CVE-2025-37740

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: add sanity check for agwidth in dbMount

The width in dmapctl of the AG is zero, it trigger a divide error when calculating the control page level in dbAllocAG.

To avoid this issue, add a check for agwidth in dbAllocAG.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-369

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a065cec230aa807c18828a3eee82f1c8592c2adf; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 722e72f7f9c69fcb3ab7988c2471feff7a4c8de1; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a741f29ac8b6374c9904be8b7ac7cdfcd7e7e4fa; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < a260bf14cd347878f01f70739ba829442a474a16; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < cc0bc4cb62ce5fa0c383e3bf0765d01f46bd49ac; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ccd97c8a4f90810f228ee40d1055148fa146dd57; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c8c96a9e7660e5e5eea445978fe8f2e432d91c1f; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < e3f85edb03183fb06539e5b50dd2c4bb42b869f0; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ddf2846f22e8575d6b4b6a66f2100f168b8cd73d
LinuxLinux2.6.12

References

Timeline

Published
May 1, 2025
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2025

CVE-2025-377415.5In the Linux kernel, the following vulnerability has been resolved: jfs: Prevent copying of nlink with value 0 from disk inode syzbot repoCVE-2025-377425.5In the Linux kernel, the following vulnerability has been resolved: jfs: Fix uninit-value access of imap allocated in the diMount() functioCVE-2025-377435.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Avoid memory leak while enabling statistics Driver uses CVE-2025-377445.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12k_pci_remove() Kmemleak reportedCVE-2025-377455.5In the Linux kernel, the following vulnerability has been resolved: PM: hibernate: Avoid deadlock in hibernate_compressor_param_set() syzbCVE-2025-377465.5In the Linux kernel, the following vulnerability has been resolved: perf/dwc_pcie: fix duplicate pci_dev devices During platform_device_reCVE-2025-377475.5In the Linux kernel, the following vulnerability has been resolved: perf: Fix hang while freeing sigtrap event Perf can hang while freeingCVE-2025-377485.5In the Linux kernel, the following vulnerability has been resolved: iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group CCVE-2025-377497.1In the Linux kernel, the following vulnerability has been resolved: net: ppp: Add bound checking for skb data on ppp_sync_txmung Ensure weCVE-2025-37756.5The ShopLentor – WooCommerce Builder for Elementor & Gutenberg +20 Modules – All in One Solution (formerly WooLentor) plugin for WordPress iCVE-2025-377507.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix UAF in decryption with multichannel After commit f702CVE-2025-377515.5In the Linux kernel, the following vulnerability has been resolved: x86/cpu: Avoid running off the end of an AMD erratum table The NULL ar
CVE-2025-37740: Medium severity, CVSS 5.5 | Vulnix