CVE-2025-38663

Published: Aug 22, 2025Modified: Jun 17, 2026

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid file types when reading inodes To prevent inodes with invalid file types from tripping through the vfs and causing malfunctions or assertion failures, add a missing sanity check when reading an inode from a block device. If the file type is not valid, treat it as a filesystem error.

Affected (15)

Products: Linux: Linux Kernel · Debian: Debian Linux

1 product

1 product

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	2.6.30 ≤ version < 5.4.297
Linux Linux Kernel	5.11 ≤ version < 5.15.190
Linux Linux Kernel	5.16 ≤ version < 6.1.148
Linux Linux Kernel	5.5 ≤ version < 5.10.241
Linux Linux Kernel	6.13 ≤ version < 6.15.9
Linux Linux Kernel	6.2 ≤ version < 6.6.101
Linux Linux Kernel	6.7 ≤ version < 6.12.41
Linux Linux Kernel	Version 6.16 rc1
Linux Linux Kernel	Version 6.16 rc2
Linux Linux Kernel	Version 6.16 rc3
Linux Linux Kernel	Version 6.16 rc4
Linux Linux Kernel	Version 6.16 rc5
Linux Linux Kernel	Version 6.16 rc6
Linux Linux Kernel	Version 6.16 rc7