CVE-2025-71292

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-71292
In the Linux kernel, the following vulnerability has been resolved: jfs: nlink overflow in jfs_rename If nlink is maximal for a directory (-1) and inside that directory you perform a rename for some child directory (not moving from the parent), then the nlink of the first directory is first incremented and later decremented. Normally this is fine, but when nlink = -1 this causes a wrap around to 0, and then drop_nlink issues a warning. After applying the patch syzbot no longer issues any warnings. I also ran some basic fs tests to look for any regressions.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/2108829a59f081e822fdab8c2cd7131deb8aa8a1 Patch
https://git.kernel.org/stable/c/5d77c36cd4b698649f5c30c5f6c084f4f61d1880 Patch
https://git.kernel.org/stable/c/9218dc26fd922b09858ecd3666ed57dfd8098da8 Patch
https://git.kernel.org/stable/c/93c325746ae59709b4f9bad4e3e4761c8d566c70 Patch
https://git.kernel.org/stable/c/a3d66089e50a6e0142f8884471f74292102ea9aa Patch
https://git.kernel.org/stable/c/b4330a0d0947fbdc9d445cbbeabd8cc910a8c9ca Patch
https://git.kernel.org/stable/c/f70fcbc2ac7c24f087a2c895c5753aa730b1e479 Patch
https://git.kernel.org/stable/c/fe136426e30ca6debcf916fd6a141555ed9fde74 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*
History

13 May 2026, 21:03

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:2.6.12:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:2.6.12:rc4:*:*:*:*:*:*
References () https://git.kernel.org/stable/c/2108829a59f081e822fdab8c2cd7131deb8aa8a1 - () https://git.kernel.org/stable/c/2108829a59f081e822fdab8c2cd7131deb8aa8a1 - Patch
References () https://git.kernel.org/stable/c/5d77c36cd4b698649f5c30c5f6c084f4f61d1880 - () https://git.kernel.org/stable/c/5d77c36cd4b698649f5c30c5f6c084f4f61d1880 - Patch
References () https://git.kernel.org/stable/c/9218dc26fd922b09858ecd3666ed57dfd8098da8 - () https://git.kernel.org/stable/c/9218dc26fd922b09858ecd3666ed57dfd8098da8 - Patch
References () https://git.kernel.org/stable/c/93c325746ae59709b4f9bad4e3e4761c8d566c70 - () https://git.kernel.org/stable/c/93c325746ae59709b4f9bad4e3e4761c8d566c70 - Patch
References () https://git.kernel.org/stable/c/a3d66089e50a6e0142f8884471f74292102ea9aa - () https://git.kernel.org/stable/c/a3d66089e50a6e0142f8884471f74292102ea9aa - Patch
References () https://git.kernel.org/stable/c/b4330a0d0947fbdc9d445cbbeabd8cc910a8c9ca - () https://git.kernel.org/stable/c/b4330a0d0947fbdc9d445cbbeabd8cc910a8c9ca - Patch
References () https://git.kernel.org/stable/c/f70fcbc2ac7c24f087a2c895c5753aa730b1e479 - () https://git.kernel.org/stable/c/f70fcbc2ac7c24f087a2c895c5753aa730b1e479 - Patch
References () https://git.kernel.org/stable/c/fe136426e30ca6debcf916fd6a141555ed9fde74 - () https://git.kernel.org/stable/c/fe136426e30ca6debcf916fd6a141555ed9fde74 - Patch
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
CWE NVD-CWE-noinfo
First Time Linux linux Kernel
Linux

06 May 2026, 12:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-05-06 12:16

Updated : 2026-05-13 21:03

NVD link : CVE-2025-71292

Mitre link : CVE-2025-71292

CVE.ORG link : CVE-2025-71292

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-noinfo