In the Linux kernel, the following vulnerability has been resolved:
jfs: fix array-index-out-of-bounds read in addmissingindices
stbl is s8 but it must contain offsets into slot which can go from 0 to 127.
Added a bound check for that error and return -EIO if the check fails. Also make jfsreaddir return with error if addmissing_indices returns with an error.
{
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/38xxx/CVE-2025-38204.json"
}[
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2025-38204-b3f58a19",
"target": {
"file": "fs/jfs/jfs_dtree.c",
"function": "jfs_readdir"
},
"digest": {
"length": 5054.0,
"function_hash": "144014161873539081943826465266111626540"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81af4b34fd72d390d7f237c6a545cc6d09707956"
},
{
"signature_type": "Function",
"deprecated": false,
"id": "CVE-2025-38204-c14a7f5a",
"target": {
"file": "fs/jfs/jfs_dtree.c",
"function": "add_missing_indices"
},
"digest": {
"length": 1162.0,
"function_hash": "30340883427751554575199080254582498044"
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81af4b34fd72d390d7f237c6a545cc6d09707956"
},
{
"signature_type": "Line",
"deprecated": false,
"id": "CVE-2025-38204-c78babe9",
"target": {
"file": "fs/jfs/jfs_dtree.c"
},
"digest": {
"threshold": 0.9,
"line_hashes": [
"12383176994870422593223807556469191893",
"326862060439650109049899977524370463158",
"93499556572390627508752551910544016511",
"195793280527106912660677997360259395520",
"6750104186810503202765218090693878290",
"149455386330785244521250658279143065594",
"316282066741811911577259063117434290983",
"172192754554442602214202858371272032038",
"125510291936835134190339666425861798222",
"93053575685312927285355100146022834918",
"140165546290021312541984336577563025797",
"149074774789707444460359127977908439909",
"251033950295802299115117593615690252176",
"54169247996747470943404859894527376830",
"90189334107988849037229068508312757838",
"116995844286109668592988072840761075407",
"310032709022564032248433613350570109189",
"117223563219761633930481926213208185427",
"66619695871106727333633293098009103280",
"319630628341623617370917433349988722408"
]
},
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@81af4b34fd72d390d7f237c6a545cc6d09707956"
}
]
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-38204.json"