CVE-2025-38697

In the Linux kernel, the following vulnerability has been resolved:

jfs: upper bound check of tree index in dbAllocAG

When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.

This vulnerability is rated as Moderate because triggering the out-of-bounds access requires mounting a specially crafted or corrupted JFS filesystem image, restricting exploitation to local environments with mounting privileges. In standard Red Hat Enterprise Linux deployments, non-privileged users cannot mount arbitrary storage volumes or filesystem images without administrative intervention. Furthermore, the legacy JFS filesystem is not enabled or supported on contemporary Red Hat Enterprise Linux releases, significantly constraining the overall blast radius.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.