In the Linux kernel, the following vulnerability has been resolved:
jfs: jfs_dmap: Validate db_l2nbperpage while mounting
In jfs_dmap.c at line 381, BLKTODMAP is used to get a logical block number inside dbFree(). db_l2nbperpage, which is the log2 number of blocks per page, is passed as an argument to BLKTODMAP which uses it for shifting.
Syzbot reported a shift out-of-bounds crash because db_l2nbperpage is too big. This happens because the large value is set without any validation in dbMount() at line 181.
Thus, make sure that db_l2nbperpage is correct while mounting.
Max number of blocks per page = Page size / Min block size => log2(Max num_block per page) = log2(Page size / Min block size) = log2(Page size) - log2(Min block size)
=> Max db_l2nbperpage = L2PSIZE - L2MINBLOCKSIZE
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-4.14.322-244.536Upgrade perfUpgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.192-182.736Upgrade kernelUpgrade bpftool | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Sep 17, 2025 | Sep 17, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Sep 15, 2025 |
| Ubuntu | — | Upgrade linux-intel-iotg-5.15Upgrade linux-raspi-5.4Upgrade linuxUpgrade linux-nvidia-tegra-igxUpgrade linux-hwe-5.4Upgrade linux-ibm-5.4Upgrade linux-bluefieldUpgrade linux-realtimeUpgrade linux-iotUpgrade linux-azureUpgrade linux-gcp-fipsUpgrade linux-azure-5.4Upgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-aws-fipsUpgrade linux-ibmUpgrade linux-gcp-5.4Upgrade linux-nvidiaUpgrade linux-intel-iot-realtimeUpgrade linux-azure-fde-5.15Upgrade linux-azure-fipsUpgrade linux-aws-5.4Upgrade linux-azure-5.15Upgrade linux-lowlatency-hwe-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-gcpUpgrade linux-oracle-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-nvidia-tegraUpgrade linux-raspiUpgrade linux-oracleUpgrade linux-aws-5.15Upgrade linux-riscv-5.15Upgrade linux-gcp-5.15Upgrade linux-fipsUpgrade linux-gkeopUpgrade linux-intel-iotgUpgrade linux-lowlatencyUpgrade linux-ibm-5.15Upgrade linux-kvmUpgrade linux-oracle-5.15 | Sep 19, 2025 | Sep 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Sep 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub