CVE-2025-39743: jfs: truncate good inode pages when hard link is 0
In the Linux kernel, the following vulnerability has been resolved:
jfs: truncate good inode pages when hard link is 0
The fileset value of the inode copy from the disk by the reproducer is AGGRRESERVEDI. When executing evict, its hard link number is 0, so its inode pages are not truncated. This causes the bugon to be triggered when executing clearinode() because nrpages is greater than 0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.107-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39743?
CVE-2025-39743 is classified as a medium severity vulnerability in the Linux kernel.
How do I fix CVE-2025-39743?
To fix CVE-2025-39743, you should upgrade to the latest version of the Linux kernel that includes the patch for this vulnerability.
What impact does CVE-2025-39743 have on my system?
CVE-2025-39743 may allow unauthorized users to exploit inode handling, potentially leading to data corruption.
What versions of the Linux kernel are affected by CVE-2025-39743?
CVE-2025-39743 affects specific versions of the Linux kernel that have not been patched against this vulnerability.
Is there a workaround for CVE-2025-39743 while waiting for a patch?
There are no specific workarounds recommended for CVE-2025-39743, so applying the patch is advised as soon as possible.