What’s Vulnerable › Vulnerabilities

CVE-2025-40312: jfs: Verify inode mode when loading from disk

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-12-08 · updated 2026-10-14

Description

In the Linux kernel, the following vulnerability has been resolved: jfs: Verify inode mode when loading from disk The inode mode loaded from corrupted disk can be invalid. Do like what commit 0a9e74051313 ("isofs: Verify inode mode when loading from disk") does.

Affected products

• Linux kernel: 2.6.12 — fixed in 6.18

How to fix

Upgrade to a fixed version: Linux kernel 6.18. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1795277a4e98d82e6451544d43695540cee042ea
• https://git.kernel.org/stable/c/19cce65709a8a2966203653028d9004e28e85bd5
• https://git.kernel.org/stable/c/2870a7dec49ccdc3f6ae35da8f5d6737f21133a8
• https://git.kernel.org/stable/c/46c76cfa17d1828c1a889cb54cb11d5ef3dfbc0f
• https://git.kernel.org/stable/c/7a5aa54fba2bd591b22b9b624e6baa9037276986
• https://git.kernel.org/stable/c/8d6a9cbd276b3b85da0e7e98208f89416fed9265
• https://git.kernel.org/stable/c/ce054a366c54992185c9514e489a14f145b10c29
• https://git.kernel.org/stable/c/fabc1348bb8fe6bc80850014ee94bd89945f7f4d

Get alerted when CVE-2025-40312 or the next vulnerability affects your stack