CVE-2025-39743

CVE-2025-39743: vulnerability in Linux

jfs: truncate good inode pages when hard link is 0

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.2%
exploitation probability
0.2%top 93% of all CVEs
observed exploitation
nono source reports it
In the Linux kernel, the following vulnerability has been resolved: jfs: truncate good inode pages when hard link is 0 The fileset value of the inode copy from the disk by the reproducer is AGGR_RESERVED_I. When executing evict, its hard link number is 0, so its inode pages are not truncated. This causes the bugon to be triggered when executing clear_inode() because nrpages is greater than 0.
Affected products
Linux · Linux
Related CVEs — Linux

In the same product, most dangerous first.

CVE-2024-53197HIGHALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devicesEPSS 4.1%KEVCVE-2026-31431HIGHcrypto: algif_aead - Revert to operating out-of-placeEPSS 3.4%KEVCVE-2024-53104HIGHmedia: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_formatEPSS 3.4%KEVCVE-2025-39682CRITICALtls: fix handling of zero-length records on the rx_listEPSS 2.9%KEVCVE-2024-36971HIGHnet: fix __dst_negative_advice() raceEPSS 2.7%KEVCVE-2024-53150HIGHALSA: usb-audio: Fix out of bounds reads when finding clock sourcesEPSS 1.4%KEV
References
https://cert-portal.siemens.com/productcert/html/ssa-032379.htmlhttps://git.kernel.org/stable/c/1bb5cdc3e39f0c2b311fcb631258b7e60d3fb0d3https://git.kernel.org/stable/c/2b1d5ca395a5fb170c3f885cd42c16179f7f54echttps://git.kernel.org/stable/c/2d91b3765cd05016335cd5df5e5c6a29708ec058https://git.kernel.org/stable/c/34d8e982bac48bdcca7524644a8825a580edce74https://git.kernel.org/stable/c/5845b926c561b8333cd65169526eec357d7bb449https://git.kernel.org/stable/c/89fff8e3d6710fc32507b8e19eb5afa9fb79b896https://git.kernel.org/stable/c/8ed7275910fb7177012619864e04d3008763f3eahttps://git.kernel.org/stable/c/b5b471820c33365a8ccd2d463578bf4e47056c2chttps://git.kernel.org/stable/c/df3fd8daf278eca365f221749ae5b728e8382a04https://lists.debian.org/debian-lts-announce/2025/10/msg00007.htmlhttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html