High severity · published Sep 4, 2025
CVE-2025-38697
jfs: upper bound check of tree index in dbAllocAG
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
jfs: upper bound check of tree index in dbAllocAG
When computing the tree index in dbAllocAG, we never check if we are
out of bounds realative to the size of the stree.
This could happen in a scenario where the filesystem metadata are
corrupted.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 8% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
2.6.12.1 before 5.4.297; 5.5 before 5.10.241; 5.11 before 5.15.190; 5.16 before 6.1.149; 6.2 before 6.6.103; 6.7 before 6.12.43; +7 more · source: NVD
LI
Linux · Linux
1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 5bdb9553fb134fd52ec208a8b378120670f6e784; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before a4f199203f79ca9cd7355799ccb26800174ff093; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1467a75819e41341cd5ebd16faa2af1ca3c8f4fe; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 49ea46d9025aa1914b24ea957636cbe4367a7311; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 173cfd741ad7073640bfb7e2344c2a0ee005e769; 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c8ca21a2836993d7cb816668458e05e598574e55; +4 more · source: vendor
DL
Debian Linux · Debian
11.0 · source: NVD
SC
SIMATIC CN 4100 · Siemens
before V5.0 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-38697
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-38697
Patch
https://git.kernel.org/stable/c/1467a75819e41341cd5ebd16faa2af1ca3c8f4fe
Patch
https://git.kernel.org/stable/c/173cfd741ad7073640bfb7e2344c2a0ee005e769
Patch
https://git.kernel.org/stable/c/2dd05f09cc323018136a7ecdb3d1007be9ede27f
Patch
https://git.kernel.org/stable/c/30e19a884c0b11f33821aacda7e72e914bec26ef
Patch
https://git.kernel.org/stable/c/49ea46d9025aa1914b24ea957636cbe4367a7311
Patch
https://git.kernel.org/stable/c/5bdb9553fb134fd52ec208a8b378120670f6e784
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability