CVE-2025-39842

CVE-2025-39842

Medium · published September 19, 2025

CVSS v3.1
5.5
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: prevent release journal inode after journal shutdown

Before calling ocfs2_delete_osb(), ocfs2_journal_shutdown() has already

been executed in ocfs2_dismount_volume(), so osb->journal must be NULL.

Therefore, the following calltrace will inevitably fail when it reaches

jbd2_journal_release_jbd_inode().

ocfs2_dismount_volume()->

ocfs2_delete_osb()->

ocfs2_free_slot_info()->

__ocfs2_free_slot_info()->

evict()->

ocfs2_evict_inode()->

ocfs2_clear_inode()->

jbd2_journal_release_jbd_inode(osb->journal->j_journal,

Adding osb->journal checks will prevent null-ptr-deref during the above

execution path.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.1th percentile
Published
2025-09-19T20:15Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 5.16, < 6.1.1516.1.151
linux/linux_kernel≥ 6.2, < 6.6.1056.6.105
linux/linux_kernel≥ 6.7, < 6.12.466.12.46
linux/linux_kernel≥ 6.13, < 6.16.66.16.6
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
debian/debian_linuxall versions—
References (7)
EPSS history
Timeline
  • 19 SEP 15:26Z
    ocfs2: prevent release journal inode after journal shutdown
    cvelistv5