CVE-2025-38697

In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.

CVSS 3.1

7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-25)

CWE

CWE-129

Published

2025-09-04

Modified

2026-10-19

Record from

the NVD, synced 2026-10-21

Affected

• debian:debian_linux
• linux:linux_kernel

References

• https://git.kernel.org/stable/c/1467a75819e41341cd5ebd16faa2af1ca3c8f4fe
• https://git.kernel.org/stable/c/173cfd741ad7073640bfb7e2344c2a0ee005e769
• https://git.kernel.org/stable/c/2dd05f09cc323018136a7ecdb3d1007be9ede27f
• https://git.kernel.org/stable/c/30e19a884c0b11f33821aacda7e72e914bec26ef
• https://git.kernel.org/stable/c/49ea46d9025aa1914b24ea957636cbe4367a7311

Check your stackJSON