SB2025090474 - Out-of-bounds read in Linux kernel jfs
Published: September 4, 2025
Security Bulletin ID
SB2025090474
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Out-of-bounds read (CVE-ID: CVE-2025-38697)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to an out-of-bounds read error within the dbAllocAG() function in fs/jfs/jfs_dmap.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1467a75819e41341cd5ebd16faa2af1ca3c8f4fe
- https://git.kernel.org/stable/c/173cfd741ad7073640bfb7e2344c2a0ee005e769
- https://git.kernel.org/stable/c/2dd05f09cc323018136a7ecdb3d1007be9ede27f
- https://git.kernel.org/stable/c/30e19a884c0b11f33821aacda7e72e914bec26ef
- https://git.kernel.org/stable/c/49ea46d9025aa1914b24ea957636cbe4367a7311
- https://git.kernel.org/stable/c/5bdb9553fb134fd52ec208a8b378120670f6e784
- https://git.kernel.org/stable/c/a4f199203f79ca9cd7355799ccb26800174ff093
- https://git.kernel.org/stable/c/c214006856ff52a8ff17ed8da52d50601d54f9ce
- https://git.kernel.org/stable/c/c8ca21a2836993d7cb816668458e05e598574e55