In the Linux kernel, the following vulnerability has been resolved:
jfs: reject on-disk inodes of an unsupported type
Syzbot has reported the following BUG:
kernel BUG at fs/inode.c:668! Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI CPU: 3 UID: 0 PID: 139 Comm: jfsCommit Not tainted 6.12.0-rc4-syzkaller-00085-g4e46774408d9 #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.16.3-3.fc41 04/01/2014 RIP: 0010:clear_inode+0x168/0x190 Code: 4c 89 f7 e8 ba fe e5 ff e9 61 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 7c c1 4c 89 f7 e8 90 ff e5 ff eb b7 0b e8 01 5d 7f ff 90 0f 0b e8 f9 5c 7f ff 90 0f 0b e8 f1 5c 7f RSP: 0018:ffffc900027dfae8 EFLAGS: 00010093 RAX: ffffffff82157a87 RBX: 0000000000000001 RCX: ffff888104d4b980 RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 RBP: ffffc900027dfc90 R08: ffffffff82157977 R09: fffff520004fbf38 R10: dffffc0000000000 R11: fffff520004fbf38 R12: dffffc0000000000 R13: ffff88811315bc00 R14: ffff88811315bda8 R15: ffff88811315bb80 FS: 0000000000000000(0000) GS:ffff888135f00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005565222e0578 CR3: 0000000026ef0000 CR4: 00000000000006f0 Call Trace: <TASK> ? __die_body+0x5f/0xb0 ? die+0x9e/0xc0 ? do_trap+0x15a/0x3a0 ? clear_inode+0x168/0x190 ? do_error_trap+0x1dc/0x2c0 ? clear_inode+0x168/0x190 ? __pfx_do_error_trap+0x10/0x10 ? report_bug+0x3cd/0x500 ? handle_invalid_op+0x34/0x40 ? clear_inode+0x168/0x190 ? exc_invalid_op+0x38/0x50 ? asm_exc_invalid_op+0x1a/0x20 ? clear_inode+0x57/0x190 ? clear_inode+0x167/0x190 ? clear_inode+0x168/0x190 ? clear_inode+0x167/0x190 jfs_evict_inode+0xb5/0x440 ? __pfx_jfs_evict_inode+0x10/0x10 evict+0x4ea/0x9b0 ? __pfx_evict+0x10/0x10 ? iput+0x713/0xa50 txUpdateMap+0x931/0xb10 ? __pfx_txUpdateMap+0x10/0x10 jfs_lazycommit+0x49a/0xb80 ? _raw_spin_unlock_irqrestore+0x8f/0x140 ? lockdep_hardirqs_on+0x99/0x150 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_default_wake_function+0x10/0x10 ? __kthread_parkme+0x169/0x1d0 ? __pfx_jfs_lazycommit+0x10/0x10 kthread+0x2f2/0x390 ? __pfx_jfs_lazycommit+0x10/0x10 ? __pfx_kthread+0x10/0x10 ret_from_fork+0x4d/0x80 ? __pfx_kthread+0x10/0x10 ret_from_fork_asm+0x1a/0x30 </TASK>
This happens when 'clear_inode()' makes an attempt to finalize an underlying JFS inode of unknown type. According to JFS layout description from https://jfs.sourceforge.net/project/pub/jfslayout.pdf, inode types from 5 to 15 are reserved for future extensions and should not be encountered on a valid filesystem. So add an extra check for valid inode type in 'copy_from_dinode()'.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | May 15, 2025 | Apr 18, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Apr 18, 2025 |
| Suse | — | Upgrade kernel-syms-rtUpgrade reiserfs-kmp-azureUpgrade dtb-qcomUpgrade dtb-caviumUpgrade kernel-rtUpgrade kernel-azure-develUpgrade kernel-rt-optionalUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade dlm-kmp-rtUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-azure-vdsoUpgrade dtb-mediatekUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-extraUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-source-vanillaUpgrade dtb-rockchipUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade kernel-syms-azureUpgrade kernel-source-rtUpgrade kernel-azureUpgrade dtb-armUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade kernel-devel-rtUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade kernel-default-baseUpgrade gfs2-kmp-64kbUpgrade dtb-freescaleUpgrade dtb-alteraUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-azure-optionalUpgrade kernel-64kbUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade cluster-md-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-rt_debugUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-devel-azureUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade kernel-debug-develUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-64kbUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-obs-qaUpgrade dtb-appleUpgrade dtb-amdUpgrade kernel-default-livepatch | Dec 5, 2025 | Jun 16, 2025 |
| Ubuntu | — | Upgrade linux-image-5.15.0-163-genericUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-oracle-6.8Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-6.8.0-1046-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-22.04Upgrade linux-image-azureUpgrade linux-image-xilinx-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-genericUpgrade linux-image-oracle-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-nvidiaUpgrade linux-image-xilinxUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-gcp-fipsUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-nvidia-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-gke-6.8Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-lowlatencyUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-azure-fips-5.15Upgrade linux-image-gke-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-intelUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-gke-64k-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegraUpgrade linux-image-virtual-6.8Upgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-intel-iotgUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-6.8Upgrade linux-image-fipsUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-gkeopUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-lowlatency-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-aws-64k-5.15Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-lts-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-6.14.0-22-genericUpgrade linux-image-realtimeUpgrade linux-image-oem-22.04bUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcp-5.15Upgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-ibm-classicUpgrade linux-image-gkeop-5.15Upgrade linux-image-aws-fips-6.8Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-6.8Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-aws-fips-5.15Upgrade linux-image-azure-fipsUpgrade linux-image-aws-fipsUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-ibm-6.8Upgrade linux-image-oem-20.04dUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-5.15Upgrade linux-image-virtualUpgrade linux-image-virtual-5.15Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-kvm | Jun 26, 2025 | Apr 18, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 7, 2025 | Apr 18, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub