In the Linux kernel, the following vulnerability has been resolved:
jfs: Fix uninit-value access of imap allocated in the diMount() function
syzbot reports that hex_dump_to_buffer is using uninit-value:
===================================================== BUG: KMSAN: uninit-value in hex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171 hex_dump_to_buffer+0x888/0x1100 lib/hexdump.c:171 print_hex_dump+0x13d/0x3e0 lib/hexdump.c:276 diFree+0x5ba/0x4350 fs/jfs/jfs_imap.c:876 jfs_evict_inode+0x510/0x550 fs/jfs/inode.c:156 evict+0x723/0xd10 fs/inode.c:796 iput_final fs/inode.c:1946 [inline] iput+0x97b/0xdb0 fs/inode.c:1972 txUpdateMap+0xf3e/0x1150 fs/jfs/jfs_txnmgr.c:2367 txLazyCommit fs/jfs/jfs_txnmgr.c:2664 [inline] jfs_lazycommit+0x627/0x11d0 fs/jfs/jfs_txnmgr.c:2733 kthread+0x6b9/0xef0 kernel/kthread.c:464 ret_from_fork+0x6d/0x90 arch/x86/kernel/process.c:148 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
Uninit was created at: slab_post_alloc_hook mm/slub.c:4121 [inline] slab_alloc_node mm/slub.c:4164 [inline] __kmalloc_cache_noprof+0x8e3/0xdf0 mm/slub.c:4320 kmalloc_noprof include/linux/slab.h:901 [inline] diMount+0x61/0x7f0 fs/jfs/jfs_imap.c:105 jfs_mount+0xa8e/0x11d0 fs/jfs/jfs_mount.c:176 jfs_fill_super+0xa47/0x17c0 fs/jfs/super.c:523 get_tree_bdev_flags+0x6ec/0x910 fs/super.c:1636 get_tree_bdev+0x37/0x50 fs/super.c:1659 jfs_get_tree+0x34/0x40 fs/jfs/super.c:635 vfs_get_tree+0xb1/0x5a0 fs/super.c:1814 do_new_mount+0x71f/0x15e0 fs/namespace.c:3560 path_mount+0x742/0x1f10 fs/namespace.c:3887 do_mount fs/namespace.c:3900 [inline] __do_sys_mount fs/namespace.c:4111 [inline] __se_sys_mount+0x71f/0x800 fs/namespace.c:4088 __x64_sys_mount+0xe4/0x150 fs/namespace.c:4088 x64_sys_call+0x39bf/0x3c30 arch/x86/include/generated/asm/syscalls_64.h:166 do_syscall_x64 arch/x86/entry/common.c:52 [inline] do_syscall_64+0xcd/0x1e0 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe+0x77/0x7f =====================================================
The reason is that imap is not properly initialized after memory allocation. It will cause the snprintf() function to write uninitialized data into linebuf within hex_dump_to_buffer().
Fix this by using kzalloc instead of kmalloc to clear its content at the beginning in diMount().
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 5, 2025 | May 1, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 1, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-obs-qaUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade dtb-nvidiaUpgrade kernel-rtUpgrade dtb-armUpgrade kernel-rt-livepatch-develUpgrade dtb-amlogicUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-vdsoUpgrade cluster-md-kmp-defaultUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-rt-develUpgrade dtb-alteraUpgrade dtb-exynosUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-source-rtUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-azure-optionalUpgrade kernel-rt_debug-develUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-rockchipUpgrade kernel-rt-extraUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade kernel-rt-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade kernel-syms-rtUpgrade kernel-defaultUpgrade gfs2-kmp-azureUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-livepatchUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade dlm-kmp-rtUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-caviumUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade dtb-xilinxUpgrade dtb-appleUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade dtb-hisilicon | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azure-fips-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-aws-fips-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-ibm-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-virtualUpgrade linux-image-oracle-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-raspi-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04dUpgrade linux-image-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-generic-5.15Upgrade linux-image-oracleUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-gcp-5.15Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcp-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-generic-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gke-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-aws-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oracle-5.15Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-azure-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-virtual-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-intel-iotg | Jun 26, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub