#VU119370 Input validation error in Linux kernel - CVE-2025-40312
Published: December 8, 2025
Vulnerability identifier: #VU119370
Vulnerability risk: Low
CVSSv4.0: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear
CVE-ID: CVE-2025-40312
CWE-ID: CWE-20
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerable software:
Linux kernel
Linux kernel
Software vendor:
Linux Foundation
Linux Foundation
Description
The vulnerability allows a local user to perform a denial of service (DoS) attack.
The vulnerability exists due to improper input validation within the jfs_iget() function in fs/jfs/inode.c. A local user can perform a denial of service (DoS) attack.
Remediation
Install update from vendor's repository.
External links
- https://git.kernel.org/stable/c/1795277a4e98d82e6451544d43695540cee042ea
- https://git.kernel.org/stable/c/19cce65709a8a2966203653028d9004e28e85bd5
- https://git.kernel.org/stable/c/2870a7dec49ccdc3f6ae35da8f5d6737f21133a8
- https://git.kernel.org/stable/c/46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f
- https://git.kernel.org/stable/c/7a5aa54fba2bd591b22b9b624e6baa9037276986
- https://git.kernel.org/stable/c/8d6a9cbd276b3b85da0e7e98208f89416fed9265
- https://git.kernel.org/stable/c/ce054a366c54992185c9514e489a14f145b10c29
- https://git.kernel.org/stable/c/fabc1348bb8fe6bc80850014ee94bd89945f7f4d