CVE-2025-38204

HighCVSS 7.1/10Last modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds read in add_missing_indices

stbl is s8 but it must contain offsets into slot which can go from 0 to 127.

Added a bound check for that error and return -EIO if the check fails. Also make jfs_readdir return with error if add_missing_indices returns with an error.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Weakness enumeration

CWE-125

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 81af4b34fd72d390d7f237c6a545cc6d09707956; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < bfa4655d28f338e68d345aed80d19be7999bbce2; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 44618bee303bed151ef3a525ff79fbd7689593b5; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5730e2da0655336fed6aa3c25892e69e2ba5cb76; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c8733634978086b41255695d993cec3017a23a27; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2ec34dc7094b14149ce091c77aff43a45d255518; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c8399564a58fb6ea2ff21a6fd278417943cb51a5; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 5dff41a86377563f7a2b968aae00d25b4ceb37c9
LinuxLinux2.6.12

References

Timeline

Published
Jul 4, 2025
Last modified
Oct 30, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-382055.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 CVE-2025-382067.8In the Linux kernel, the following vulnerability has been resolved: exfat: fix double free in delayed_free The double free could happen inCVE-2025-382075.5In the Linux kernel, the following vulnerability has been resolved: mm: fix uprobe pte be overwritten when expanding vma Patch series "FixCVE-2025-382085.5In the Linux kernel, the following vulnerability has been resolved: smb: client: add NULL check in automount_fullpath page is checked for CVE-2025-382097.8In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: remove tag set when second admin queue config fails Commit 1CVE-2025-38215.4A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0. It has been declared as problematic. This vulnCVE-2025-382105.5In the Linux kernel, the following vulnerability has been resolved: configfs-tsm-report: Fix NULL dereference of tsm_ops Unlike sysfs, theCVE-2025-382117.8In the Linux kernel, the following vulnerability has been resolved: RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction CVE-2025-382127.8In the Linux kernel, the following vulnerability has been resolved: ipc: fix to protect IPCS lookups using RCU syzbot reported that it disCVE-2025-382145.5In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var CVE-2025-382155.5In the Linux kernel, the following vulnerability has been resolved: fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videCVE-2025-382167.8In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Restore context entry setup order for aliased devices Comm
CVE-2025-38204: High severity, CVSS 7.1 | Vulnix