In the Linux kernel, the following vulnerability has been resolved:
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
In jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block number inside dbFree(). db_l2nbperpage, which is the log2 number of blocks per page, is passed as an argument to BLKTODMAP which uses it for shifting.
Syzbot reported a shift out-of-bounds crash because db_l2nbperpage is too big. This happens because the large value is set without any validation in dbMount() at line 181.
Thus, make sure that db_l2nbperpage is correct while mounting.
Max number of blocks per page = Page size / Min block size => log2(Max num_block per page) = log2(Page size / Min block size) = log2(Page size) - log2(Min block size)
=> Max db_l2nbperpage = L2PSIZE - L2MINBLOCKSIZE
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade bpftoolUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-develUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-igxUpgrade linux-aws-fipsUpgrade linux-intel-iotg-5.15Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-realtimeUpgrade linux-azureUpgrade linux-iotUpgrade linux-gcp-5.4Upgrade linux-bluefieldUpgrade linux-ibm-5.4Upgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-raspi-5.4Upgrade linux-azure-5.4Upgrade linux-oracle-5.4Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-azure-fipsUpgrade linux-gcp-5.15Upgrade linux-oracle-5.15Upgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linux-intel-iot-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-aws-5.15Upgrade linux-ibm-5.15Upgrade linux-gcpUpgrade linux-nvidia-tegraUpgrade linux-aws-5.4Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-azure-fde-5.15Upgrade linux-lowlatencyUpgrade linux-kvm | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub