vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2025-40312

jfs: Verify inode mode when loading from disk

N/A
Published: December 8, 2025 at 12:46 AM UTC
Updated: October 14, 2026 at 10:10 PM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: Verify inode mode when loading from disk The inode mode loaded from corrupted disk can be invalid. Do like what commit 0a9e74051313 ("isofs: Verify inode mode when loading from disk") does.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
1da177e4c3f41524e886b7f1b8a0c1fc7321cac22.6.12
Vendor states this is fixed in 1795277a4e98d82e6451544d43695540cee042ea (fixed)
Vendor states this is fixed in 19cce65709a8a2966203653028d9004e28e85bd5 (fixed)
Vendor states this is fixed in 2870a7dec49ccdc3f6ae35da8f5d6737f21133a8 (fixed)
Vendor states this is fixed in 46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f (fixed)
Vendor states this is fixed in 7a5aa54fba2bd591b22b9b624e6baa9037276986 (fixed)
Vendor states this is fixed in 8d6a9cbd276b3b85da0e7e98208f89416fed9265 (fixed)
Vendor states this is fixed in ce054a366c54992185c9514e489a14f145b10c29 (fixed)
Vendor states this is fixed in fabc1348bb8fe6bc80850014ee94bd89945f7f4d (fixed)
Vendor states this is fixed in 2.6.12 (unaffected)
Vendor states this is fixed in 5.10.247 (unaffected)
Vendor states this is fixed in 5.15.197 (unaffected)
Vendor states this is fixed in 5.4.302 (unaffected)
Vendor states this is fixed in 6.1.159 (unaffected)
Vendor states this is fixed in 6.12.58 (unaffected)
Vendor states this is fixed in 6.17.8 (unaffected)
Vendor states this is fixed in 6.18 (unaffected)
Vendor states this is fixed in 6.6.117 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (8)

Source: cverecord
https://git.kernel.org/stable/c/19cce65709a8a2966203653028d9004e28e85bd5
Source: cverecord
https://git.kernel.org/stable/c/fabc1348bb8fe6bc80850014ee94bd89945f7f4d
Source: cverecord
https://git.kernel.org/stable/c/46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f
Source: cverecord
https://git.kernel.org/stable/c/2870a7dec49ccdc3f6ae35da8f5d6737f21133a8
Source: cverecord
https://git.kernel.org/stable/c/ce054a366c54992185c9514e489a14f145b10c29
Source: cverecord
https://git.kernel.org/stable/c/1795277a4e98d82e6451544d43695540cee042ea
Source: cverecord
https://git.kernel.org/stable/c/8d6a9cbd276b3b85da0e7e98208f89416fed9265
Source: cverecord
https://git.kernel.org/stable/c/7a5aa54fba2bd591b22b9b624e6baa9037276986

Quick Info

StatusDEFERRED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card