Search: CVE-2025-40167

A vulnerability in the Linux kernel's ext4 filesystem was identified where an inode could have both INLINE_DATA and EXTENTS flags set simultaneously, an invalid state. This flaw leads to skipping extent tree validation, causing a kernel BUG_ON due to integer underflow when processing corrupted extents. The issue was reported by syzbot and affects ext4 filesystems mounted without a journal. The fix involves detecting and rejecting inodes with this invalid flag combination early during inode retrieval.