The Linux kernel ext4 filesystem contained a vulnerability (CVE-2025-40198) where the parse_apply_sb_mount_options() function could potentially perform a buffer over-read due to assumptions about the NUL termination of the s_mount_opts string in the superblock. The fix hardens this function by treating s_mount_opts as a potential non-string, preventing over-read conditions. This vulnerability has been resolved in the Linux kernel, but no explicit affected versions or patch details are provided in the input data.

The vulnerability allows a potential buffer over-read, which can lead to unauthorized disclosure of memory contents (confidentiality impact), possible corruption of data or control flow (integrity impact), and system instability or crashes (availability impact). The CVSS vector indicates local attack vector with low complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vulnerability is resolved in the Linux kernel, applying the official kernel updates when available is recommended. No vendor advisory or patch links are provided in the input data, so monitoring official Linux kernel security advisories is advised.