ROS-20260220-73-0024

A vulnerability in the Linux operating system kernel function jffs2linknoderef is related to a lack of validation of the function's return code. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

Linux Heap Buffer Overflow DoS

The vulnerability of the jffs2linknoderef function in the Linux operating system is related to the lack of code checks for function return. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-38328: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: jffs2: check jffs2preallocrawnoderefs result in few other places Fuzzing hit another invalid pointer dereference due to the lack of checking whether jffs2preallocrawnoderefs completed successfully. Subsequent logic implies that t...

CVE-2025-38194: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: jffs2: check that raw node were preallocated before writing summary Syzkaller detected a kernel bug in jffs2linknoderef, caused by fault injection in jffs2preallocrawnoderefs. jffs2sumwritesumnode doesn't check return value of...