In the Linux kernel, the following vulnerability has been resolved:
jfs: reject on-disk inodes of an unsupported type
Syzbot has reported the following BUG:
kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00085-g4e46774408d9 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 RIP: 0010:clear_inode+0x168/0x190 Code: 4c 89 f7 e8 ba fe e5 ff e9 61 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 7c c1 4c 89 f7 e8 90 ff e5 ff eb b7 0b e8 01 5d 7f ff 90 0f 0b e8 f9 5c 7f ff 90 0f 0b e8 f1 5c 7f RSP: 0018:ffffc900027dfae8 EFLAGS: 00010093 RAX: ffffffff82157a87 RBX: 0000000000000001 RCX: ffff888104d4b980 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900027dfc90 R08: ffffffff82157977 R09: fffff520004fbf38 R10: dffffc0000000000 R11: fffff520004fbf38 R12: dffffc0000000000 R13: ffff88811315bc00 R14: ffff88811315bda8 R15: ffff88811315bb80 FS: 0000000000000000(0000) GS:ffff888135f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005565222e0578 CR3: 0000000026ef0000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body+0x5f/0xb0 ? die+0x9e/0xc0 ? do_trap+0x15a/0x3a0 ? clear_inode+0x168/0x190 ? do_error_trap+0x1dc/0x2c0 ? clear_inode+0x168/0x190 ? __pfx_do_error_trap+0x10/0x10 ? report_bug+0x3cd/0x500 ? handle_invalid_op+0x34/0x40 ? clear_inode+0x168/0x190 ? exc_invalid_op+0x38/0x50 ? asm_exc_invalid_op+0x1a/0x20 ? clear_inode+0x57/0x190 ? clear_inode+0x167/0x190 ? clear_inode+0x168/0x190 ? clear_inode+0x167/0x190 jfs_evict_inode+0xb5/0x440 ? __pfx_jfs_evict_inode+0x10/0x10 evict+0x4ea/0x9b0 ? __pfx_evict+0x10/0x10 ? iput+0x713/0xa50 txUpdateMap+0x931/0xb10 ? __pfx_txUpdateMap+0x10/0x10 jfs_lazycommit+0x49a/0xb80 ? _raw_spin_unlock_irqrestore+0x8f/0x140 ? lockdep_hardirqs_on+0x99/0x150 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_default_wake_function+0x10/0x10 ? __kthread_parkme+0x169/0x1d0 ? __pfx_jfs_lazycommit+0x10/0x10 kthread+0x2f2/0x390 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x4d/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
This happens when 'clear_inode()' makes an attempt to finalize an underlying JFS inode of unknown type. According to JFS layout description from https://jfs.sourceforge.net/project/pub/jfslayout.pdf, inode types from 5 to 15 are reserved for future extensions and should not be encountered on a valid filesystem. So add an extra check for valid inode type in 'copy_from_dinode()'.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-zfcpdumpUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-appleUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-sourceUpgrade dtb-amazonUpgrade kernel-64kb-develUpgrade kernel-azure-extraUpgrade dtb-freescaleUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade kernel-default-extraUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade dtb-apmUpgrade dtb-socionextUpgrade dtb-renesasUpgrade kernel-devel-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-hisiliconUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade dtb-exynosUpgrade kernel-rt_debugUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade gfs2-kmp-azureUpgrade dtb-amlogicUpgrade kernel-obs-buildUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-rtUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-vdsoUpgrade dtb-rockchipUpgrade kernel-rt_debug-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-qcomUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-azure-develUpgrade kernel-64kb-extraUpgrade dtb-nvidiaUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-rt-extraUpgrade dtb-armUpgrade reiserfs-kmp-azureUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-source-rtUpgrade kernel-default-base-rebuildUpgrade kernel-syms-azureUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade gfs2-kmp-default | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-aws-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-aws-fips-5.15Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-5.15Upgrade linux-image-5.15.0-1101-azureUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-gcp-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-20.04dUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-oracleUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-aws-64k-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-aws-fips-6.8Upgrade linux-image-virtualUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-azure-cvmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-generic-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-gke-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-gkeUpgrade linux-image-azure-5.15Upgrade linux-image-fips-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-kvm-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-nvidiaUpgrade linux-image-gcpUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-nvidia-5.15Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1046-awsUpgrade linux-image-realtime-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-azure-fips-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-raspi-5.15Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-100-fipsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-xilinx-6.8Upgrade linux-image-xilinxUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-oem-22.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-oracle-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-gke-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-intel-iotgUpgrade linux-image-intelUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-aws-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-tegraUpgrade linux-image-lowlatency-5.15Upgrade linux-image-generic-lpae-5.15 | Jun 26, 2025 | Apr 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub