---
id: CVE-2025-38204
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  jfs: fix array-index-out-of-bounds read in add_missing_indices

  stbl is s8 but it must contain offsets into slot which can go from 0 to
  127.

  Added a bound check for th…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  jfs: fix array-index-out-of-bounds read in add_missing_indices

  stbl is s8 but it must contain offsets into slot which can go from 0 to
  127.

  Added a bound check for th…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-125
vendor: linux
product: linux_kernel
affected:
  - linux_kernel < 5.4.295
  - 'linux_kernel >= 5.5, < 5.10.239'
  - 'linux_kernel >= 5.11, < 5.15.186'
  - 'linux_kernel >= 5.16, < 6.15.4'
  - debian_linux = 11.0
patched:
  - linux_kernel 6.15.4
published: '2025-07-04'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:16.713'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-38204'
references:
  - url: 'https://git.kernel.org/stable/c/2ec34dc7094b14149ce091c77aff43a45d255518'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/44618bee303bed151ef3a525ff79fbd7689593b5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/5dff41a86377563f7a2b968aae00d25b4ceb37c9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/81af4b34fd72d390d7f237c6a545cc6d09707956'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bfa4655d28f338e68d345aed80d19be7999bbce2'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c8399564a58fb6ea2ff21a6fd278417943cb51a5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://lists.debian.org/debian-lts-announce/2025/10/msg00007.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://git.kernel.org/stable/c/c8733634978086b41255695d993cec3017a23a27'
  - url: 'https://git.kernel.org/stable/c/5730e2da0655336fed6aa3c25892e69e2ba5cb76'
tags:
  - nvd
  - cve.org
epss: 0.00225
epssPercentile: 0.13153
ingestedAt: '2026-10-15T11:00:41.716Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

jfs: fix array-index-out-of-bounds read in add_missing_indices

stbl is s8 but it must contain offsets into slot which can go from 0 to
127.

Added a bound check for that error and return -EIO if the check fails.
Also make jfs_readdir return with error if add_missing_indices returns
with an error.

## Affected

- `linux_kernel < 5.4.295`
- `linux_kernel >= 5.5, < 5.10.239`
- `linux_kernel >= 5.11, < 5.15.186`
- `linux_kernel >= 5.16, < 6.15.4`
- `debian_linux = 11.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.15.4`