In the Linux kernel, the following vulnerability has been resolved:
jfs: reject on-disk inodes of an unsupported type
Syzbot has reported the following BUG:
kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00085-g4e46774408d9 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 RIP: 0010:clear_inode+0x168/0x190 Code: 4c 89 f7 e8 ba fe e5 ff e9 61 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 7c c1 4c 89 f7 e8 90 ff e5 ff eb b7 0b e8 01 5d 7f ff 90 0f 0b e8 f9 5c 7f ff 90 0f 0b e8 f1 5c 7f RSP: 0018:ffffc900027dfae8 EFLAGS: 00010093 RAX: ffffffff82157a87 RBX: 0000000000000001 RCX: ffff888104d4b980 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900027dfc90 R08: ffffffff82157977 R09: fffff520004fbf38 R10: dffffc0000000000 R11: fffff520004fbf38 R12: dffffc0000000000 R13: ffff88811315bc00 R14: ffff88811315bda8 R15: ffff88811315bb80 FS: 0000000000000000(0000) GS:ffff888135f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005565222e0578 CR3: 0000000026ef0000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body+0x5f/0xb0 ? die+0x9e/0xc0 ? do_trap+0x15a/0x3a0 ? clear_inode+0x168/0x190 ? do_error_trap+0x1dc/0x2c0 ? clear_inode+0x168/0x190 ? __pfx_do_error_trap+0x10/0x10 ? report_bug+0x3cd/0x500 ? handle_invalid_op+0x34/0x40 ? clear_inode+0x168/0x190 ? exc_invalid_op+0x38/0x50 ? asm_exc_invalid_op+0x1a/0x20 ? clear_inode+0x57/0x190 ? clear_inode+0x167/0x190 ? clear_inode+0x168/0x190 ? clear_inode+0x167/0x190 jfs_evict_inode+0xb5/0x440 ? __pfx_jfs_evict_inode+0x10/0x10 evict+0x4ea/0x9b0 ? __pfx_evict+0x10/0x10 ? iput+0x713/0xa50 txUpdateMap+0x931/0xb10 ? __pfx_txUpdateMap+0x10/0x10 jfs_lazycommit+0x49a/0xb80 ? _raw_spin_unlock_irqrestore+0x8f/0x140 ? lockdep_hardirqs_on+0x99/0x150 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_default_wake_function+0x10/0x10 ? __kthread_parkme+0x169/0x1d0 ? __pfx_jfs_lazycommit+0x10/0x10 kthread+0x2f2/0x390 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x4d/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
This happens when 'clear_inode()' makes an attempt to finalize an underlying JFS inode of unknown type. According to JFS layout description from https://jfs.sourceforge.net/project/pub/jfslayout.pdf, inode types from 5 to 15 are reserved for future extensions and should not be encountered on a valid filesystem. So add an extra check for valid inode type in 'copy_from_dinode()'.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-azure-develUpgrade kernel-source-vanillaUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade dtb-qcomUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-vdsoUpgrade dtb-rockchipUpgrade kernel-rtUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade kernel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-default-develUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-exynosUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-obs-qaUpgrade kernel-debug-develUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-appleUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade dtb-broadcomUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-apmUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kernel-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-develUpgrade kernel-rt_debugUpgrade dtb-xilinx | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-gkeopUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-oracle-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-xilinxUpgrade linux-image-genericUpgrade linux-image-oem-22.04Upgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-realtime-6.8.1Upgrade linux-image-xilinx-6.8Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-raspi-5.15Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-6.8Upgrade linux-image-gcp-fipsUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-5.15Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-fips-5.15Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-5.15Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-oem-22.04cUpgrade linux-image-intel-iotgUpgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-ibm-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intelUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-kvm-5.15Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-5.15Upgrade linux-image-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gke-64kUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-ibm-classicUpgrade linux-image-generic-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-6.8.0-1047-gcp-fips | Jun 26, 2025 | Apr 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub