In the Linux kernel, the following vulnerability has been resolved:
nilfs2: reject invalid file types when reading inodes
To prevent inodes with invalid file types from tripping through the vfs and causing malfunctions or assertion failures, add a missing sanity check when reading an inode from a block device. If the file type is not valid, treat it as a filesystem error.
[
{
"id": "CVE-2025-38663-00c7873f",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"173602267017416355942948008144589694868",
"147397015172108698120831907202454498530"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79663a15a1c70ca84f86f2dbba07b423fe7d5d4f"
},
{
"id": "CVE-2025-38663-2426d64c",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1485.0,
"function_hash": "77060422907225400794758461635609257832"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a5c204e175a78556b8ef1f7683249fa5197295a"
},
{
"id": "CVE-2025-38663-26f474b7",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1485.0,
"function_hash": "77060422907225400794758461635609257832"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98872a934ea6a95985fb6a3655a78a5f0c114e82"
},
{
"id": "CVE-2025-38663-2e3f99a5",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1435.0,
"function_hash": "267597561734420986617904171467894937673"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42cd46b3a8b1497b9258dc7ac445dbd6beb73e2f"
},
{
"id": "CVE-2025-38663-451d2fff",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1485.0,
"function_hash": "77060422907225400794758461635609257832"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cf0c4130bf340be3935d097a3dcbfefdcf65815"
},
{
"id": "CVE-2025-38663-4b2b4771",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1435.0,
"function_hash": "267597561734420986617904171467894937673"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@79663a15a1c70ca84f86f2dbba07b423fe7d5d4f"
},
{
"id": "CVE-2025-38663-781f092e",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1485.0,
"function_hash": "77060422907225400794758461635609257832"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf585ee198bba4ff25b0d80a0891df4656cb0d08"
},
{
"id": "CVE-2025-38663-982f0119",
"signature_type": "Function",
"signature_version": "v1",
"target": {
"function": "__nilfs_read_inode",
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"length": 1485.0,
"function_hash": "77060422907225400794758461635609257832"
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd298c0b889acd3ecaf48b6e840c9ab91882e342"
},
{
"id": "CVE-2025-38663-b361e189",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"214549503758195079772008399358292291582",
"173523905807602793304973535894179891306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bf585ee198bba4ff25b0d80a0891df4656cb0d08"
},
{
"id": "CVE-2025-38663-b406c886",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"214549503758195079772008399358292291582",
"173523905807602793304973535894179891306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@dd298c0b889acd3ecaf48b6e840c9ab91882e342"
},
{
"id": "CVE-2025-38663-b4fb75ad",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"173602267017416355942948008144589694868",
"147397015172108698120831907202454498530"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@42cd46b3a8b1497b9258dc7ac445dbd6beb73e2f"
},
{
"id": "CVE-2025-38663-bbea1075",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"214549503758195079772008399358292291582",
"173523905807602793304973535894179891306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@2cf0c4130bf340be3935d097a3dcbfefdcf65815"
},
{
"id": "CVE-2025-38663-d9d32b61",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"214549503758195079772008399358292291582",
"173523905807602793304973535894179891306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1a5c204e175a78556b8ef1f7683249fa5197295a"
},
{
"id": "CVE-2025-38663-e0c17910",
"signature_type": "Line",
"signature_version": "v1",
"target": {
"file": "fs/nilfs2/inode.c"
},
"deprecated": false,
"digest": {
"line_hashes": [
"174404188612512529898426584158246650286",
"53416053677098269094975660622075504394",
"169732083896411465376326706454966742995",
"121964215477892810163994634925323461373",
"197618668856019871789684087869895605730",
"207704375231623842290556238282525457907",
"214549503758195079772008399358292291582",
"173523905807602793304973535894179891306"
],
"threshold": 0.9
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@98872a934ea6a95985fb6a3655a78a5f0c114e82"
}
]