Not yet scoredPublished Dec 7, 2025

CVE-2025-40312jfs: Verify inode mode when loading from disk

Updated under an hour ago (Oct 27, 2026, 11:10 AM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: jfs: Verify inode mode when loading from disk The inode mode loaded from corrupted disk can be invalid. Do like what commit 0a9e74051313 ("isofs: Verify inode mode when loading from disk") does.

CVSS: Not yet scored
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Deferred
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 19cce65709a8a2966203653028d9004e28e85bd5; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before fabc1348bb8fe6bc80850014ee94bd89945f7f4d; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2870a7dec49ccdc3f6ae35da8f5d6737f21133a8; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before ce054a366c54992185c9514e489a14f145b10c29; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 1795277a4e98d82e6451544d43695540cee042ea; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 8d6a9cbd276b3b85da0e7e98208f89416fed9265; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 7a5aa54fba2bd591b22b9b624e6baa9037276986	CNA record

References

References

https://git.kernel.org/stable/c/19cce65709a8a2966203653028d9004e28e85bd5
https://git.kernel.org/stable/c/fabc1348bb8fe6bc80850014ee94bd89945f7f4d
https://git.kernel.org/stable/c/46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f
https://git.kernel.org/stable/c/2870a7dec49ccdc3f6ae35da8f5d6737f21133a8
https://git.kernel.org/stable/c/ce054a366c54992185c9514e489a14f145b10c29
https://git.kernel.org/stable/c/1795277a4e98d82e6451544d43695540cee042ea
https://git.kernel.org/stable/c/8d6a9cbd276b3b85da0e7e98208f89416fed9265
https://git.kernel.org/stable/c/7a5aa54fba2bd591b22b9b624e6baa9037276986

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.