In the Linux kernel, the following vulnerability has been resolved:
fs/jfs: Prevent integer overflow in AG size calculation
The JFS filesystem calculates allocation group (AG) size using 1 << l2agsize in dbExtendFS(). When l2agsize exceeds 31 (possible with >2TB aggregates on 32-bit systems), this 32-bit shift operation causes undefined behavior and improper AG sizing.
On 32-bit architectures: - Left-shifting 1 by 32+ bits results in 0 due to integer overflow - This creates invalid AG sizes (0 or garbage values) in sbi->bmap->db_agsize - Subsequent block allocations would reference invalid AG structures - Could lead to: - Filesystem corruption during extend operations - Kernel crashes due to invalid memory accesses - Security vulnerabilities via malformed on-disk structures
Fix by casting to s64 before shifting: bmp->db_agsize = (s64)1 << l2agsize;
This ensures 64-bit arithmetic even on 32-bit architectures. The cast matches the data type of db_agsize (s64) and follows similar patterns in JFS block calculation code.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 12, 2025 | May 9, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | Jul 17, 2025 | May 9, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 9, 2025 |
| Suse | — | Upgrade kernel-azure-develUpgrade gfs2-kmp-rtUpgrade dtb-armUpgrade dtb-exynosUpgrade kernel-sourceUpgrade dtb-caviumUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-alteraUpgrade dtb-allwinnerUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-extraUpgrade dtb-lgUpgrade dtb-xilinxUpgrade kselftests-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-mediatekUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-macrosUpgrade gfs2-kmp-64kbUpgrade kernel-rt-develUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-devel-azureUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-buildUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade cluster-md-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-devel-rtUpgrade kernel-rtUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade dtb-freescaleUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-defaultUpgrade kernel-symsUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade gfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-docsUpgrade kernel-64kb-extraUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade kernel-debugUpgrade dtb-amlogicUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade dtb-amdUpgrade kernel-debug-develUpgrade cluster-md-kmp-default | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-awsUpgrade linux-image-5.15.0-1088-realtimeUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1088-aws-fipsUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-5.15.0-1030-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1070-gkeopUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-1081-intel-iot-realtimeUpgrade linux-image-generic-5.15Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1041-nvidia-tegra-rtUpgrade linux-image-azure-5.15Upgrade linux-image-xilinx-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-aws-64k-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-5.15.0-144-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1087-gcp-fipsUpgrade linux-image-5.15.0-1088-aws-64kUpgrade linux-image-5.15.0-1084-kvmUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1052-xilinx-zynqmpUpgrade linux-image-gcp-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gke-64k-6.8Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-xilinxUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1087-gcpUpgrade linux-image-5.15.0-1085-oracleUpgrade linux-image-5.15.0-144-genericUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-aws-5.15Upgrade linux-image-realtimeUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-5.15.0-1094-azure-fipsUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-intel-iotgUpgrade linux-image-oem-22.04bUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1080-ibmUpgrade linux-image-5.15.0-1083-raspiUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1085-gkeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibm-classicUpgrade linux-image-azure-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.15.0-144-fipsUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-aws-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1082-nvidiaUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1082-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1088-awsUpgrade linux-image-raspi-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-kvmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-144-generic-lpaeUpgrade linux-image-5.15.0-1094-azureUpgrade linux-image-5.15.0-1041-nvidia-tegraUpgrade linux-image-5.15.0-1030-nvidia-tegra-igxUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-oem-20.04Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-oracleUpgrade linux-image-5.15.0-144-generic-64kUpgrade linux-image-5.15.0-144-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-ibm | Jun 26, 2025 | May 9, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | May 9, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub