NetSight
IP …
high7.8

CVE-2025-39743

In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy from…

Impact

In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy from the disk by the reproducer is AGGR_RESERVED_I. When executing evict, its hard link number is 0, so its inode pages are not truncated. This causes the bugon to be triggered when executing clear_inode() because nrpages is greater than 0.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.14 before 5.4.297
from 5.5 before 5.10.241
from 5.11 before 5.15.190
from 5.16 before 6.1.149
from 6.2 before 6.6.103
from 6.7 before 6.12.43
DebianDebian Linux
Version 11.0

References