In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Prevent integer overflow in AG size calculation
The JFS filesystem calculates allocation group (AG) size using 1 << l2agsize in dbExtendFS(). When l2agsize exceeds 31 (possible with >2TB aggregates on 32-bit systems), this 32-bit shift operation causes undefined behavior and improper AG sizing.
On 32-bit architectures: - Left-shifting 1 by 32+ bits results in 0 due to integer overflow - This creates invalid AG sizes (0 or garbage values) in sbi->bmap->db_agsize - Subsequent block allocations would reference invalid AG structures - Could lead to: - Filesystem corruption during extend operations - Kernel crashes due to invalid memory accesses - Security vulnerabilities via malformed on-disk structures
Fix by casting to s64 before shifting: bmp->db_agsize = (s64)1 << l2agsize;
This ensures 64-bit arithmetic even on 32-bit architectures. The cast matches the data type of db_agsize (s64) and follows similar patterns in JFS block calculation code.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 12, 2025 | May 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade gfs2-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debug-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade kernel-sourceUpgrade dtb-apmUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade dtb-amazonUpgrade kernel-azureUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-rockchipUpgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-develUpgrade dtb-lgUpgrade kernel-rtUpgrade kernel-default-develUpgrade kernel-syms-azureUpgrade kernel-default-optionalUpgrade kernel-kvmsmallUpgrade kernel-azure-optionalUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-default-vdsoUpgrade kernel-develUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-develUpgrade gfs2-kmp-azureUpgrade dtb-allwinnerUpgrade reiserfs-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-source-vanillaUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade kernel-source-rtUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade dlm-kmp-azureUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade dtb-sprdUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-amdUpgrade dtb-broadcomUpgrade kernel-debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-64kb-extra | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1094-azureUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1088-awsUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-oem-20.04cUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-fips-6.8Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-aws-5.15Upgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-intelUpgrade linux-image-oem-22.04aUpgrade linux-image-aws-fips-6.8Upgrade linux-image-realtimeUpgrade linux-image-xilinxUpgrade linux-image-gke-6.8Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-6.8Upgrade linux-image-ibmUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-azure-fips-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-gkeop-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-nvidia-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-fips-5.15Upgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-azure-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-oem-20.04dUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-20.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-gke-5.15Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-gcp-5.15Upgrade linux-image-gke-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-virtual-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-xilinx-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-azure-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-oracle-6.8Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-awsUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-virtual-5.15 | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub