Buffer Overflow Vulnerability in Linux Kernel's JFFS2 File System

CVE-2025-38194

What is CVE-2025-38194?

A buffer overflow vulnerability exists in the Linux kernel's JFFS2 file system, specifically in the handling of preallocated raw node references. The flaw arises when the jffs2_sum_write_sumnode function fails to properly check the return value of jffs2_prealloc_raw_node_refs, allowing errors to propagate unchecked. This may lead to potential system instability or crashes when the kernel attempts to manage file system data incorrectly. Implementing a proper return value check can mitigate the risk associated with this vulnerability.

References