PT-2025-18423 · Linux+6 · Linux Kernel+6
Published
2025-02-19
·
Updated
2026-04-20
·
CVE-2025-37742
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A vulnerability has been resolved in the Linux kernel. The issue is related to the jfs file system, where the
imap allocated in the diMount() function is not properly initialized after memory allocation. This causes the snprintf() function to write uninitialized data into linebuf within hex dump to buffer(). The vulnerability is due to the use of kmalloc instead of kzalloc, which does not clear the content of the allocated memory.Recommendations
To resolve the issue, use
kzalloc instead of kmalloc in the diMount() function to ensure that the allocated memory is properly initialized. As a temporary workaround, consider restricting access to the jfs file system until a patch is available.Exploit
Fix
Use of Uninitialized Resource
Access of Uninitialized Pointer
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu