CVE-2025-38698: jfs: Regular file corruption check
In the Linux kernel, the following vulnerability has been resolved:
jfs: Regular file corruption check
The reproducer builds a corrupted file on disk with a negative isize value. Add a check when opening this file to avoid subsequent operation failures.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Compensating control
In the Linux kernel JFS regular-file open path, add a check for a negative i_size value to detect corrupted files and prevent subsequent operation failures.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-38698?
CVE-2025-38698 has a high severity due to its potential to cause regular file corruption in the Linux kernel.
How do I fix CVE-2025-38698?
To fix CVE-2025-38698, ensure that your Linux kernel is updated to a version that contains the patch for this vulnerability.
What systems are affected by CVE-2025-38698?
CVE-2025-38698 affects the Linux kernel, specifically systems utilizing the JFS file system.
What are the implications of CVE-2025-38698?
The implications of CVE-2025-38698 include the risk of file corruption and operational failures when handling corrupted files with negative i_size values.
Is there a workaround for CVE-2025-38698?
Currently, the recommended workaround for CVE-2025-38698 is to avoid using the corrupted files until the system can be updated.