# CVE-2025-38203: jfs: Fix null-ptr-deref in jfs_ioc_trim

CVE-2025-38203 is fixed in 29 products on 1 platform, first by DEBIAN-CVE-2025-38203, released July 4, 2025. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2025-38203
- Priority: Routine
- CVSS: 5.5 (medium)
- EPSS: 0.0020
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Jul 4, 2025
- Vendor advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-38203

## Description

In the Linux kernel, the following vulnerability has been resolved:  jfs: Fix null-ptr-deref in jfs_ioc_trim  [ Syzkaller Report ]  Oops: general protection fault, probably for non-canonical address 0xdffffc0000000087: 0000 [#1 KASAN: null-ptr-deref in range [0x0000000000000438-0x000000000000043f] CPU: 2 UID: 0 PID: 10614 Comm: syz-executor.0 Not tainted 6.13.0-rc6-gfbfd64d25c7a-dirty #1 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 Sched_ext: serialise (enabled+all), task: runnable_at=-30ms RIP: 0010:jfs_ioc_trim+0x34b/0x8f0 Code: e7 e8 59 a4 87 fe 4d 8b 24 24 4d 8d bc 24 38 04 00 00 48 8d 93 90 82 fe ff 4c 89 ff 31 f6 RSP: 0018:ffffc900055f7cd0 EFLAGS: 00010206 RAX: 0000000000000087 RBX: 00005866a9e67ff8 RCX: 000000000000000a RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 RBP: dffffc0000000000 R08: ffff88807c180003 R09: 1ffff1100f830000 R10: dffffc0000000000 R11: ffffed100f830001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000438 FS:  00007fe520225640(0000) GS:ffff8880b7e80000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005593c91b2c88 CR3: 000000014927c000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: <TASK> ? __die_body+0x61/0xb0 ? die_addr+0xb1/0xe0 ? exc_general_protection+0x333/0x510 ? asm_exc_general_protection+0x26/0x30 ? jfs_ioc_trim+0x34b/0x8f0 jfs_ioctl+0x3c8/0x4f0 ? __pfx_jfs_ioctl+0x10/0x10 ? __pfx_jfs_ioctl+0x10/0x10 __se_sys_ioctl+0x269/0x350 ? __pfx___se_sys_ioctl+0x10/0x10 ? do_syscall_64+0xfb/0x210 do_syscall_64+0xee/0x210 ? syscall_exit_to_user_mode+0x1e0/0x330 entry_SYSCALL_64_after_hwframe+0x77/0x7f RIP: 0033:0x7fe51f4903ad Code: c3 e8 a7 2b 00 00 0f 1f 80 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d RSP: 002b:00007fe5202250c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 RAX: ffffffffffffffda RBX: 00007fe51f5cbf80 RCX: 00007fe51f4903ad RDX: 0000000020000680 RSI: 00000000c0185879 RDI: 0000000000000005 RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe520225640 R13: 000000000000000e R14: 00007fe51f44fca0 R15: 00007fe52021d000 </TASK> Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:jfs_ioc_trim+0x34b/0x8f0 Code: e7 e8 59 a4 87 fe 4d 8b 24 24 4d 8d bc 24 38 04 00 00 48 8d 93 90 82 fe ff 4c 89 ff 31 f6 RSP: 0018:ffffc900055f7cd0 EFLAGS: 00010206 RAX: 0000000000000087 RBX: 00005866a9e67ff8 RCX: 000000000000000a RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000000001 RBP: dffffc0000000000 R08: ffff88807c180003 R09: 1ffff1100f830000 R10: dffffc0000000000 R11: ffffed100f830001 R12: 0000000000000000 R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000438 FS:  00007fe520225640(0000) GS:ffff8880b7e80000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005593c91b2c88 CR3: 000000014927c000 CR4: 00000000000006f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Kernel panic - not syncing: Fatal exception  [ Analysis ]  We believe that we have found a concurrency bug in the `fs/jfs` module that results in a null pointer dereference. There is a closely related issue which has been fixed:  https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=d6c1b3599b2feb5c7291f5ac3a36e5fa7cedb234  ... but, unfortunately, the accepted patch appears to still be susceptible to a null pointer dereference under some interleavings.  To trigger the bug, we think that `JFS_SBI(ipbmap->i_sb)->bmap` is set to NULL in `dbFreeBits` and then dereferenced in `jfs_ioc_trim`. This bug manifests quite rarely under normal circumstances, but is triggereable from a syz-program.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | dtb-aarch64 opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-64kb opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-64kb sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-64kb sles 15.7 | 6.4.0-150700.53.11.1 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-azure opensuse-leap 15.6 | 6.4.0-150600.8.48.1 | [SUSE-SU-2025:02969-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02969-1.md) | Aug 25, 2025 |
| Linux | kernel-azure sles 15.6 | 6.4.0-150600.8.48.1 | [SUSE-SU-2025:02969-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02969-1.md) | Aug 25, 2025 |
| Linux | kernel-azure sles 15.7 | 6.4.0-150700.20.11.1 | [SUSE-SU-2025:03011-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03011-1.md) | Aug 28, 2025 |
| Linux | kernel-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-coco_debug sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-debug opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-default opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-default sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-default sles 15.7 | 6.4.0-150700.53.11.1 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-default-base opensuse-leap 15.6 | 6.4.0-150600.23.65.1.150600.12.28.4 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-default-base sles 15.6 | 6.4.0-150600.23.65.1.150600.12.28.4 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-default-base sles 15.7 | 6.4.0-150700.53.11.1.150700.17.9.4 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-docs opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-docs sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-docs sles 15.7 | 6.4.0-150700.53.11.3 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-kvmsmall opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-livepatch-SLE15-SP6-RT_Update_14 sles 15.6 | 1-150600.1.5.1 | [SUSE-SU-2025:03023-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03023-1.md) | Aug 29, 2025 |
| Linux | kernel-livepatch-SLE15-SP6_Update_14 sles 15.6 | 1-150600.13.3.4 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-livepatch-SLE15-SP7-RT_Update_3 sles 15.7 | 1-150700.1.5.1 | [SUSE-SU-2025:02853-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02853-1.md) | Aug 18, 2025 |
| Linux | kernel-livepatch-SLE15-SP7_Update_3 sles 15.7 | 1-150700.15.3.4 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-obs-build opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-obs-build sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-obs-build sles 15.7 | 6.4.0-150700.53.11.1 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-obs-qa opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-rt opensuse-leap 15.6 | 6.4.0-150600.10.49.1 | [SUSE-SU-2025:03023-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03023-1.md) | Aug 29, 2025 |
| Linux | kernel-rt_debug opensuse-leap 15.6 | 6.4.0-150600.10.49.1 | [SUSE-SU-2025:03023-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03023-1.md) | Aug 29, 2025 |
| Linux | kernel-source opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-source sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-source sles 15.7 | 6.4.0-150700.53.11.1 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-source-azure opensuse-leap 15.6 | 6.4.0-150600.8.48.1 | [SUSE-SU-2025:02969-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02969-1.md) | Aug 25, 2025 |
| Linux | kernel-source-azure sles 15.6 | 6.4.0-150600.8.48.1 | [SUSE-SU-2025:02969-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02969-1.md) | Aug 25, 2025 |
| Linux | kernel-source-azure sles 15.7 | 6.4.0-150700.20.11.1 | [SUSE-SU-2025:03011-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03011-1.md) | Aug 28, 2025 |
| Linux | kernel-source-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-source-rt opensuse-leap 15.6 | 6.4.0-150600.10.49.1 | [SUSE-SU-2025:03023-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03023-1.md) | Aug 29, 2025 |
| Linux | kernel-syms opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-syms sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-syms sles 15.7 | 6.4.0-150700.53.11.1 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | kernel-syms-azure opensuse-leap 15.6 | 6.4.0-150600.8.48.1 | [SUSE-SU-2025:02969-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02969-1.md) | Aug 25, 2025 |
| Linux | kernel-syms-azure sles 15.6 | 6.4.0-150600.8.48.1 | [SUSE-SU-2025:02969-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02969-1.md) | Aug 25, 2025 |
| Linux | kernel-syms-azure sles 15.7 | 6.4.0-150700.20.11.1 | [SUSE-SU-2025:03011-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03011-1.md) | Aug 28, 2025 |
| Linux | kernel-syms-coco sles 15.6 | 6.4.0-15061.28.coco15sp6.1 | [SUSE-SU-2025:02923-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02923-1.md) | Aug 20, 2025 |
| Linux | kernel-syms-rt opensuse-leap 15.6 | 6.4.0-150600.10.49.1 | [SUSE-SU-2025:03023-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-03023-1.md) | Aug 29, 2025 |
| Linux | kernel-zfcpdump opensuse-leap 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-zfcpdump sles 15.6 | 6.4.0-150600.23.65.1 | [SUSE-SU-2025:02996-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02996-1.md) | Aug 27, 2025 |
| Linux | kernel-zfcpdump sles 15.7 | 6.4.0-150700.53.11.1 | [SUSE-SU-2025:02997-1](https://patchblox.com/security/data/fix/linux/suse-su-2025-02997-1.md) | Aug 27, 2025 |
| Linux | linux Debian 12.15 (bookworm) | 6.1.187-1 | [DEBIAN-CVE-2025-38203](https://patchblox.com/security/data/fix/linux/debian-cve-2025-38203.md) | Jul 4, 2025 |
| Linux | linux Debian 13.5 (trixie) | 6.12.111-1 | [DEBIAN-CVE-2025-38203](https://patchblox.com/security/data/fix/linux/debian-cve-2025-38203.md) | Jul 4, 2025 |
| Linux | linux Debian 14 | 6.16.3-1 | [DEBIAN-CVE-2025-38203](https://patchblox.com/security/data/fix/linux/debian-cve-2025-38203.md) | Jul 4, 2025 |
| Linux | linux-6.12 Debian 12.15 (bookworm) | 6.12.111-1~deb12u1 | [DEBIAN-CVE-2025-38203](https://patchblox.com/security/data/fix/linux/debian-cve-2025-38203.md) | Jul 4, 2025 |

---

Data as of 2026-11-09T01:18:40Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.