Threats tagged 'ghsa-69cq-v3pw-hrr3'

CVE-2025-37742 is a medium severity vulnerability in the Linux kernel's JFS filesystem code. It involves uninitialized value access of the imap structure allocated in the diMount() function. This flaw causes the snprintf() function to write uninitialized data into a buffer during hex dumping, potentially leading to kernel memory corruption and a denial of service. The issue is fixed by initializing the allocated memory with kzalloc instead of kmalloc in diMount().