Critical Vulnerability in Linux Kernel: JFS Tree Index Out of Bounds
Summary
CVE-2025-38697: In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the si... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The Linux kernel is the core component of many operating systems, managing hardware resources and providing essential services for software applications. It is known for its stability, performance, and flexibility, making it a popular choice for servers, desktops, and embedded systems. However, vulnerabilities can arise, such as the one identified in the JFS (Journaled File System) component, which can lead to severe consequences if not addressed.
Vulnerability Detail
In the Linux kernel, a vulnerability has been identified in the JFS component related to the upper bound check of the tree index in the dbAllocAG function. This issue arises when the tree index is computed without verifying if it exceeds the size of the stree, potentially leading to out-of-bounds access. If the filesystem metadata is corrupted, this vulnerability could be exploited, resulting in data corruption or system crashes.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
Currently, there are no specific workarounds mentioned for this vulnerability. It is recommended to apply the patch as soon as it is available to mitigate risks.
Conclusion
The CVE-2025-38697 vulnerability in the Linux kernel's JFS component poses significant risks due to its potential for data corruption and system crashes. It is essential to update to the patched versions provided for Debian systems to ensure security and stability.
See every vulnerability recorded for linux →
FAQ
CVE-2025-38697 is a vulnerability in the Linux kernel's JFS component that allows for out-of-bounds access due to a lack of upper bound checks in the tree index computation.
Exploitation of this vulnerability could lead to data corruption or system crashes, especially if the filesystem metadata is compromised.
Yes, patched versions are available for Debian 13 (6.12.43-1) and Debian 14 (6.16.3-1).
You can check if your application is affected by using the Vulert playground at Vulert Scanner, which allows you to monitor and alert for open-source vulnerabilities without requiring code access.
While there are no specific workarounds, it is crucial to prioritize applying the patch as soon as possible to mitigate risks associated with this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
