PT-2025-20509 · Linux+6 · Linux Kernel+6
Published
2025-02-20
·
Updated
2026-04-20
·
CVE-2025-37858
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
The issue is related to an integer overflow in the allocation group (AG) size calculation in the JFS filesystem. This occurs when the
l2agsize value exceeds 31, causing undefined behavior and improper AG sizing on 32-bit systems. The problem can lead to filesystem corruption, kernel crashes, and security vulnerabilities due to malformed on-disk structures. The estimated number of potentially affected devices is not provided.Recommendations
To resolve the issue, apply the fix by casting to
s64 before shifting, ensuring 64-bit arithmetic even on 32-bit architectures. This can be achieved by updating the code to bmp->db agsize = (s64)1 << l2agsize;. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Exploit
RCE
Integer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Astra Linux
Debian
Linuxmint
Linux Kernel
Red Os
Suse
Ubuntu