SB20251208129 - Input validation error in Linux kernel jfs
Published: December 8, 2025
Security Bulletin ID
SB20251208129
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Input validation error (CVE-ID: CVE-2025-40312)
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the jfs_iget() function in fs/jfs/inode.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's website.
References
- https://git.kernel.org/stable/c/1795277a4e98d82e6451544d43695540cee042ea
- https://git.kernel.org/stable/c/19cce65709a8a2966203653028d9004e28e85bd5
- https://git.kernel.org/stable/c/2870a7dec49ccdc3f6ae35da8f5d6737f21133a8
- https://git.kernel.org/stable/c/46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f
- https://git.kernel.org/stable/c/7a5aa54fba2bd591b22b9b624e6baa9037276986
- https://git.kernel.org/stable/c/8d6a9cbd276b3b85da0e7e98208f89416fed9265
- https://git.kernel.org/stable/c/ce054a366c54992185c9514e489a14f145b10c29
- https://git.kernel.org/stable/c/fabc1348bb8fe6bc80850014ee94bd89945f7f4d