CVE-2025-38204

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
04/07/2025
Last modified:
04/07/2025

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> jfs: fix array-index-out-of-bounds read in add_missing_indices<br /> <br /> stbl is s8 but it must contain offsets into slot which can go from 0 to<br /> 127.<br /> <br /> Added a bound check for that error and return -EIO if the check fails.<br /> Also make jfs_readdir return with error if add_missing_indices returns<br /> with an error.

Impact