CVE-2025-38663

nilfs2: reject invalid file types when reading inodes

MEDIUM

5.5

CVSS Score

Published: August 22, 2025 at 04:02 PM UTC

Updated: June 17, 2026 at 09:17 AM UTC

2 products affected across 2 vendorsLinux KernelDebian Linux

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: reject invalid file types when reading inodes To prevent inodes with invalid file types from tripping through the vfs and causing malfunctions or assertion failures, add a missing sanity check when reading an inode from a block device. If the file type is not valid, treat it as a filesystem error.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Debian Linux · Debiandrupal

95%

11.0

Linux Kernel · Linux

95%

2.6.30 ≤ v < 5.10.2412.6.30 ≤ v < 5.15.1902.6.30 ≤ v < 5.4.2972.6.30 ≤ v < 6.1.1482.6.30 ≤ v < 6.12.412.6.30 ≤ v < 6.15.92.6.30 ≤ v < 6.162.6.30 ≤ v < 6.6.1015.11 ≤ v < 5.15.1905.16 ≤ v < 6.1.1485.5 ≤ v < 5.10.2416.13 ≤ v < 6.15.96.2 ≤ v < 6.6.1016.7 ≤ v < 6.12.412.6.305fe58fdc10df9ebea4c0eaed57adc47af5c1846.16 rc1 6.16 rc2 6.16 rc3 6.16 rc4 6.16 rc5 6.16 rc6 6.16 rc7

Vendor states this is fixed in 1a5c204e175a78556b8ef1f7683249fa5197295a (fixed)

Vendor states this is fixed in 2cf0c4130bf340be3935d097a3dcbfefdcf65815 (fixed)

Vendor states this is fixed in 42cd46b3a8b1497b9258dc7ac445dbd6beb73e2f (fixed)

Vendor states this is fixed in 4aead50caf67e01020c8be1945c3201e8a972a27 (fixed)

Vendor states this is fixed in 79663a15a1c70ca84f86f2dbba07b423fe7d5d4f (fixed)

Vendor states this is fixed in 98872a934ea6a95985fb6a3655a78a5f0c114e82 (fixed)

Vendor states this is fixed in bf585ee198bba4ff25b0d80a0891df4656cb0d08 (fixed)

Vendor states this is fixed in dd298c0b889acd3ecaf48b6e840c9ab91882e342 (fixed)

Vendor states this is fixed in 2.6.30 (unaffected)

Vendor states this is fixed in 5.10.241 (unaffected)

Vendor states this is fixed in 5.15.190 (unaffected)

Vendor states this is fixed in 5.4.297 (unaffected)