In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds read in addmissingindices
stbl is s8 but it must contain offsets into slot which can go from 0 to 127.
Added a bound check for that error and return -EIO if the check fails. Also make jfsreaddir return with error if addmissing_indices returns with an error.
[
{
"id": "CVE-2025-38204-18048a63",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44618bee303bed151ef3a525ff79fbd7689593b5",
"signature_version": "v1",
"target": {
"function": "jfs_readdir",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 5054.0,
"function_hash": "144014161873539081943826465266111626540"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-30a20429",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44618bee303bed151ef3a525ff79fbd7689593b5",
"signature_version": "v1",
"target": {
"function": "add_missing_indices",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 1162.0,
"function_hash": "30340883427751554575199080254582498044"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-36c698b5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4655d28f338e68d345aed80d19be7999bbce2",
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"12383176994870422593223807556469191893",
"326862060439650109049899977524370463158",
"93499556572390627508752551910544016511",
"195793280527106912660677997360259395520",
"6750104186810503202765218090693878290",
"149455386330785244521250658279143065594",
"316282066741811911577259063117434290983",
"172192754554442602214202858371272032038",
"125510291936835134190339666425861798222",
"93053575685312927285355100146022834918",
"140165546290021312541984336577563025797",
"149074774789707444460359127977908439909",
"251033950295802299115117593615690252176",
"54169247996747470943404859894527376830",
"90189334107988849037229068508312757838",
"116995844286109668592988072840761075407",
"310032709022564032248433613350570109189",
"117223563219761633930481926213208185427",
"66619695871106727333633293098009103280",
"319630628341623617370917433349988722408"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38204-87e2fa43",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5dff41a86377563f7a2b968aae00d25b4ceb37c9",
"signature_version": "v1",
"target": {
"function": "add_missing_indices",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 1162.0,
"function_hash": "30340883427751554575199080254582498044"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-94231df5",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4655d28f338e68d345aed80d19be7999bbce2",
"signature_version": "v1",
"target": {
"function": "add_missing_indices",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 1162.0,
"function_hash": "30340883427751554575199080254582498044"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-b0c904c9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5dff41a86377563f7a2b968aae00d25b4ceb37c9",
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"12383176994870422593223807556469191893",
"326862060439650109049899977524370463158",
"93499556572390627508752551910544016511",
"195793280527106912660677997360259395520",
"6750104186810503202765218090693878290",
"149455386330785244521250658279143065594",
"316282066741811911577259063117434290983",
"172192754554442602214202858371272032038",
"125510291936835134190339666425861798222",
"93053575685312927285355100146022834918",
"140165546290021312541984336577563025797",
"149074774789707444460359127977908439909",
"251033950295802299115117593615690252176",
"54169247996747470943404859894527376830",
"90189334107988849037229068508312757838",
"116995844286109668592988072840761075407",
"310032709022564032248433613350570109189",
"117223563219761633930481926213208185427",
"66619695871106727333633293098009103280",
"319630628341623617370917433349988722408"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38204-b3f58a19",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81af4b34fd72d390d7f237c6a545cc6d09707956",
"signature_version": "v1",
"target": {
"function": "jfs_readdir",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 5054.0,
"function_hash": "144014161873539081943826465266111626540"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-bd1f9fc1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@44618bee303bed151ef3a525ff79fbd7689593b5",
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"12383176994870422593223807556469191893",
"326862060439650109049899977524370463158",
"93499556572390627508752551910544016511",
"195793280527106912660677997360259395520",
"6750104186810503202765218090693878290",
"149455386330785244521250658279143065594",
"316282066741811911577259063117434290983",
"172192754554442602214202858371272032038",
"125510291936835134190339666425861798222",
"93053575685312927285355100146022834918",
"140165546290021312541984336577563025797",
"149074774789707444460359127977908439909",
"251033950295802299115117593615690252176",
"54169247996747470943404859894527376830",
"90189334107988849037229068508312757838",
"116995844286109668592988072840761075407",
"310032709022564032248433613350570109189",
"117223563219761633930481926213208185427",
"66619695871106727333633293098009103280",
"319630628341623617370917433349988722408"
],
"threshold": 0.9
},
"signature_type": "Line"
},
{
"id": "CVE-2025-38204-bd399586",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@5dff41a86377563f7a2b968aae00d25b4ceb37c9",
"signature_version": "v1",
"target": {
"function": "jfs_readdir",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 5054.0,
"function_hash": "144014161873539081943826465266111626540"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-c14a7f5a",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81af4b34fd72d390d7f237c6a545cc6d09707956",
"signature_version": "v1",
"target": {
"function": "add_missing_indices",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 1162.0,
"function_hash": "30340883427751554575199080254582498044"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-c44ab407",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfa4655d28f338e68d345aed80d19be7999bbce2",
"signature_version": "v1",
"target": {
"function": "jfs_readdir",
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"length": 5054.0,
"function_hash": "144014161873539081943826465266111626540"
},
"signature_type": "Function"
},
{
"id": "CVE-2025-38204-c78babe9",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81af4b34fd72d390d7f237c6a545cc6d09707956",
"signature_version": "v1",
"target": {
"file": "fs/jfs/jfs_dtree.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"12383176994870422593223807556469191893",
"326862060439650109049899977524370463158",
"93499556572390627508752551910544016511",
"195793280527106912660677997360259395520",
"6750104186810503202765218090693878290",
"149455386330785244521250658279143065594",
"316282066741811911577259063117434290983",
"172192754554442602214202858371272032038",
"125510291936835134190339666425861798222",
"93053575685312927285355100146022834918",
"140165546290021312541984336577563025797",
"149074774789707444460359127977908439909",
"251033950295802299115117593615690252176",
"54169247996747470943404859894527376830",
"90189334107988849037229068508312757838",
"116995844286109668592988072840761075407",
"310032709022564032248433613350570109189",
"117223563219761633930481926213208185427",
"66619695871106727333633293098009103280",
"319630628341623617370917433349988722408"
],
"threshold": 0.9
},
"signature_type": "Line"
}
]