CVE-2026-72225

CVE-2026-72225

High · published August 15, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()

jbd2_journal_initialize_fast_commit() validates journal capacity by

checking (journal->j_last - num_fc_blks < JBD2_MIN_JOURNAL_BLOCKS).

Both j_last and num_fc_blks are unsigned, so when num_fc_blks exceeds

j_last the subtraction wraps to a large value, bypassing the bounds

check.

The resulting underflow corrupts j_last, j_fc_first, and j_free,

leading to journal abort.

Fix by checking num_fc_blks against j_last before the subtraction,

returning -EFSCORRUPTED.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00177 · 6.9th percentile
Published
2026-08-15T10:21Z
References (8)
EPSS history
Timeline
  • 15 AUG 05:54Z
    jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit()
    cvelistv5