CVEFinder.io

CVE-2025-71292

⚠️ high
🔍 Scan for this CVE
Summary

In the Linux kernel, the following vulnerability has been resolved: jfs: nlink overflow in jfs_rename If nlink is maximal for a directory (-1) and inside that directory you perform a rename for some child directory (not moving from the parent), then the nlink of the first directory is first incremented and later decremented. Normally this is fine, but when nlink = -1 this causes a wrap around to 0, and then drop_nlink issues a warning. After applying the patch syzbot no longer issues any warn

Description

In the Linux kernel, the following vulnerability has been resolved:

jfs: nlink overflow in jfs_rename

If nlink is maximal for a directory (-1) and inside that directory you
perform a rename for some child directory (not moving from the parent),
then the nlink of the first directory is first incremented and later
decremented. Normally this is fine, but when nlink = -1 this causes a
wrap around to 0, and then drop_nlink issues a warning.

After applying the patch syzbot no longer issues any warnings. I also
ran some basic fs tests to look for any regressions.

CVSS Score
7.5
High
EPSS Score
0.3
Exploit Probability
Published Date
2026-05-06
First Seen: 2026-07-31
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 68.5% of all 340,620 vulnerabilities in our database.

#107,155
Above average severity
Severity Percentile
Last Modified 2026-07-30
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

📦 Affected Products 8

🔗 References 8

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-63807 ⚠️ high 8.8 0.1 In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Ensure hugepage is in by slot before ... 2026-07-19
CVE-2026-63806 ⚠️ high 7.1 0.2 In the Linux kernel, the following vulnerability has been resolved: KVM: Replace guest-triggerable BUG_ON() in ioeventf... 2026-07-19
CVE-2026-63805 ⚠️ high 7.8 0.1 In the Linux kernel, the following vulnerability has been resolved: crypto: nx - fix nx_crypto_ctx_exit argument nx_cr... 2026-07-19
CVE-2026-63804 ⚠️ high 7.8 0.1 In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2_qd_dealloc gfs2_q... 2026-07-19
CVE-2026-63803 ⚠️ high 7.8 0.1 In the Linux kernel, the following vulnerability has been resolved: hdlc_ppp: sync per-proto timers before freeing hdlc... 2026-07-19
CVE-2026-63802 ⚠️ high 7.8 0.1 In the Linux kernel, the following vulnerability has been resolved: blk-cgroup: fix UAF in __blkcg_rstat_flush() When ... 2026-07-19
These CVEs affect the same products