← Back

CVE-2025-38697

nvd nist
Published: Sep 4, 2025Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.

Affected (14)

Linux
1 product
Linux Kernel
Debian
1 product
Debian Linux
Configuration A
13 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
From 2.6.12.1 to 5.4.297
Linux Kernel
From 5.11 to 5.15.190
Linux Kernel
From 5.16 to 6.1.149
Linux Kernel
From 5.5 to 5.10.241
Linux Kernel
From 6.13 to 6.15.11
Linux Kernel
From 6.16 to 6.16.2
Linux Kernel
From 6.2 to 6.6.103
Linux Kernel
From 6.7 to 6.12.43
Linux Kernel
Version 2.6.12
Linux Kernel
Version 2.6.12 rc2
Linux Kernel
Version 2.6.12 rc3
Linux Kernel
Version 2.6.12 rc4
Linux Kernel
Version 2.6.12 rc5
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Debian Linux
Version 11.0

Related CWEs

CWE-129
Improper Validation of Array Index
The product uses untrusted input when calculating or using an array index, but the product does not validate or incorrectly validates the index to ensure the index references a valid position within the array.

References (12)

Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.