CVE-2025-38697: jfs: upper bound check of tree index in dbAllocAG
In the Linux kernel, the following vulnerability has been resolved:
jfs: upper bound check of tree index in dbAllocAG
When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38697?
CVE-2025-38697 has been classified as a high severity vulnerability due to the risk of out-of-bounds access in the Linux kernel.
What impact does CVE-2025-38697 have on the Linux kernel?
CVE-2025-38697 can lead to potential data corruption and security breaches due to improper tree index management in dbAllocAG.
How do I fix CVE-2025-38697?
To fix CVE-2025-38697, you should update your Linux kernel to the latest stable release that contains the security patches.
Which versions of the Linux kernel are affected by CVE-2025-38697?
CVE-2025-38697 affects various versions of the Linux kernel prior to the inclusion of the patch that resolves this vulnerability.
Is CVE-2025-38697 being actively exploited?
As of now, there is no public information indicating that CVE-2025-38697 is actively being exploited in the wild.