High · published July 4, 2025
In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds read in add_missing_indices
stbl is s8 but it must contain offsets into slot which can go from 0 to
127.
Added a bound check for that error and return -EIO if the check fails.
Also make jfs_readdir return with error if add_missing_indices returns
with an error.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 5.4.295 | 5.4.295 |
| linux/linux_kernel | ≥ 5.5, < 5.10.239 | 5.10.239 |
| linux/linux_kernel | ≥ 5.11, < 5.15.186 | 5.15.186 |
| linux/linux_kernel | ≥ 5.16, < 6.15.4 | 6.15.4 |
| debian/debian_linux | all versions | — |