01 Record

CVE-2025-38203

jfs: Fix null-ptr-deref in jfs_ioc_trim

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

jfs: Fix null-ptr-deref in jfs_ioc_trim

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.17% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 6.1% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-09-02.
Red Hat severity: No Red Hat rating. Red Hat rates the CVEs that affect its products.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published: 2025-07-04 13:37Z1 YR AGO
Last updated: 2026-09-02 12:49Z2 DAYS AGO
Reserved: 2025-04-16
Assigning CNA: Linux
Record state: PUBLISHED
Severity: Not rated by the issuing CNA
CNA CVSS vector: Not published by the issuing CNA
Weaknesses: No CWE assigned
Data version: 5.2
Document digest: 5c386318260847b610257ae5cb494d5bc023addce60d3f7e632c7a71fc22d8ea

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxb40c2e665cd552eae5fbdbb878bc29a34357668e to < 0d50231d473f89024158dc62624930de45d13718, b40c2e665cd552eae5fbdbb878bc29a34357668e to < a9d41c925069c950e18160e12a7e10e0f58c56fb, b40c2e665cd552eae5fbdbb878bc29a34357668e to < 4a8cb9908b51500a76f5156423bd295df53bff89, b40c2e665cd552eae5fbdbb878bc29a34357668e to < 4a2de0f5b8d7f218bea5bd43d30b466e8b272b8d, b40c2e665cd552eae5fbdbb878bc29a34357668e to < a39f811a9f5edb6d97bede8e6fe730393d3c8537, b40c2e665cd552eae5fbdbb878bc29a34357668e to < 233340626cf1b1887dca181f9f811db60c73f802, b40c2e665cd552eae5fbdbb878bc29a34357668e to < 9806ae34d7d661c372247cd36f83bfa0523d60ed, b40c2e665cd552eae5fbdbb878bc29a34357668e to < a4685408ff6c3e2af366ad9a7274f45ff3f394ee, 3.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/0d50231d473f89024158dc62624930de45d13718
git.kernel.orghttps://git.kernel.org/stable/c/a9d41c925069c950e18160e12a7e10e0f58c56fb
git.kernel.orghttps://git.kernel.org/stable/c/4a8cb9908b51500a76f5156423bd295df53bff89
git.kernel.orghttps://git.kernel.org/stable/c/4a2de0f5b8d7f218bea5bd43d30b466e8b272b8d
git.kernel.orghttps://git.kernel.org/stable/c/a39f811a9f5edb6d97bede8e6fe730393d3c8537
git.kernel.orghttps://git.kernel.org/stable/c/233340626cf1b1887dca181f9f811db60c73f802
git.kernel.orghttps://git.kernel.org/stable/c/9806ae34d7d661c372247cd36f83bfa0523d60ed
git.kernel.orghttps://git.kernel.org/stable/c/a4685408ff6c3e2af366ad9a7274f45ff3f394ee
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38203

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38203

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References