CVE-2025-40312

Not scored yetLast modified Oct 14, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: Verify inode mode when loading from disk

The inode mode loaded from corrupted disk can be invalid. Do like what commit 0a9e74051313 ("isofs: Verify inode mode when loading from disk") does.

Metrics

No CVSS score has been published yet.

Affected software

VendorProductVersions
LinuxLinux>= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 19cce65709a8a2966203653028d9004e28e85bd5; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < fabc1348bb8fe6bc80850014ee94bd89945f7f4d; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 2870a7dec49ccdc3f6ae35da8f5d6737f21133a8; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < ce054a366c54992185c9514e489a14f145b10c29; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 1795277a4e98d82e6451544d43695540cee042ea; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 8d6a9cbd276b3b85da0e7e98208f89416fed9265; >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 7a5aa54fba2bd591b22b9b624e6baa9037276986
LinuxLinux2.6.12

References

Timeline

Published
Dec 8, 2025
Last modified
Oct 14, 2026
NVD status
Deferred

Related CVEs from 2025

CVE-2025-40313In the Linux kernel, the following vulnerability has been resolved: ntfs3: pretend $Extend records as regular files Since commit af153bb63CVE-2025-40314In the Linux kernel, the following vulnerability has been resolved: usb: cdns3: gadget: Use-after-free during failed initialization and exiCVE-2025-40315In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_fs: Fix epfile null pointer access after ep enable. A rCVE-2025-40316In the Linux kernel, the following vulnerability has been resolved: drm/mediatek: Fix device use-after-free on unbind A recent change fixeCVE-2025-403177.8In the Linux kernel, the following vulnerability has been resolved: regmap: slimbus: fix bus_context pointer in regmap init calls Commit 4CVE-2025-403188.8In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once hci_cmd_synCVE-2025-403197.8In the Linux kernel, the following vulnerability has been resolved: bpf: Sync pending IRQ work before freeing ring buffer Fix a race whereCVE-2025-40328.1A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue afCVE-2025-403209.8In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound When sCVE-2025-40321In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix crash while sending Action Frames in standalone AP CVE-2025-403227.1In the Linux kernel, the following vulnerability has been resolved: fbdev: bitblit: bound-check glyph index in bit_putcs* bit_putcs_aligneCVE-2025-403237.8In the Linux kernel, the following vulnerability has been resolved: fbcon: Set fb_display[i]->mode to NULL when the mode is released Recen
CVE-2025-40312: Unscored | Vulnix