CVE-2024-49900 jfs: Fix uninit-value access of new_ea in ea_buffer

Api.Msrc.Microsoft • February 18, 2026

Share: View original

Information published.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Multiple CVEs Addressed in jfs Module Vulnerabilities Two vulnerabilities in the jfs file system have been reported, identified as CVE-2025-37742 and CVE-2025-38204. CVE-2025-37742, published on May 1, 2025, addresses an uninitialized value access issue, while CVE-2025-38204, published on July 4, 2025, fixes an array index out-of-bounds read. Affected systems include those utilizing the jfs file system in Microsoft environments. 8 sources 39

Extracted Entities

CVEs (1)

Platforms (1)