In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Prevent integer overflow in AG size calculation
The JFS filesystem calculates allocation group (AG) size using 1 << l2agsize in dbExtendFS(). When l2agsize exceeds 31 (possible with >2TB aggregates on 32-bit systems), this 32-bit shift operation causes undefined behavior and improper AG sizing.
On 32-bit architectures: - Left-shifting 1 by 32+ bits results in 0 due to integer overflow - This creates invalid AG sizes (0 or garbage values) in sbi->bmap->db_agsize - Subsequent block allocations would reference invalid AG structures - Could lead to: - Filesystem corruption during extend operations - Kernel crashes due to invalid memory accesses - Security vulnerabilities via malformed on-disk structures
Fix by casting to s64 before shifting: bmp->db_agsize = (s64)1 << l2agsize;
This ensures 64-bit arithmetic even on 32-bit architectures. The cast matches the data type of db_agsize (s64) and follows similar patterns in JFS block calculation code.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 12, 2025 | May 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-vdsoUpgrade kernel-symsUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-rtUpgrade dtb-freescaleUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-default-develUpgrade dtb-armUpgrade kernel-default-vdsoUpgrade kernel-source-azureUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade ocfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-zfcpdumpUpgrade kernel-syms-azureUpgrade gfs2-kmp-rtUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-64kbUpgrade kselftests-kmp-azureUpgrade dtb-lgUpgrade dtb-amazonUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade kernel-default-extraUpgrade dtb-xilinx | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-fipsUpgrade linux-image-gke-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-azure-fipsUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-generic-5.15Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-gcp-fipsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-raspi-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-aws-6.8Upgrade linux-image-fipsUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azureUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-azure-5.15Upgrade linux-image-oracle-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-aws-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-xilinxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-nvidia-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-kvm-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-intelUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-fips-6.8Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtimeUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-realtime-hwe-22.04 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub