In the Linux kernel, the following vulnerability has been resolved:
jfs: Fix uninit-value access of imap allocated in the diMount() function
syzbot reports that hex_dump_to_buffer is using uninit-value:
===================================================== BUG: KMSAN: uninit-value in hex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171 hex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171 print_hex_dump+0x13d/0x3e0 lib/hexdump.c:276 diFree+0x5ba/0x4350 fs/jfs/jfs_imap.c:876 jfs_evict_inode+0x510/0x550 fs/jfs/inode.c:156 evict+0x723/0xd10 fs/inode.c:796 iput_final fs/inode.c:1946 [inline] iput+0x97b/0xdb0 fs/inode.c:1972 txUpdateMap+0xf3e/0x1150 fs/jfs/jfs_txnmgr.c:2367 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline] jfs_lazycommit+0x627/0x11d0 fs/jfs/jfs_txnmgr.c:2733 kthread+0x6b9/0xef0 kernel/kthread.c:464 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Uninit was created at: slab_post_alloc_hook mm/slub.c:4121 [inline] slab_alloc_node mm/slub.c:4164 [inline] __kmalloc_cache_noprof+0x8e3/0xdf0 mm/slub.c:4320 kmalloc_noprof include/linux/slab.h:901 [inline] diMount+0x61/0x7f0 fs/jfs/jfs_imap.c:105 jfs_mount+0xa8e/0x11d0 fs/jfs/jfs_mount.c:176 jfs_fill_super+0xa47/0x17c0 fs/jfs/super.c:523 get_tree_bdev_flags+0x6ec/0x910 fs/super.c:1636 get_tree_bdev+0x37/0x50 fs/super.c:1659 jfs_get_tree+0x34/0x40 fs/jfs/super.c:635 vfs_get_tree+0xb1/0x5a0 fs/super.c:1814 do_new_mount+0x71f/0x15e0 fs/namespace.c:3560 path_mount+0x742/0x1f10 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount+0x71f/0x800 fs/namespace.c:4088 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4088 x64_sys_call+0x39bf/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f =====================================================
The reason is that imap is not properly initialized after memory allocation. It will cause the snprintf() function to write uninitialized data into linebuf within hex_dump_to_buffer().
Fix this by using kzalloc instead of kmalloc to clear its content at the beginning in diMount().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-kvmsmall-vdsoUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade gfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-rtUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kernel-azure-optionalUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-rt-optionalUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-rt-vdsoUpgrade dtb-qcomUpgrade kernel-rt-livepatch-develUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade dtb-apmUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kselftests-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-symsUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade kernel-default-baseUpgrade dtb-sprdUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dtb-caviumUpgrade dtb-amazonUpgrade dlm-kmp-rtUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dtb-appleUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade dtb-mediatekUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade kernel-default-livepatch | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-awsUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-virtualUpgrade linux-image-oracle-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-gke-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-6.8Upgrade linux-image-aws-64k-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-raspi-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-kvmUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-generic-5.15Upgrade linux-image-xilinxUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-realtimeUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-ibmUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-fipsUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-kvm-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtual-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-64kUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-realtime-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-5.15.0-144-genericUpgrade linux-image-gke-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-intelUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.14.0-22-generic-64k | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub