In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Prevent integer overflow in AG size calculation
The JFS filesystem calculates allocation group (AG) size using 1 << l2agsize in dbExtendFS(). When l2agsize exceeds 31 (possible with >2TB aggregates on 32-bit systems), this 32-bit shift operation causes undefined behavior and improper AG sizing.
On 32-bit architectures: - Left-shifting 1 by 32+ bits results in 0 due to integer overflow - This creates invalid AG sizes (0 or garbage values) in sbi->bmap->db_agsize - Subsequent block allocations would reference invalid AG structures - Could lead to: - Filesystem corruption during extend operations - Kernel crashes due to invalid memory accesses - Security vulnerabilities via malformed on-disk structures
Fix by casting to s64 before shifting: bmp->db_agsize = (s64)1 << l2agsize;
This ensures 64-bit arithmetic even on 32-bit architectures. The cast matches the data type of db_agsize (s64) and follows similar patterns in JFS block calculation code.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 12, 2025 | May 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-devel-rtUpgrade dtb-rockchipUpgrade kernel-azure-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-source-vanillaUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade dtb-qcomUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-lgUpgrade kernel-sourceUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-rtUpgrade kernel-default-vdsoUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade dtb-allwinnerUpgrade dtb-armUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-develUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kselftests-kmp-64kbUpgrade dtb-xilinxUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatch-develUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade kernel-debugUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extra | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-intelUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-xilinxUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04bUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtualUpgrade linux-image-kvmUpgrade linux-image-kvm-5.15Upgrade linux-image-gcp-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-realtime-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-5.15Upgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fips-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64kUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gcp-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64kUpgrade linux-image-ibm-5.15Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-generic-lpae-hwe-20.04 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub