Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2025-38204

jfs: fix array-index-out-of-bounds read in add_missing_indices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: fix array-index-out-of-bounds read in add_missing_indices stbl is s8 but it must contain offsets into slot which can go from 0 to 127. Added a bound check for that error and return -EIO if the check fails. Also make jfs_readdir return with error if add_missing_indices returns with an error.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 81af4b34fd72d390d7f237c6a545cc6d09707956affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < bfa4655d28f338e68d345aed80d19be7999bbce2affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 44618bee303bed151ef3a525ff79fbd7689593b5affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5730e2da0655336fed6aa3c25892e69e2ba5cb76affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c8733634978086b41255695d993cec3017a23a27affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 2ec34dc7094b14149ce091c77aff43a45d255518affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < c8399564a58fb6ea2ff21a6fd278417943cb51a5affected
  • 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 to < 5dff41a86377563f7a2b968aae00d25b4ceb37c9affected

Linux Linux

Default version status: affected

  • 2.6.12affected
  • 0 to < 2.6.12unaffected
  • 5.4.295 to ≤ 5.4.*unaffected
  • 5.10.239 to ≤ 5.10.*unaffected
  • 5.15.186 to ≤ 5.15.*unaffected
  • 6.1.191 to ≤ 6.1.*unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.113 to ≤ 6.12.*unaffected
  • 6.15.4 to ≤ 6.15.*unaffected
  • 6.16 to ≤ *unaffected

References