CVE-2025-38697

jfs: upper bound check of tree index in dbAllocAG

State: Published
Severity: 7.8 High
Published: Sep 4, 2025
Updated: Aug 5, 2026
Reserved: Apr 16, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: upper bound check of tree index in dbAllocAG

When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bdb9553fb134fd52ec208a8b378120670f6e784Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4f199203f79ca9cd7355799ccb26800174ff093Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1467a75819e41341cd5ebd16faa2af1ca3c8f4feAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49ea46d9025aa1914b24ea957636cbe4367a7311Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 173cfd741ad7073640bfb7e2344c2a0ee005e769Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8ca21a2836993d7cb816668458e05e598574e55Affected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2dd05f09cc323018136a7ecdb3d1007be9ede27fAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30e19a884c0b11f33821aacda7e72e914bec26efAffected 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c214006856ff52a8ff17ed8da52d50601d54f9ceAffected
LinuxLinux	2.6.12Affected before 2.6.12Not affected 5.4.297 through 5.4.Not affected 5.10.241 through 5.10.Not affected 5.15.190 through 5.15.Not affected 6.1.149 through 6.1.Not affected 6.6.103 through 6.6.Not affected 6.12.43 through 6.12.Not affected 6.15.11 through 6.15.Not affected 6.16.2 through 6.16.Not affected 6.17 and laterNot affected

Product

Versions

LinuxLinux

1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 5bdb9553fb134fd52ec208a8b378120670f6e784Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before a4f199203f79ca9cd7355799ccb26800174ff093Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 1467a75819e41341cd5ebd16faa2af1ca3c8f4feAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 49ea46d9025aa1914b24ea957636cbe4367a7311Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 173cfd741ad7073640bfb7e2344c2a0ee005e769Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c8ca21a2836993d7cb816668458e05e598574e55Affected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 2dd05f09cc323018136a7ecdb3d1007be9ede27fAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before 30e19a884c0b11f33821aacda7e72e914bec26efAffected
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to before c214006856ff52a8ff17ed8da52d50601d54f9ceAffected

LinuxLinux

2.6.12Affected
before 2.6.12Not affected
5.4.297 through 5.4.*Not affected
5.10.241 through 5.10.*Not affected
5.15.190 through 5.15.*Not affected
6.1.149 through 6.1.*Not affected
6.6.103 through 6.6.*Not affected
6.12.43 through 6.12.*Not affected
6.15.11 through 6.15.*Not affected
6.16.2 through 6.16.*Not affected
6.17 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.