{"schema_version":"1.9.0","id":"CVE-2025-39735","published":"2025-04-18T07:01:36.453Z","modified":"2026-08-12T03:51:42.273543739Z","related":["SUSE-SU-2025:01620-1","SUSE-SU-2025:01640-1","SUSE-SU-2025:01964-1","SUSE-SU-2025:01965-1","SUSE-SU-2025:02000-1","SUSE-SU-2025:02254-1","SUSE-SU-2025:02307-1","SUSE-SU-2025:02333-1","SUSE-SU-2025:02923-1","SUSE-SU-2025:20408-1","SUSE-SU-2025:20413-1","SUSE-SU-2025:20419-1","SUSE-SU-2025:20421-1"],"summary":"jfs: fix slab-out-of-bounds read in ea_get()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\njfs: fix slab-out-of-bounds read in ea_get()\n\nDuring the \"size_check\" label in ea_get(), the code checks if the extended\nattribute list (xattr) size matches ea_size. If not, it logs\n\"ea_get: invalid extended attribute\" and calls print_hex_dump().\n\nHere, EALIST_SIZE(ea_buf->xattr) returns 4110417968, which exceeds\nINT_MAX (2,147,483,647). Then ea_size is clamped:\n\n\tint size = clamp_t(int, ea_size, 0, EALIST_SIZE(ea_buf->xattr));\n\nAlthough clamp_t aims to bound ea_size between 0 and 4110417968, the upper\nlimit is treated as an int, causing an overflow above 2^31 - 1. This leads\n\"size\" to wrap around and become negative (-184549328).\n\nThe \"size\" is then passed to print_hex_dump() (called \"len\" in\nprint_hex_dump()), it is passed as type size_t (an unsigned\ntype), this is then stored inside a variable called\n\"int remaining\", which is then assigned to \"int linelen\" which\nis then passed to hex_dump_to_buffer(). In print_hex_dump()\nthe for loop, iterates through 0 to len-1, where len is\n18446744073525002176, calling hex_dump_to_buffer()\non each iteration:\n\n\tfor (i = 0; i < len; i += rowsize) {\n\t\tlinelen = min(remaining, rowsize);\n\t\tremaining -= rowsize;\n\n\t\thex_dump_to_buffer(ptr + i, linelen, rowsize, groupsize,\n\t\t\t\t   linebuf, sizeof(linebuf), ascii);\n\n\t\t...\n\t}\n\nThe expected stopping condition (i < len) is effectively broken\nsince len is corrupted and very large. This eventually leads to\nthe \"ptr+i\" being passed to hex_dump_to_buffer() to get closer\nto the end of the actual bounds of \"ptr\", eventually an out of\nbounds access is done in hex_dump_to_buffer() in the following\nfor loop:\n\n\tfor (j = 0; j < len; j++) {\n\t\t\tif (linebuflen < lx + 2)\n\t\t\t\tgoto overflow2;\n\t\t\tch = ptr[j];\n\t\t...\n\t}\n\nTo fix this we should validate \"EALIST_SIZE(ea_buf->xattr)\"\nbefore it is utilised.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6e39b681d1eb16f408493bf5023788b57f68998c"},{"fixed":"3d6fd5b9c6acbc005e53d0211c7381f566babec1"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"bbf3f1fd8a0ac7df1db36a9b9e923041a14369f2"},{"fixed":"50afcee7011155933d8d5e8832f52eeee018cfd3"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"27a93c45e16ac25a0e2b5e5668e2d1beca56a478"},{"fixed":"78c9cbde8880ec02d864c166bcb4fe989ce1d95f"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9c356fc32a4480a2c0e537a05f2a8617633ddad0"},{"fixed":"46e2c031aa59ea65128991cbca474bd5c0c2ecdb"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"9353cdf28d4c5c0ff19c5df7fbf81ea774de43a4"},{"fixed":"a8c31808925b11393a6601f534bb63bac5366bab"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"8c505ebeed8045b488b2e60b516c752b851f8437"},{"fixed":"0beddc2a3f9b9cf7d8887973041e36c2d0fa3652"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"d9f9d96136cba8fedd647d2c024342ce090133c2"},{"fixed":"16d3d36436492aa248b2d8045e75585ebcc2f34d"},{"fixed":"5263822558a8a7c0d0248d5679c2dcf4d5cda61f"},{"fixed":"fdf480da5837c23b146c4743c18de97202fcab37"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"0"},{"last_affected":"4ea25fa8747fb8b1e5a11d87b852023ecf7ae420"},{"last_affected":"676a787048aafd4d1b38a522b05a9cc77e1b0a33"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.4.287"},{"fixed":"5.4.292"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.10.231"},{"fixed":"5.10.236"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"5.15.174"},{"fixed":"5.15.180"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.1.120"},{"fixed":"6.1.134"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.6.64"},{"fixed":"6.6.87"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.12.2"},{"fixed":"6.12.23"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"4.19.325"},{"fixed":"4.20"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.11.11"},{"fixed":"6.12"}]}],"versions":["v5.4.291","v5.4.290","v5.4.289","v5.4.288","v5.4.287","v5.10.235","v5.10.234","v5.10.233","v5.10.232","v5.10.231","v5.15.179","v5.15.178","v5.15.177","v5.15.176","v5.15.175","v5.15.174","v6.1.133","v6.1.132","v6.1.131","v6.1.130","v6.1.129","v6.1.128","v6.1.127","v6.1.126","v6.1.125","v6.1.124","v6.1.123","v6.1.122","v6.1.121","v6.1.120","v6.6.86","v6.6.85","v6.6.84","v6.6.83","v6.6.82","v6.6.81","v6.6.80","v6.6.79","v6.6.78","v6.6.77","v6.6.76","v6.6.75","v6.6.74","v6.6.73","v6.6.72","v6.6.71","v6.6.70","v6.6.69","v6.6.68","v6.6.67","v6.6.66","v6.6.65","v6.6.64","v6.12.22","v6.12.21","v6.12.20","v6.12.19","v6.12.18","v6.12.17","v6.12.16","v6.12.15","v6.12.14","v6.12.13","v6.12.12","v6.12.11","v6.12.10","v6.12.9","v6.12.8","v6.12.7","v6.12.6","v6.12.5","v6.12.4","v6.12.3","v6.12.2","v6.11.10","v4.19.324","v6.11.9","v6.11.8","v4.19.323","v6.11.7","v6.11.6","v4.19.322","v6.11.5","v6.11.4","v6.11-rc1","v6.11.3","v6.11-rc5","v6.11.2","v6.11","v6.11.1","v6.11-rc7","v6.10-rc1","v6.11-rc6","v6.11-rc3","v4.19.321","v6.11-rc4","v6.11-rc2","v4.19.320","v6.10","v4.19.319","v4.19.318","v6.10-rc6","v4.19.317","v6.10-rc7","v6.10-rc3","v6.9-rc1","v6.10-rc5","v6.10-rc2","v4.19.316","v6.10-rc4","v6.9","v4.19.315","v4.19.314","v4.19.313","v6.9-rc6","v6.9-rc7","v6.9-rc5","v6.9-rc3","v6.9-rc2","v6.8","v6.9-rc4","v4.19.312","v6.8-rc1","v4.19.311","v4.19.310","v6.7-rc1","v6.8-rc7","v4.19.309","v6.8-rc6","v6.8-rc5","v6.8-rc4","v6.8-rc3","v6.8-rc2","v4.19.308","v4.19.307","v4.19.306","v4.19.305","v6.7","v6.7-rc3","v6.7-rc8","v4.19.304","v6.7-rc7","v4.19.303","v6.7-rc6","v6.7-rc2","v4.19.302","v6.7-rc4","v6.7-rc5","v4.19.301","v4.19.300","v6.6","v4.19.299","v4.19.298","v6.6-rc1","v4.19.297","v6.6-rc5","v6.6-rc3","v6.6-rc7","v6.6-rc6","v6.6-rc4","v4.19.296","v6.6-rc2","v4.19.295","v6.5","v4.19.294","v6.5-rc1","v6.5-rc2","v6.5-rc7","v4.19.293","v4.19.292","v6.5-rc4","v6.5-rc3","v6.5-rc6","v4.19.291","v6.5-rc5","v4.19.290","v4.19.289","v4.19.288","v6.4","v6.4-rc7","v6.4-rc1","v6.4-rc6","v4.19.287","v6.4-rc5","v6.4-rc3","v4.19.286","v6.4-rc4","v6.4-rc2","v4.19.285","v4.19.284","v4.19.283","v4.19.282","v6.3","v6.3-rc1","v4.19.281","v6.3-rc7","v6.3-rc2","v6.3-rc3","v6.3-rc5","v6.3-rc6","v6.3-rc4","v4.19.280","v6.2-rc6","v4.19.279","v4.19.278","v4.19.277","v4.19.276","v4.19.275","v6.2-rc1","v6.2","v4.19.274","v4.19.273","v6.2-rc2","v6.2-rc8","v4.19.272","v6.2-rc5","v6.2-rc4","v6.2-rc7","v6.2-rc3","v4.19.271","v4.19.270","v4.19.269","v6.1-rc1","v6.1","v6.1-rc8","v6.1-rc3","v4.19.268","v6.1-rc6","v4.19.267","v6.1-rc7","v6.1-rc4","v6.1-rc2","v6.1-rc5","v4.19.266","v4.19.265","v4.19.264","v4.19.263","v4.19.262","v6.0-rc1","v4.19.261","v6.0","v6.0-rc7","v4.19.260","v6.0-rc3","v6.0-rc2","v4.19.259","v6.0-rc6","v6.0-rc4","v6.0-rc5","v4.19.258","v4.19.257","v4.19.256","v5.19","v4.19.255","v5.19-rc1","v4.19.254","v5.19-rc5","v5.19-rc8","v5.19-rc6","v5.18","v5.19-rc2","v5.19-rc7","v4.19.253","v5.19-rc3","v4.19.252","v5.19-rc4","v4.19.251","v4.19.250","v4.19.249","v5.18-rc1","v4.19.248","v4.19.247","v4.19.246","v4.19.245","v5.18-rc7","v5.18-rc2","v4.19.244","v4.19.243","v5.18-rc5","v5.17","v5.18-rc4","v5.18-rc3","v5.18-rc6","v4.19.242","v4.19.241","v4.19.240","v4.19.239","v4.19.238","v4.19.237","v5.17-rc6","v5.17-rc4","v4.19.236","v5.17-rc8","v5.17-rc7","v4.19.235","v5.17-rc1","v5.17-rc3","v4.19.234","v5.17-rc2","v4.19.233","v4.19.232","v5.17-rc5","v5.16","v4.19.231","v4.19.230","v4.19.229","v4.19.228","v4.19.227","v4.19.226","v4.19.225","v5.16-rc1","v5.16-rc8","v4.19.224","v5.16-rc5","v5.16-rc6","v4.19.223","v5.16-rc7","v4.19.222","v5.16-rc3","v5.16-rc2","v4.19.221","v5.16-rc4","v4.19.220","v5.15","v4.19.219","v4.19.218","v4.19.217","v4.19.216","v4.19.215","v5.15-rc2","v5.15-rc1","v5.15-rc4","v5.15-rc7","v4.19.214","v5.15-rc3","v5.15-rc5","v4.19.213","v5.15-rc6","v4.19.212","v5.14","v5.14-rc3","v4.19.211","v4.19.210","v4.19.209","v5.14-rc1","v4.19.208","v4.19.207","v4.19.206","v4.19.205","v5.14-rc2","v5.14-rc7","v5.14-rc6","v4.19.204","v5.13-rc1","v5.14-rc5","v5.14-rc4","v4.19.203","v4.19.202","v4.19.201","v4.19.200","v5.13","v4.19.199","v4.19.198","v4.19.197","v4.19.196","v5.13-rc6","v5.13-rc7","v4.19.195","v5.13-rc3","v5.13-rc2","v5.13-rc4","v5.13-rc5","v4.19.194","v4.19.193","v4.19.192","v4.19.191","v5.12","v4.19.190","v4.19.189","v5.12-rc2","v5.12-rc1-dontuse","v5.12-rc1","v4.19.188","v5.12-rc8","v5.12-rc3","v5.12-rc7","v5.12-rc5","v4.19.187","v5.12-rc6","v4.19.186","v4.19.185","v4.19.184","v5.12-rc4","v5.10","v4.19.183","v5.11","v4.19.182","v4.19.181","v4.19.180","v4.19.179","v4.19.178","v4.19.177","v5.11-rc3","v4.19.176","v5.11-rc7","v5.11-rc6","v5.11-rc5","v5.11-rc1","v4.19.175","v5.11-rc4","v4.19.174","v5.11-rc2","v4.19.173","v4.19.172","v4.19.171","v4.19.170","v4.19.169","v5.10-rc1","v4.19.168","v4.19.167","v4.19.166","v4.19.165","v4.19.164","v4.19.163","v5.10-rc7","v5.10-rc4","v5.10-rc3","v5.10-rc6","v5.9","v4.19.162","v5.10-rc2","v5.10-rc5","v4.19.161","v4.19.160","v4.19.159","v4.19.158","v4.19.157","v4.19.156","v4.19.155","v4.19.154","v4.19.153","v4.19.152","v5.9-rc1","v5.9-rc7","v4.19.151","v4.19.150","v5.9-rc8","v5.9-rc6","v5.9-rc4","v5.9-rc5","v4.19.149","v5.9-rc3","v4.19.148","v4.19.147","v5.9-rc2","v4.19.146","v4.19.145","v4.19.144","v4.19.143","v5.8","v4.19.142","v4.19.141","v4.19.140","v4.19.139","v4.19.138","v4.19.137","v5.7","v5.8-rc2","v5.8-rc1","v5.8-rc7","v4.19.136","v5.8-rc5","v4.19.135","v5.8-rc3","v5.8-rc4","v4.19.134","v5.8-rc6","v4.19.133","v4.19.132","v4.19.131","v4.19.130","v5.7-rc4","v4.19.129","v4.19.128","v4.19.127","v4.19.126","v5.7-rc7","v5.7-rc1","v4.19.125","v5.7-rc3","v5.7-rc2","v5.7-rc5","v4.19.124","v5.7-rc6","v4.19.123","v4.19.122","v5.6","v4.19.121","v4.19.120","v4.19.119","v4.19.118","v4.19.117","v4.19.116","v4.19.115","v4.19.114","v5.6-rc1","v4.19.113","v5.6-rc7","v5.6-rc6","v5.6-rc3","v5.6-rc4","v5.6-rc2","v5.6-rc5","v4.19.112","v4.19.111","v4.19.110","v4.19.109","v4.19.108","v4.19.107","v4.19.106","v4.19.105","v4.19.104","v4.19.103","v4.19.102","v5.5","v4.19.101","v5.5-rc5","v4.19.100","v5.5-rc7","v5.5-rc2","v5.5-rc1","v4.19.99","v5.4","v4.19.98","v5.5-rc4","v4.19.97","v5.5-rc3","v5.5-rc6","v4.19.96","v4.19.95","v4.19.94","v4.19.93","v4.19.92","v4.19.91","v4.19.90","v4.19.89","v4.19.88","v5.4-rc1","v4.19.87","v5.4-rc6","v5.4-rc3","v4.19.86","v5.4-rc4","v5.4-rc8","v4.19.85","v4.19.84","v5.4-rc7","v5.4-rc5","v5.3","v5.4-rc2","v4.19.83","v4.19.82","v4.19.81","v4.19.80","v4.19.79","v4.19.78","v4.19.77","v4.19.76","v4.19.75","v5.3-rc5","v5.3-rc1","v4.19.74","v5.3-rc2","v4.19.73","v5.3-rc3","v5.3-rc8","v4.19.72","v5.3-rc7","v5.3-rc4","v4.19.71","v4.19.70","v4.19.69","v5.2","v5.3-rc6","v4.19.68","v4.19.67","v4.19.66","v4.19.65","v4.19.64","v4.19.63","v4.19.62","v4.19.61","v4.19.60","v5.2-rc2","v4.19.59","v5.2-rc7","v5.2-rc4","v4.19.58","v5.2-rc1","v4.19.57","v5.2-rc5","v5.2-rc6","v4.19.56","v5.2-rc3","v4.19.55","v5.1","v4.19.54","v4.19.53","v4.19.52","v4.19.51","v4.19.50","v4.19.49","v4.19.48","v4.19.47","v4.19.46","v4.19.45","v4.19.44","v4.19.43","v5.0-rc8","v4.19.42","v5.1-rc7","v5.1-rc1","v4.19.41","v5.1-rc6","v4.19.40","v5.1-rc5","v4.19.39","v4.19.38","v5.0","v4.19.37","v5.1-rc3","v4.19.36","v5.1-rc2","v4.19.35","v5.1-rc4","v4.19.34","v5.0-rc1","v4.19.33","v4.19.32","v4.19.31","v4.19.30","v4.19.29","v4.19.28","v4.19.27","v4.19.26","v5.0-rc4","v5.0-rc3","v5.0-rc6","v4.19.25","v5.0-rc7","v4.19.24","v5.0-rc2","v4.19.23","v5.0-rc5","v4.19.22","v4.19.21","v4.19.20","v4.19.19","v4.19.18","v4.19.17","v4.20-rc1","v4.19.16","v4.19","v4.19.15","v4.20","v4.19.14","v4.19.13","v4.20-rc7","v4.20-rc5","v4.19.12","v4.20-rc6","v4.19.11","v4.19.10","v4.20-rc4","v4.20-rc2","v4.19.9","v4.19.8","v4.20-rc3","v4.19.7","v4.19.6","v4.19.5","v4.19.4","v4.19.3","v4.19.2","v4.19.1","v4.19-rc2","v4.19-rc8","v4.19-rc4","v4.19-rc1","v4.19-rc7","v4.19-rc6","v4.19-rc5","v4.19-rc3","v4.18","v4.18-rc1","v4.18-rc8","v4.18-rc2","v4.18-rc5","v4.18-rc6","v4.18-rc7","v4.17","v4.18-rc3","v4.18-rc4","v4.17-rc1","v4.17-rc2","v4.17-rc7","v4.17-rc3","v4.17-rc4","v4.16","v4.17-rc6","v4.17-rc5","v4.16-rc7","v4.16-rc4","v4.16-rc1","v4.16-rc2","v4.16-rc5","v4.16-rc3","v4.16-rc6","v4.14","v4.15","v4.15-rc1","v4.15-rc4","v4.15-rc9","v4.15-rc8","v4.15-rc7","v4.15-rc3","v4.15-rc2","v4.15-rc5","v4.15-rc6","v4.14-rc1","v4.14-rc7","v4.14-rc3","v4.13","v4.14-rc8","v4.14-rc4","v4.14-rc6","v4.14-rc2","v4.14-rc5","v4.13-rc2","v4.13-rc1","v4.13-rc3","v4.13-rc7","v4.13-rc4","v4.13-rc5","v4.13-rc6","v4.12-rc1","v4.12","v4.12-rc5","v4.12-rc7","v4.12-rc6","v4.12-rc4","v4.12-rc2","v4.12-rc3","v4.11","v4.11-rc1","v4.11-rc6","v4.11-rc8","v4.11-rc7","v4.11-rc3","v4.11-rc5","v4.11-rc2","v4.11-rc4","v4.10","v4.9","v4.10-rc8","v4.10-rc3","v4.10-rc1","v4.10-rc7","v4.10-rc6","v4.10-rc2","v4.10-rc5","v4.10-rc4","v4.9-rc7","v4.9-rc6","v4.9-rc8","v4.9-rc1","v4.9-rc5","v4.9-rc3","v4.9-rc4","v4.9-rc2","v4.8","v4.8-rc8","v4.8-rc2","v4.8-rc1","v4.8-rc7","v4.8-rc6","v4.8-rc5","v4.8-rc4","v4.8-rc3","v4.7","v4.7-rc4","v4.7-rc2","v4.7-rc1","v4.7-rc7","v4.7-rc6","v4.7-rc3","v4.7-rc5","v4.6","v4.6-rc1","v4.6-rc6","v4.6-rc4","v4.6-rc7","v4.6-rc5","v4.5-rc4","v4.6-rc2","v4.6-rc3","v4.5","v4.4","v4.5-rc1","v4.5-rc6","v4.5-rc2","v4.5-rc7","v4.5-rc5","v4.5-rc3","v4.4-rc1","v4.4-rc2","v4.4-rc8","v4.4-rc3","v4.4-rc7","v4.4-rc5","v4.4-rc6","v4.4-rc4","v4.3","v4.3-rc1","v4.3-rc6","v4.3-rc4","v4.3-rc2","v4.3-rc7","v4.3-rc5","v4.3-rc3","v4.2","v4.2-rc2","v4.2-rc1","v4.2-rc8","v4.2-rc4","v4.2-rc6","v4.2-rc7","v4.0-rc5","v4.2-rc5","v4.2-rc3","v4.1-rc2","v4.1","v4.1-rc1","v4.1-rc8","v4.1-rc7","v4.1-rc6","v4.1-rc3","v4.1-rc4","v4.0","v4.1-rc5","v4.0-rc1","v4.0-rc2","v4.0-rc7","v4.0-rc3","v4.0-rc6","v4.0-rc4","v3.19","v3.19-rc7","v3.19-rc5","v3.19-rc1","v3.19-rc6","v3.19-rc4","v3.18-rc1","v3.19-rc3","v3.19-rc2","v3.18","v3.18-rc7","v3.18-rc6","v3.18-rc2","v3.18-rc3","v3.18-rc4","v3.18-rc5","v3.17","v3.17-rc1","v3.17-rc7","v3.17-rc2","v3.17-rc4","v3.16","v3.17-rc5","v3.17-rc6","v3.17-rc3","v3.16-rc7","v3.16-rc1","v3.16-rc3","v3.16-rc5","v3.16-rc6","v3.16-rc2","v3.16-rc4","v3.13","v3.15","v3.15-rc5","v3.15-rc8","v3.15-rc1","v3.15-rc6","v3.15-rc3","v3.15-rc7","v3.15-rc2","v3.15-rc4","v3.14","v3.14-rc4","v3.14-rc8","v3.14-rc7","v3.14-rc6","v3.14-rc1","v3.14-rc2","v3.14-rc5","v3.14-rc3","v3.13-rc6","v3.13-rc8","v3.12","v3.13-rc7","v3.13-rc1","v3.13-rc4","v3.13-rc3","v3.13-rc5","v3.13-rc2","v3.12-rc7","v3.12-rc3","v3.12-rc6","v3.12-rc1","v3.12-rc5","v3.11","v3.12-rc2","v3.12-rc4","v3.11-rc7","v3.11-rc2","v3.11-rc5","v3.11-rc1","v3.11-rc3","v3.11-rc4","v3.11-rc6","v3.10-rc2","v3.10","v3.10-rc7","v3.10-rc6","v3.10-rc1","v3.10-rc5","v3.10-rc3","v3.10-rc4","v3.9","v3.9-rc2","v3.9-rc7","v3.9-rc8","v3.9-rc3","v3.9-rc6","v3.9-rc5","v3.9-rc4","v3.9-rc1","v3.8","v3.8-rc7","v3.8-rc6","v3.8-rc5","v3.8-rc2","v3.8-rc1","v3.8-rc3","v3.8-rc4","v3.7","v3.7-rc1","v3.6","v3.7-rc6","v3.7-rc7","v3.7-rc3","v3.7-rc8","v3.7-rc2","v3.7-rc4","v3.7-rc5","v3.6-rc7","v3.6-rc1","v3.5-rc3","v3.6-rc6","v3.6-rc5","v3.5","v3.6-rc3","v3.6-rc4","v3.6-rc2","v3.4-rc4","v3.5-rc7","v3.5-rc5","v3.5-rc6","v3.5-rc2","v3.5-rc1","v3.5-rc4","v3.4","v3.4-rc2","v3.4-rc1","v3.4-rc7","v3.4-rc6","v3.4-rc3","v3.4-rc5","v3.3","v3.3-rc6","v3.3-rc3","v3.3-rc7","v3.3-rc2","v3.3-rc5","v3.2","v3.3-rc4","v3.3-rc1","v3.2-rc4","v3.2-rc7","v3.2-rc6","v3.2-rc5","v3.2-rc3","v3.1","v3.2-rc2","v3.2-rc1","v3.1-rc1","v3.1-rc9","v3.1-rc8","v3.1-rc10","v3.1-rc7","v3.1-rc3","v3.1-rc2","v3.1-rc4","v3.1-rc5","v3.0","v3.1-rc6","v3.0-rc7","v3.0-rc4","v3.0-rc6","v3.0-rc5","v3.0-rc3","v3.0-rc1","v2.6.39","v3.0-rc2","v2.6.38","v2.6.39-rc2","v2.6.39-rc7","v2.6.39-rc5","v2.6.39-rc1","v2.6.38-rc7","v2.6.39-rc6","v2.6.39-rc4","v2.6.39-rc3","v2.6.37","v2.6.38-rc1","v2.6.38-rc8","v2.6.38-rc2","v2.6.38-rc6","v2.6.38-rc5","v2.6.38-rc4","v2.6.38-rc3","v2.6.37-rc4","v2.6.37-rc2","v2.6.36","v2.6.37-rc5","v2.6.37-rc8","v2.6.37-rc7","v2.6.37-rc6","v2.6.37-rc1","v2.6.37-rc3","v2.6.36-rc6","v2.6.35-rc4","v2.6.36-rc8","v2.6.35","v2.6.36-rc7","v2.6.36-rc3","v2.6.36-rc5","v2.6.36-rc4","v2.6.36-rc2","v2.6.36-rc1","v2.6.35-rc5","v2.6.35-rc6","v2.6.34","v2.6.35-rc3","v2.6.35-rc1","v2.6.35-rc2","v2.6.34-rc7","v2.6.34-rc6","v2.6.34-rc5","v2.6.34-rc4","v2.6.34-rc3","v2.6.34-rc2","v2.6.34-rc1","v2.6.33","v2.6.33-rc6","v2.6.33-rc8","v2.6.33-rc4","v2.6.33-rc5","v2.6.33-rc3","v2.6.33-rc7","v2.6.33-rc2","v2.6.32","v2.6.33-rc1","v2.6.32-rc8","v2.6.32-rc7","v2.6.32-rc6","v2.6.31","v2.6.32-rc5","v2.6.32-rc4","v2.6.32-rc2","v2.6.32-rc1","v2.6.32-rc3","v2.6.31-rc9","v2.6.31-rc1","v2.6.31-rc7","v2.6.31-rc8","v2.6.31-rc6","v2.6.30-rc6","v2.6.30","v2.6.31-rc4","v2.6.31-rc5","v2.6.31-rc3","v2.6.31-rc2","v2.6.30-rc7","v2.6.30-rc8","v2.6.30-rc5","v2.6.30-rc3","v2.6.30-rc4","v2.6.30-rc1","v2.6.30-rc2","v2.6.29","v2.6.29-rc8","v2.6.29-rc7","v2.6.29-rc5","v2.6.29-rc1","v2.6.29-rc6","v2.6.29-rc4","v2.6.29-rc3","v2.6.29-rc2","v2.6.28","v2.6.28-rc7","v2.6.28-rc9","v2.6.28-rc8","v2.6.28-rc6","v2.6.28-rc5","v2.6.28-rc4","v2.6.28-rc2","v2.6.28-rc3","v2.6.28-rc1","v2.6.27","v2.6.27-rc7","v2.6.27-rc9","v2.6.27-rc8","v2.6.27-rc5","v2.6.27-rc6","v2.6.27-rc4","v2.6.27-rc1","v2.6.27-rc3","v2.6.27-rc2","v2.6.26","v2.6.26-rc9","v2.6.26-rc8","v2.6.26-rc3","v2.6.26-rc7","v2.6.26-rc6","v2.6.26-rc5","v2.6.26-rc4","v2.6.26-rc2","v2.6.26-rc1","v2.6.25","v2.6.25-rc7","v2.6.25-rc9","v2.6.25-rc8","v2.6.25-rc6","v2.6.25-rc5","v2.6.25-rc3","v2.6.25-rc4","v2.6.24","v2.6.25-rc2","v2.6.25-rc1","v2.6.24-rc8","v2.6.24-rc7","v2.6.24-rc6","v2.6.24-rc5","v2.6.24-rc4","v2.6.24-rc3","v2.6.24-rc2","v2.6.24-rc1","v2.6.23","v2.6.23-rc9","v2.6.23-rc8","v2.6.23-rc5","v2.6.23-rc7","v2.6.23-rc6","v2.6.23-rc4","v2.6.23-rc3","v2.6.23-rc2","v2.6.23-rc1","v2.6.22","v2.6.22-rc7","v2.6.22-rc6","v2.6.22-rc5","v2.6.22-rc4","v2.6.22-rc3","v2.6.22-rc2","v2.6.22-rc1","v2.6.21","v2.6.21-rc7","v2.6.21-rc6","v2.6.21-rc5","v2.6.21-rc4","v2.6.21-rc3","v2.6.21-rc2","v2.6.21-rc1","v2.6.20-rc7","v2.6.20-rc6","v2.6.20-rc5","v2.6.20-rc4","v2.6.20-rc3","v2.6.20-rc1","v2.6.20-rc2","v2.6.19-rc2","v2.6.18","v2.6.19-rc1","v2.6.18-rc6","v2.6.18-rc5","v2.6.18-rc3","v2.6.18-rc2","v2.6.18-rc1","v2.6.17","v2.6.17-rc4","v2.6.17-rc6","v2.6.17-rc5","v2.6.17-rc3","v2.6.17-rc2","v2.6.17-rc1","v2.6.16","v2.6.16-rc6","v2.6.16-rc4","v2.6.16-rc5","v2.6.16-rc3","v2.6.16-rc2","v2.6.16-rc1","v2.6.15-rc7","v2.6.15-rc5","v2.6.15-rc4","v2.6.15-rc2","v2.6.15-rc1","v2.6.14-rc3","v2.6.14-rc2","v2.6.14-rc1","v2.6.13","v2.6.13-rc7","v2.6.13-rc6","v2.6.13-rc5","v2.6.13-rc3","v2.6.13-rc4","v2.6.13-rc2","v2.6.13-rc1","v2.6.12-rc4","v2.6.12-rc3","v2.6.12-rc2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39735.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.4.292"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.5.0"},{"fixed":"5.10.236"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.180"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.134"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.87"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.23"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.13.11"},{"fixed":"6.14.2"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39735.json"}}],"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/0beddc2a3f9b9cf7d8887973041e36c2d0fa3652"},{"type":"WEB","url":"https://git.kernel.org/stable/c/16d3d36436492aa248b2d8045e75585ebcc2f34d"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3d6fd5b9c6acbc005e53d0211c7381f566babec1"},{"type":"WEB","url":"https://git.kernel.org/stable/c/46e2c031aa59ea65128991cbca474bd5c0c2ecdb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/50afcee7011155933d8d5e8832f52eeee018cfd3"},{"type":"WEB","url":"https://git.kernel.org/stable/c/5263822558a8a7c0d0248d5679c2dcf4d5cda61f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/78c9cbde8880ec02d864c166bcb4fe989ce1d95f"},{"type":"WEB","url":"https://git.kernel.org/stable/c/a8c31808925b11393a6601f534bb63bac5366bab"},{"type":"WEB","url":"https://git.kernel.org/stable/c/fdf480da5837c23b146c4743c18de97202fcab37"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39735.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39735"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39735.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}]}