In the Linux kernel, the following vulnerability has been resolved:
jfs: reject on-disk inodes of an unsupported type
Syzbot has reported the following BUG:
kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00085-g4e46774408d9 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 RIP: 0010:clear_inode+0x168/0x190 Code: 4c 89 f7 e8 ba fe e5 ff e9 61 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 7c c1 4c 89 f7 e8 90 ff e5 ff eb b7 0b e8 01 5d 7f ff 90 0f 0b e8 f9 5c 7f ff 90 0f 0b e8 f1 5c 7f RSP: 0018:ffffc900027dfae8 EFLAGS: 00010093 RAX: ffffffff82157a87 RBX: 0000000000000001 RCX: ffff888104d4b980 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900027dfc90 R08: ffffffff82157977 R09: fffff520004fbf38 R10: dffffc0000000000 R11: fffff520004fbf38 R12: dffffc0000000000 R13: ffff88811315bc00 R14: ffff88811315bda8 R15: ffff88811315bb80 FS: 0000000000000000(0000) GS:ffff888135f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005565222e0578 CR3: 0000000026ef0000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body+0x5f/0xb0 ? die+0x9e/0xc0 ? do_trap+0x15a/0x3a0 ? clear_inode+0x168/0x190 ? do_error_trap+0x1dc/0x2c0 ? clear_inode+0x168/0x190 ? __pfx_do_error_trap+0x10/0x10 ? report_bug+0x3cd/0x500 ? handle_invalid_op+0x34/0x40 ? clear_inode+0x168/0x190 ? exc_invalid_op+0x38/0x50 ? asm_exc_invalid_op+0x1a/0x20 ? clear_inode+0x57/0x190 ? clear_inode+0x167/0x190 ? clear_inode+0x168/0x190 ? clear_inode+0x167/0x190 jfs_evict_inode+0xb5/0x440 ? __pfx_jfs_evict_inode+0x10/0x10 evict+0x4ea/0x9b0 ? __pfx_evict+0x10/0x10 ? iput+0x713/0xa50 txUpdateMap+0x931/0xb10 ? __pfx_txUpdateMap+0x10/0x10 jfs_lazycommit+0x49a/0xb80 ? _raw_spin_unlock_irqrestore+0x8f/0x140 ? lockdep_hardirqs_on+0x99/0x150 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_default_wake_function+0x10/0x10 ? __kthread_parkme+0x169/0x1d0 ? __pfx_jfs_lazycommit+0x10/0x10 kthread+0x2f2/0x390 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x4d/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
This happens when 'clear_inode()' makes an attempt to finalize an underlying JFS inode of unknown type. According to JFS layout description from https://jfs.sourceforge.net/project/pub/jfslayout.pdf, inode types from 5 to 15 are reserved for future extensions and should not be encountered on a valid filesystem. So add an extra check for valid inode type in 'copy_from_dinode()'.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade dtb-freescaleUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade dtb-amdUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-source-azureUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade kernel-sourceUpgrade kernel-azure-optionalUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade dtb-apmUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-debugUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-lgUpgrade ocfs2-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-allwinnerUpgrade reiserfs-kmp-rtUpgrade kernel-devel-azureUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-devel-rtUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade dtb-xilinxUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-symsUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade dtb-sprdUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade dtb-caviumUpgrade kernel-docsUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-defaultUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade dtb-amlogicUpgrade kselftests-kmp-rtUpgrade kernel-azureUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-64kb-extra | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-aws-fipsUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-aws-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-azure-fipsUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-generic-5.15Upgrade linux-image-virtualUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-virtual-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-azure-cvmUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-gke-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-realtimeUpgrade linux-image-fips-6.8Upgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-oracleUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-intel-iotgUpgrade linux-image-aws-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-lowlatency-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-gkeopUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-fipsUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-kvm-5.15Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-oem-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-genericUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-azure-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-gke-6.8Upgrade linux-image-fips-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-ibmUpgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-5.15Upgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-oracle-5.15Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gke-5.15Upgrade linux-image-gke-64k-6.8Upgrade linux-image-azure-fips-5.15Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-intelUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-gcpUpgrade linux-image-oracle-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-oem-20.04bUpgrade linux-image-azureUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-oem-20.04cUpgrade linux-image-raspi-6.8 | Jun 26, 2025 | Apr 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub