VulnSocial

CVE-2025-70100Disclosure(gkostka / lwext4)

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A divide-by-zero vulnerability in the ext4_block_set_lb_size function in src/ext4_blockdev.c of the lwext4 1.0.0 library allows attackers to cause a denial of service by providing a malformed ext4 filesystem image that results in a zero logical block size. The vulnerability is triggered during mount or image processing and leads to a Floating-Point Exception (FPE) under sanitizers or a runtime crash in standard builds due to missing validation of lb_size.

gkostka CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-369

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • lwext4

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-03); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
gkostka
Products
lwext4

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-03: 1Mentions · 2026-07-01: 1Technical Details · 2026-06-03: 1Technical Details · 2026-07-01: 106-0307-01
Signal classification1 categories
Disclosure
2100.0%
Referenced assets4 URLs
Full discourse2 posts
  • Open Source Security mailing list@oss_security
    Disclosure

    lwext4: ext2/ext3/ext4 filesystem library for microcontrollers CVE-2025-70099: NULL pointer dereference https://www.openwall.com/lists/oss-security/2026/06/29/4 CVE-2025-70100: Divide-by-zero https://www.openwall.com/lists/oss-security/2026/06/29/5 CVE-2025-70101: Out-of-bounds read https://www.openwall.com/lists/oss-security/2026/06/29/6

    Post summary

    Three new CVEs for lwext4 are disclosed with their technical weakness types, but no PoC, exploit, patch or active exploitation information is provided.

    00052573
    4.7K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2025-70100 Divide-by-Zero Denial of Service in lwext4 1.0.0 ext4_block_set_lb_size Function https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-70100

    Post summary

    The post announces a divide‑by‑zero denial of service vulnerability in lwext4 1.0.0, providing technical details but no evidence of PoC, exploitation, or patching.

    0000035
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgkostkalwext41.0.0--

Explore more

Back to dashboardgkostka CVEslwext4 vulnerabilities