01 Record

CVE-2025-38328

jffs2: check jffs2_prealloc_raw_node_refs() result in few other places

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

jffs2: check jffs2_prealloc_raw_node_refs() result in few other places

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.18% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 8.0% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2025-07-10 08:15Z1 YR AGO

Last updated

2026-05-11 21:25Z3 MO AGO

Reserved

2025-04-16

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-252Unchecked Return ValueBase

Data version

5.2

Document digest

27c148fc1587834499fd482751bd5e86c0686d86ed4d7e37d7574605bede7548

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux2f785402f39b96a077b6e62bf26164bfb8e0c980 to < 7e860296d7808de1db175c1eda29f94a2955dcc4, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < d96e6451a8d0fe62492d4cc942d695772293c05a, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < f41c625328777f9ad572901ba0b0065bb9c9c1da, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < 38d767fb4a7766ec2058f97787e4c6e8d10343d6, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < cd42ddddd70abc7127c12b96c8c85dbd080ea56f, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < d1b81776f337a9b997f797c70ac0a26d838a2168, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < 042fa922c84b5080401bcd8897d4ac4919d15075, 2f785402f39b96a077b6e62bf26164bfb8e0c980 to < 2b6d96503255a3ed676cd70f8368870c6d6a25c6, 2.6.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/7e860296d7808de1db175c1eda29f94a2955dcc4
git.kernel.orghttps://git.kernel.org/stable/c/d96e6451a8d0fe62492d4cc942d695772293c05a
git.kernel.orghttps://git.kernel.org/stable/c/f41c625328777f9ad572901ba0b0065bb9c9c1da
git.kernel.orghttps://git.kernel.org/stable/c/38d767fb4a7766ec2058f97787e4c6e8d10343d6
git.kernel.orghttps://git.kernel.org/stable/c/cd42ddddd70abc7127c12b96c8c85dbd080ea56f
git.kernel.orghttps://git.kernel.org/stable/c/d1b81776f337a9b997f797c70ac0a26d838a2168
git.kernel.orghttps://git.kernel.org/stable/c/042fa922c84b5080401bcd8897d4ac4919d15075
git.kernel.orghttps://git.kernel.org/stable/c/2b6d96503255a3ed676cd70f8368870c6d6a25c6
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00008.html
lists.debian.orghttps://lists.debian.org/debian-lts-announce/2025/10/msg00007.html

01 Record index

CVE-2025-38328

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2025-38328

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References