ROS-20260928-73-0095

The vulnerability of the jfsiget function in the fs/jfs/inode.c file of the JFS file system in the Linux operating system is related to incorrect checking of the type of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibili...

ROS-20260928-73-0119

The vulnerability of the txInit function in the fs/jfs/jfstxnmgr.c file of the JFS file system in Linux operating systems is related to incorrect initialization of resources. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0075

The vulnerability of the dbUnmount function in the fs/jfs/jfsdmap.c module of the Linux file system’s JFS kernel relates to the reallocation of previously released memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260925-73-0015

The vulnerability of the txBegin function in the JFS file system module fs/jfs/jfstxnmgr.c of the Linux operating system is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerabilities have been resolved: fs/jfs: prevented double-free in dbUnmount after failed jfsremount Syzkaller reported the following issue: ================================================================== BUG: KASAN: double-free in slabfree mm/slub.c:3787...

Astra Linux – Vulnerabilities in Linux, Linux-5.10, Linux-5.15, Linux-6.1

In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Added a check for the negative value of dbl2nbperpage. l2nbperpage is log2number of blks per page, and the minimum legal value should be 0, not negative. If l2nbperpage is negative, an error will occur when it is...

CVE-2023-54127: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs/jfs: prevent double-free in dbUnmount after failed jfsremount Syzkaller reported the following issue: ================================================================== BUG: KASAN: double-free in slabfree mm/slub.c:3787 inline...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990514)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990514 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989758)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989758 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989007)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989007 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the...

CVE-2022-50567: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbAllocAG Syzbot found a crash : UBSAN: shift-out-of-bounds in dbAllocAG. The underlying bug is the missing check of bmp-dbagl2size. The field can be greater than 64 and trigger the...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-986294)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986294 advisory. In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the...

CVE-2023-53485: Improper Validation of Array Index

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev Syzkaller reported the following issue: UBSAN: array-index-out-of-bounds in fs/jfs/jfsdmap.c:1965:6 index -84 is out of range for type 's8341' aka 'signed char341'...

CVE-2022-50333: Out-of-bounds Read

In the Linux kernel, the following vulnerability has been resolved: fs: jfs: fix shift-out-of-bounds in dbDiscardAG This should be applied to most URSAN bugs found recently by syzbot, by guarding the dbMount. As syzbot feeding rubbish into the bmap descriptor...

PT-2025-27978

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.13.0-rc6 Description: A concurrency bug in the fs/jfs module results in a null pointer dereference. The issue is closely related to a previously fixed problem, but the accepted patch is still susceptible to a...

CVE-2024-58095: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: jfs: add check read-only before txBeginAnon call Added a read-only check before calling txBeginAnon in extAlloc and extRecord. This prevents modification attempts on a read-only mounted filesystem, avoiding potential errors or...

ROS-20241119-01

A vulnerability in the ath11k component of the SUNRPC kernel of the Linux system is related to use-after-use errors release in the rpcclntremovepipedir and rpcsetuppipedir functions in net/sunrpc/clnt.c. Exploitation of the vulnerability could allow an attacker to escalate privileges on the syste...

PT-2024-7047

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the jfs file system in the Linux kernel, specifically with the functions jfs getxattr and jfs listxattr in the fs/jfs/xattr.c module. It involves reading memory...

CVE-2023-52810

In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add check for negative dbl2nbperpage l2nbperpage is log2number of blks per page, and the minimum legal value should be 0, not negative. In the case of l2nbperpage being negative, an error will occur when subsequently used...

CVE-2023-52804

In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Add validity check for dbmaxag and dbagpref Both dbmaxag and dbagpref are used as the index of the dbagfree array, but there is currently no validity check for dbmaxag and dbagpref, which can lead to errors. The following...