In the Linux kernel, the following vulnerability has been resolved:
ext4: do not BUG when INLINEDATAFL lacks system.data xattr
A syzbot fuzzed image triggered a BUGON in ext4updateinlinedata() when an inode had the INLINEDATAFL flag set but was missing the system.data extended attribute.
Since this can happen due to a maiciouly fuzzed file system, we shouldn't BUG, but rather, report it as a corrupted file system.
Add similar replacements of BUGON with EXT4ERRORINODE() ii ext4createinlinedata() and ext4inlinedata_truncate().
[
{
"id": "CVE-2025-38701-026c8120",
"deprecated": false,
"digest": {
"function_hash": "131295844368662557030983119847708473734",
"length": 1409.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f322c12df7aeed1755acd3c6fab48c7807795fb",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/ext4/inline.c",
"function": "ext4_update_inline_data"
}
},
{
"id": "CVE-2025-38701-069e3912",
"deprecated": false,
"digest": {
"function_hash": "206771295552561170656790877350067925784",
"length": 2311.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f322c12df7aeed1755acd3c6fab48c7807795fb",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/ext4/inline.c",
"function": "ext4_inline_data_truncate"
}
},
{
"id": "CVE-2025-38701-0db55961",
"deprecated": false,
"digest": {
"function_hash": "146434802082921205205130901881097404766",
"length": 1427.0
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f322c12df7aeed1755acd3c6fab48c7807795fb",
"signature_version": "v1",
"signature_type": "Function",
"target": {
"file": "fs/ext4/inline.c",
"function": "ext4_create_inline_data"
}
},
{
"id": "CVE-2025-38701-998cb41f",
"deprecated": false,
"digest": {
"threshold": 0.9,
"line_hashes": [
"327579885649970295337345006505799132936",
"191654583863534662730560198925369224913",
"107308160957581167997351344544597896275",
"222957225900811065500111868380632775470",
"59236753561431190362888896461179744347",
"19746757559404146057655195966301991705",
"75385777469911729313672938220630922899",
"68547588308660828112642272895238793052",
"101815201751909415294122991798426341546",
"333601029962456490955627052893249127054",
"282248606686448189966090272585866638778",
"36159692925955900071296863865144051746"
]
},
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7f322c12df7aeed1755acd3c6fab48c7807795fb",
"signature_version": "v1",
"signature_type": "Line",
"target": {
"file": "fs/ext4/inline.c"
}
}
]