CVE-2025-38663

nilfs2: reject invalid file types when reading inodes

State: Published
Severity: Not scored
Published: Aug 22, 2025
Updated: May 11, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: reject invalid file types when reading inodes

To prevent inodes with invalid file types from tripping through the vfs and causing malfunctions or assertion failures, add a missing sanity check when reading an inode from a block device. If the file type is not valid, treat it as a filesystem error.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before dd298c0b889acd3ecaf48b6e840c9ab91882e342Affected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 2cf0c4130bf340be3935d097a3dcbfefdcf65815Affected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 98872a934ea6a95985fb6a3655a78a5f0c114e82Affected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 1a5c204e175a78556b8ef1f7683249fa5197295aAffected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before bf585ee198bba4ff25b0d80a0891df4656cb0d08Affected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 79663a15a1c70ca84f86f2dbba07b423fe7d5d4fAffected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 42cd46b3a8b1497b9258dc7ac445dbd6beb73e2fAffected 05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 4aead50caf67e01020c8be1945c3201e8a972a27Affected
LinuxLinux	2.6.30Affected before 2.6.30Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.148 through 6.1.Not affected 6.6.101 through 6.6.Not affected 6.12.41 through 6.12.Not affected 6.15.9 through 6.15.*Not affected 6.16 and laterNot affected

Product

Versions

LinuxLinux

05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before dd298c0b889acd3ecaf48b6e840c9ab91882e342Affected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 2cf0c4130bf340be3935d097a3dcbfefdcf65815Affected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 98872a934ea6a95985fb6a3655a78a5f0c114e82Affected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 1a5c204e175a78556b8ef1f7683249fa5197295aAffected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before bf585ee198bba4ff25b0d80a0891df4656cb0d08Affected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 79663a15a1c70ca84f86f2dbba07b423fe7d5d4fAffected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 42cd46b3a8b1497b9258dc7ac445dbd6beb73e2fAffected
05fe58fdc10df9ebea04c0eaed57adc47af5c184 to before 4aead50caf67e01020c8be1945c3201e8a972a27Affected

LinuxLinux

2.6.30Affected
before 2.6.30Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.148 through 6.1.*Not affected
6.6.101 through 6.6.*Not affected
6.12.41 through 6.12.*Not affected
6.15.9 through 6.15.*Not affected
6.16 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.