In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00049.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Linux
  • Linux Kernel
References
Link Providers
https://git.kernel.org/stable/c/1467a75819e41341cd5ebd16faa2af1ca3c8f4fe cve-icon cve-icon
https://git.kernel.org/stable/c/173cfd741ad7073640bfb7e2344c2a0ee005e769 cve-icon cve-icon
https://git.kernel.org/stable/c/2dd05f09cc323018136a7ecdb3d1007be9ede27f cve-icon cve-icon
https://git.kernel.org/stable/c/30e19a884c0b11f33821aacda7e72e914bec26ef cve-icon cve-icon
https://git.kernel.org/stable/c/49ea46d9025aa1914b24ea957636cbe4367a7311 cve-icon cve-icon
https://git.kernel.org/stable/c/5bdb9553fb134fd52ec208a8b378120670f6e784 cve-icon cve-icon
https://git.kernel.org/stable/c/a4f199203f79ca9cd7355799ccb26800174ff093 cve-icon cve-icon
https://git.kernel.org/stable/c/c214006856ff52a8ff17ed8da52d50601d54f9ce cve-icon cve-icon
https://git.kernel.org/stable/c/c8ca21a2836993d7cb816668458e05e598574e55 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025090451-CVE-2025-38697-b37e@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-38697 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-38697 cve-icon
History

Fri, 02 Jan 2026 15:45:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*

Mon, 03 Nov 2025 18:30:00 +0000

Type Values Removed Values Added
References

Fri, 05 Sep 2025 14:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Fri, 05 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 7.0, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H'}

threat_severity

Moderate

Thu, 04 Sep 2025 15:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.
Title jfs: upper bound check of tree index in dbAllocAG
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-01-02T15:31:12.287Z

Reserved: 2025-04-16T04:51:24.032Z

Link: CVE-2025-38697

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-04T16:15:38.210

Modified: 2025-11-03T18:16:35.770

Link: CVE-2025-38697

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-04T00:00:00Z

Links: CVE-2025-38697 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-09-05T14:02:52Z