In the Linux kernel, the following vulnerability has been resolved:
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
In jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block number inside dbFree(). db_l2nbperpage, which is the log2 number of blocks per page, is passed as an argument to BLKTODMAP which uses it for shifting.
Syzbot reported a shift out-of-bounds crash because db_l2nbperpage is too big. This happens because the large value is set without any validation in dbMount() at line 181.
Thus, make sure that db_l2nbperpage is correct while mounting.
Max number of blocks per page = Page size / Min block size => log2(Max num_block per page) = log2(Page size / Min block size) = log2(Page size) - log2(Min block size)
=> Max db_l2nbperpage = L2PSIZE - L2MINBLOCKSIZE
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.322-244.536Upgrade kernel-tools-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-nvidia-tegra-igxUpgrade linux-bluefieldUpgrade linux-intel-iotg-5.15Upgrade linux-hwe-5.15Upgrade linux-azure-5.4Upgrade linux-aws-fipsUpgrade linux-realtimeUpgrade linux-awsUpgrade linuxUpgrade linux-ibm-5.4Upgrade linux-raspi-5.4Upgrade linux-ibmUpgrade linux-hwe-5.4Upgrade linux-gcp-fipsUpgrade linux-azureUpgrade linux-gcp-5.4Upgrade linux-iotUpgrade linux-azure-fipsUpgrade linux-kvmUpgrade linux-azure-fde-5.15Upgrade linux-gcpUpgrade linux-xilinx-zynqmpUpgrade linux-nvidiaUpgrade linux-lowlatencyUpgrade linux-oracleUpgrade linux-gcp-5.15Upgrade linux-intel-iot-realtimeUpgrade linux-raspiUpgrade linux-ibm-5.15Upgrade linux-intel-iotgUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-gkeUpgrade linux-nvidia-tegraUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeopUpgrade linux-oracle-5.15Upgrade linux-oracle-5.4Upgrade linux-aws-5.4Upgrade linux-fipsUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-5.15 | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub