98d32118452edae8043f22260233709ecd5dafc68487 |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →