CVE-2025-39735 — Out-of-bounds Read in Linux
Severity
7.1HIGHNVD
OSV8.8OSV5.9OSV5.5OSV4.4
EPSS
0.1%
top 78.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 18
Latest updateJan 9
Description
In the Linux kernel, the following vulnerability has been resolved:
jfs: fix slab-out-of-bounds read in ea_get()
During the "size_check" label in ea_get(), the code checks if the extended
attribute list (xattr) size matches ea_size. If not, it logs
"ea_get: invalid extended attribute" and calls print_hex_dump().
Here, EALIST_SIZE(ea_buf->xattr) returns 4110417968, which exceeds
INT_MAX (2,147,483,647). Then ea_size is clamped:
int size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf->xattr));
…
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:HExploitability: 1.8 | Impact: 5.2
Affected Packages8 packages
▶CVEListV5linux/linux6e39b681d1eb16f408493bf5023788b57f68998c — 3d6fd5b9c6acbc005e53d0211c7381f566babec1+11