CVE-2025-38697

In the Linux kernel, the following vulnerability has been resolved: jfs: upper bound check of tree index in dbAllocAG When computing the tree index in dbAllocAG, we never check if we are out of bounds realative to the size of the stree. This could happen in a scenario where the filesystem metadata are corrupted.

• CWE-129

• https://git.kernel.org/stable/c/1467a75819e41341cd5ebd16faa2af1ca3c8f4fePatch
• https://git.kernel.org/stable/c/173cfd741ad7073640bfb7e2344c2a0ee005e769Patch
• https://git.kernel.org/stable/c/2dd05f09cc323018136a7ecdb3d1007be9ede27fPatch
• https://git.kernel.org/stable/c/30e19a884c0b11f33821aacda7e72e914bec26efPatch
• https://git.kernel.org/stable/c/49ea46d9025aa1914b24ea957636cbe4367a7311Patch
• https://git.kernel.org/stable/c/5bdb9553fb134fd52ec208a8b378120670f6e784Patch
• https://git.kernel.org/stable/c/a4f199203f79ca9cd7355799ccb26800174ff093Patch
• https://git.kernel.org/stable/c/c214006856ff52a8ff17ed8da52d50601d54f9cePatch
• https://git.kernel.org/stable/c/c8ca21a2836993d7cb816668458e05e598574e55Patch
• https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2025/10/msg00008.htmlMailing List, Third Party Advisory
• https://cert-portal.siemens.com/productcert/html/ssa-032379.html

Published

Sep 4, 2025

Last Modified

Jul 30, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-38691In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38692In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38693In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38694In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38695In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38696In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38698In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38699In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2025-3870The 1 Decembrie 1918 plugin for WordPress is vulnerable to C…6.1
• CVE-2025-38700In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38701In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2025-38702In the Linux kernel, the following vulnerability has been re…7.8