CVE-2025-37925

Aliases:UBUNTU-CVE-2025-37925DEBIAN-CVE-2025-37925CGA-266g-x53j-vhm6CGA-27p4-cf2c-jwhfCGA-2hwv-2vvf-f794CGA-2pfx-rhh2-7jqcCGA-35h6-xqqc-p674CGA-5m34-rgff-c4qxCGA-6cjj-2vh3-vpq9CGA-6g4g-6xmj-m8hcCGA-6rrr-qqq9-wxvhCGA-749r-63w2-qw68CGA-7796-j32h-36pqCGA-7cqh-qmmj-fmjrCGA-fxph-rfx3-p8rvCGA-hhv4-8xh8-54r8CGA-jg75-fqr5-5qrcCGA-jj85-mc4r-mh7mCGA-mcw3-ghfx-w2phCGA-mf3f-c6gw-42vqCGA-mh33-2fjf-h6ccCGA-mh5g-fx9m-gcvmCGA-mv3w-h6pj-qc9mCGA-mvpj-gh9x-6r9cCGA-mw8f-rvrh-m67xCGA-q6m2-gm2w-78j5CGA-qf78-jrw5-hgjvCGA-qhc8-3gf8-636gCGA-v89g-wc4c-4mg5CGA-vjwf-4269-77jgCGA-w2fc-wq7m-fvxcCGA-wx92-9wmx-3v5hCGA-wxv8-jj6v-fp3hCGA-xh77-mpg9-hvc9
Advisory lineage Upstream: 0 Downstream: 43
Modified
Published: 18 Apr 2025, 07:01
Last modified:11 May 2026, 21:17

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.27% LOW
0% probability +0.23%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

18 Apr 2025, 07:01
Published
Vulnerability first disclosed
11 May 2026, 21:17
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: reject on-disk inodes of an unsupported type Syzbot has reported the following BUG: kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00085-g4e46774408d9 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 RIP: 0010:clear_inode+0x168/0x190 Code: 4c 89 f7 e8 ba fe e5 ff e9 61 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 7c c1 4c 89 f7 e8 90 ff e5 ff eb b7 0b e8 01 5d 7f ff 90 0f 0b e8 f9 5c 7f ff 90 0f 0b e8 f1 5c 7f RSP: 0018:ffffc900027dfae8 EFLAGS: 00010093 RAX: ffffffff82157a87 RBX: 0000000000000001 RCX: ffff888104d4b980 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900027dfc90 R08: ffffffff82157977 R09: fffff520004fbf38 R10: dffffc0000000000 R11: fffff520004fbf38 R12: dffffc0000000000 R13: ffff88811315bc00 R14: ffff88811315bda8 R15: ffff88811315bb80 FS: 0000000000000000(0000) GS:ffff888135f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005565222e0578 CR3: 0000000026ef0000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body+0x5f/0xb0 ? die+0x9e/0xc0 ? do_trap+0x15a/0x3a0 ? clear_inode+0x168/0x190 ? do_error_trap+0x1dc/0x2c0 ? clear_inode+0x168/0x190 ? __pfx_do_error_trap+0x10/0x10 ? report_bug+0x3cd/0x500 ? handle_invalid_op+0x34/0x40 ? clear_inode+0x168/0x190 ? exc_invalid_op+0x38/0x50 ? asm_exc_invalid_op+0x1a/0x20 ? clear_inode+0x57/0x190 ? clear_inode+0x167/0x190 ? clear_inode+0x168/0x190 ? clear_inode+0x167/0x190 jfs_evict_inode+0xb5/0x440 ? __pfx_jfs_evict_inode+0x10/0x10 evict+0x4ea/0x9b0 ? __pfx_evict+0x10/0x10 ? iput+0x713/0xa50 txUpdateMap+0x931/0xb10 ? __pfx_txUpdateMap+0x10/0x10 jfs_lazycommit+0x49a/0xb80 ? _raw_spin_unlock_irqrestore+0x8f/0x140 ? lockdep_hardirqs_on+0x99/0x150 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_default_wake_function+0x10/0x10 ? __kthread_parkme+0x169/0x1d0 ? __pfx_jfs_lazycommit+0x10/0x10 kthread+0x2f2/0x390 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x4d/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK> This happens when 'clear_inode()' makes an attempt to finalize an underlying JFS inode of unknown type. According to JFS layout description from https://jfs.sourceforge.net/project/pub/jfslayout.pdf, inode types from 5 to 15 are reserved for future extensions and should not be encountered on a valid filesystem. So add an extra check for valid inode type in 'copy_from_dinode()'.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.27%• Percentile: 19%

Affected Systems

  • chainguard•hyperv-daemons-6.12

    < 6.12.53-r0

  • chainguard•linux-aws-6.12

    < 6.12.53-r0

  • chainguard•linux-aws-6.12-boot-installed

    < 6.12.53-r0

  • chainguard•linux-aws-6.12-fips-boot-installed

    < 6.12.53-r0

  • chainguard•linux-aws-6.12-headers

    < 6.12.53-r0

  • chainguard•linux-aws-6.12-modules

    < 6.12.53-r0

  • chainguard•linux-azure-6.12

    < 6.12.53-r0

  • chainguard•linux-azure-6.12-boot-installed

    < 6.12.53-r0

  • chainguard•linux-azure-6.12-fips-boot-installed

    < 6.12.53-r0

  • chainguard•linux-azure-6.12-headers

    < 6.12.53-r0

  • chainguard•linux-azure-6.12-modules

    < 6.12.53-r0

  • chainguard•linux-gcp-6.12

    < 6.12.53-r0

  • chainguard•linux-gcp-6.12-boot-installed

    < 6.12.53-r0

  • chainguard•linux-gcp-6.12-fips-boot-installed

    < 6.12.53-r0

  • chainguard•linux-gcp-6.12-headers

    < 6.12.53-r0

  • chainguard•linux-gcp-6.12-modules

    < 6.12.53-r0

  • debian•linux

    all | < 6.1.148-1 | < 6.12.41-1 | < 6.16.3-1

  • debian•linux-6.1

    < 6.1.153-1~deb11u1

  • ubuntu•linux

    all | < 5.15.0-163.173 | < 6.8.0-100.100

  • ubuntu•linux-allwinner-5.19

    all

  • ubuntu•linux-aws

    all | < 5.15.0-1097.104 | < 6.8.0-1046.49

  • ubuntu•linux-aws-5.0

    all

  • ubuntu•linux-aws-5.11

    all

  • ubuntu•linux-aws-5.13

    all

  • ubuntu•linux-aws-5.15

    < 5.15.0-1097.104~20.04.1

  • ubuntu•linux-aws-5.19

    all

  • ubuntu•linux-aws-5.3

    all

  • ubuntu•linux-aws-5.4

    all

  • ubuntu•linux-aws-5.8

    all

  • ubuntu•linux-aws-6.2

    all

  • ubuntu•linux-aws-6.5

    all

  • ubuntu•linux-aws-6.8

    < 6.8.0-1046.49~22.04.1

  • ubuntu•linux-aws-fips

    all | < 5.15.0-1097.104+fips1 | < 6.8.0-1046.49+fips1

  • ubuntu•linux-aws-hwe

    all

  • ubuntu•linux-azure

    all | all | < 5.15.0-1101.110 | < 6.8.0-1046.52

  • ubuntu•linux-azure-4.15

    all

  • ubuntu•linux-azure-5.11

    all

  • ubuntu•linux-azure-5.13

    all

  • ubuntu•linux-azure-5.15

    < 5.15.0-1102.111~20.04.1

  • ubuntu•linux-azure-5.19

    all

  • ubuntu•linux-azure-5.3

    all

  • ubuntu•linux-azure-5.4

    all

  • ubuntu•linux-azure-5.8

    all

  • ubuntu•linux-azure-6.11

    all

  • ubuntu•linux-azure-6.2

    all

  • ubuntu•linux-azure-6.5

    all

  • ubuntu•linux-azure-6.8

    < 6.8.0-1051.57~22.04.1

  • ubuntu•linux-azure-edge

    all

  • ubuntu•linux-azure-fde

    all | all | all | all

  • ubuntu•linux-azure-fde-5.19

    all

Showing first 50 affected entries in server-rendered view.

References (39)