In the Linux kernel, the following vulnerability has been resolved:
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
In jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block number inside dbFree(). db_l2nbperpage, which is the log2 number of blocks per page, is passed as an argument to BLKTODMAP which uses it for shifting.
Syzbot reported a shift out-of-bounds crash because db_l2nbperpage is too big. This happens because the large value is set without any validation in dbMount() at line 181.
Thus, make sure that db_l2nbperpage is correct while mounting.
Max number of blocks per page = Page size / Min block size => log2(Max num_block per page) = log2(Page size / Min block size) = log2(Page size) - log2(Min block size)
=> Max db_l2nbperpage = L2PSIZE - L2MINBLOCKSIZE
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernelUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade python-perfUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-gkeUpgrade linux-oracleUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-oracle-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-ibm-5.15Upgrade linux-nvidia-tegraUpgrade linux-azure-5.15Upgrade linux-aws-5.4Upgrade linux-azure-fde-5.15Upgrade linux-fipsUpgrade linux-oracle-5.15Upgrade linux-aws-5.15Upgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-kvmUpgrade linux-azure-fipsUpgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-hwe-5.4Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-nvidia-tegra-igxUpgrade linux-realtimeUpgrade linux-ibmUpgrade linux-awsUpgrade linux-ibm-5.4Upgrade linuxUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-hwe-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-aws-fipsUpgrade linux-gcp-fipsUpgrade linux-iotUpgrade linux-gcp-5.4 | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub