In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent crashes Validate db_agheight, db_agwidth, and db_agstart in dbMount to catch …
High CVSS 7.8
Summary
In the Linux kernel, the following vulnerability has been resolved: jfs: validate AG parameters in dbMount() to prevent crashes Validate db_agheight, db_agwidth, and db_agstart in dbMount to catch corrupted metadata early and avoid undefined behavior in dbAllocAG. Limits are derived from L2LPERCTL, LPERCTL/MAXAG, and CTLTREESIZE: - agheight: 0 to L2LPERCTL/2 (0 to 5) ensures shift (L2LPERCTL - 2*agheight) >= 0. - agwidth: 1 to min(LPERCTL/MAXAG, 2^(L2LPERCTL - 2*agheight)) ensures agperl…
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Affected products
- :
- :
Sources
- NVD DATABASE
Original Links
- https://git.kernel.org/stable/c/0c40fa81f850556e9aa0185fede9ef1112db7b39 Patch
- https://git.kernel.org/stable/c/37bfb464ddca87f203071b5bd562cd91ddc0b40a Patch
- https://git.kernel.org/stable/c/8b69608c6b6779a7ab07ce4467a56df90152cfb9 Patch
- https://git.kernel.org/stable/c/9242ff6245527a3ebb693ddd175493b38ddca72f Patch
- https://git.kernel.org/stable/c/95ae5ee6069d9a5945772625f289422ef659221a Patch
- https://git.kernel.org/stable/c/a4259e72363e1ea204a97292001a9fc36c7e52fd Patch
- https://git.kernel.org/stable/c/b62a1e59d8716bbd2e73660743fe06acc97ed7d1 Patch
- https://git.kernel.org/stable/c/c3705c82b7406a15ef38a610d03bf6baa43d6e0c Patch
- https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html Mailing List
- https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html Mailing List
Timeline
- nvd_ingest NVD