Medium 5.5Published Sep 4, 2025

CVE-2025-38698jfs: Regular file corruption check

Updated under an hour ago (Oct 26, 2026, 3:40 PM ET)

Does this affect you?

It affects Linux and 3 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: jfs: Regular file corruption check The reproducer builds a corrupted file on disk with a negative i_size value. Add a check when opening this file to avoid subsequent operation failures.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: May 12, 2026
First seen by InfoSec Signals: Oct 19, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9f896c3d0192241d6438be6963682ace8203f502; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 6bc86f1d7d5419d5b19483ba203ca0b760c41c51; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9ad054cd2c4ca8c371e555748832aa217c41fc65; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 9605cb2ea38ba014d0e704cba0dbbb00593fa9fd; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 78989af5bbf55a0cf1165b0fa73921bc02f1543b; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 00462be586b33076f8b8023e7ba697deedc131db; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fd9454b7710b28060faa49b041f8283c435721a3; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 02edcfda419168d9405bffe55f18ea9c1bf92366; and 1 more ranges	CNA record
Siemens SIMATIC CN 4100 siemens:simatic_cn_4100 (from the name)	before V5.0	CISA ADP
linux linux_kernel linux:linux_kernel	from 2.6.12.1 before 5.4.297; from 5.5 before 5.10.241; from 5.11 before 5.15.190; from 5.16 before 6.1.149; from 6.2 before 6.6.103; from 6.7 before 6.12.43; from 6.13 before 6.15.11; from 6.16 before 6.16.2; and 5 more ranges	NVD
debian debian_linux debian:debian_linux	11.0	NVD

References

References

https://git.kernel.org/stable/c/9f896c3d0192241d6438be6963682ace8203f502	patch
https://git.kernel.org/stable/c/6bc86f1d7d5419d5b19483ba203ca0b760c41c51	patch
https://git.kernel.org/stable/c/9ad054cd2c4ca8c371e555748832aa217c41fc65	patch
https://git.kernel.org/stable/c/9605cb2ea38ba014d0e704cba0dbbb00593fa9fd	patch
https://git.kernel.org/stable/c/78989af5bbf55a0cf1165b0fa73921bc02f1543b	patch
https://git.kernel.org/stable/c/00462be586b33076f8b8023e7ba697deedc131db	patch
https://git.kernel.org/stable/c/fd9454b7710b28060faa49b041f8283c435721a3	patch
https://git.kernel.org/stable/c/02edcfda419168d9405bffe55f18ea9c1bf92366	patch
https://git.kernel.org/stable/c/2d04df8116426b6c7b9f8b9b371250f666a2a2fb	patch
https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html	third-party-advisory
1–10 of 12

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.