In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Prevent integer overflow in AG size calculation
The JFS filesystem calculates allocation group (AG) size using 1 << l2agsize in dbExtendFS(). When l2agsize exceeds 31 (possible with >2TB aggregates on 32-bit systems), this 32-bit shift operation causes undefined behavior and improper AG sizing.
On 32-bit architectures: - Left-shifting 1 by 32+ bits results in 0 due to integer overflow - This creates invalid AG sizes (0 or garbage values) in sbi->bmap->db_agsize - Subsequent block allocations would reference invalid AG structures - Could lead to: - Filesystem corruption during extend operations - Kernel crashes due to invalid memory accesses - Security vulnerabilities via malformed on-disk structures
Fix by casting to s64 before shifting: bmp->db_agsize = (s64)1 << l2agsize;
This ensures 64-bit arithmetic even on 32-bit architectures. The cast matches the data type of db_agsize (s64) and follows similar patterns in JFS block calculation code.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 12, 2025 | May 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-sourceUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade dtb-armUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-develUpgrade dtb-allwinnerUpgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade gfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-marvellUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade dtb-nvidiaUpgrade kernel-debugUpgrade kernel-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade reiserfs-kmp-rtUpgrade kernel-source-rt | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-gcp-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-genericUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-azure-fips-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-intel-iotgUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-nvidia-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-xilinxUpgrade linux-image-intelUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-azure-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-fipsUpgrade linux-image-ibm-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-awsUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-fips-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gke-64kUpgrade linux-image-raspi-6.8 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub