CVE-2025-39743

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: truncate good inode pages when hard link is 0

The fileset value of the inode copy from the disk by the reproducer is AGGR_RESERVED_I. When executing evict, its hard link number is 0, so its inode pages are not truncated. This causes the bugon to be triggered when executing clear_inode() because nrpages is greater than 0.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
LinuxLinux>= 32983696a48a6c41d99f3eca82ba7510a552d843, < 89fff8e3d6710fc32507b8e19eb5afa9fb79b896; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < 5845b926c561b8333cd65169526eec357d7bb449; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < 8ed7275910fb7177012619864e04d3008763f3ea; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < b5b471820c33365a8ccd2d463578bf4e47056c2c; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < 34d8e982bac48bdcca7524644a8825a580edce74; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < df3fd8daf278eca365f221749ae5b728e8382a04; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < 2b1d5ca395a5fb170c3f885cd42c16179f7f54ec; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < 1bb5cdc3e39f0c2b311fcb631258b7e60d3fb0d3; >= 32983696a48a6c41d99f3eca82ba7510a552d843, < 2d91b3765cd05016335cd5df5e5c6a29708ec058
LinuxLinux2.6.14
SiemensSIMATIC CN 4100< V5.0

References

Timeline

Published
Sep 11, 2025
Last modified
Oct 19, 2026
NVD status
Modified

Related CVEs from 2025

CVE-2025-397447.1In the Linux kernel, the following vulnerability has been resolved: rcu: Fix rcu_read_unlock() deadloop due to IRQ work During rcu_read_unCVE-2025-397455.5In the Linux kernel, the following vulnerability has been resolved: rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels For CVE-2025-397465.5In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: shutdown driver when hardware is unreliable In rare caseCVE-2025-397475.5In the Linux kernel, the following vulnerability has been resolved: drm/msm: Add error handling for krealloc in metadata setup Function msCVE-2025-397485.5In the Linux kernel, the following vulnerability has been resolved: bpf: Forget ranges when refining tnum after JSET Syzbot reported a kerCVE-2025-397497.0In the Linux kernel, the following vulnerability has been resolved: rcu: Protect ->defer_qs_iw_pending from data race On kernels built witCVE-2025-39755.3A vulnerability was found in ScriptAndTools eCommerce-website-in-PHP 3.0 and classified as problematic. This issue affects some unknown procCVE-2025-397507.1In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Correct tid cleanup when tid setup fails Currently, if aCVE-2025-397525.5In the Linux kernel, the following vulnerability has been resolved: ARM: rockchip: fix kernel hang during smp initialization In order to bCVE-2025-397535.5In the Linux kernel, the following vulnerability has been resolved: gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops Clears up the warninCVE-2025-397544.7In the Linux kernel, the following vulnerability has been resolved: mm/smaps: fix race between smaps_hugetlb_range and migration smaps_hugCVE-2025-397555.5In the Linux kernel, the following vulnerability has been resolved: staging: gpib: Fix cb7210 pcmcia Oops The pcmcia_driver struct was st
CVE-2025-39743: High severity, CVSS 7.8 | Vulnix