In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(), ocfs2_journal_shutdown() has already been executed in ocfs2_dismount_volume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2_journal_release_jbd_inode(). ocfs2_dismount_volume()-> ocfs2_delete_osb()-> ocfs2_free_slot_info()-> __ocfs2_free_slot_info()-> evict()-> ocfs2_evict_inode()-> ocfs2_clear_inode()-> jbd2_journal_release_jbd_inode(osb->journal->j_journal, Adding osb->journal checks will prevent null-ptr-deref during the above execution path.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

Vendors Products
Linux
  • Linux Kernel

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/42c415c53ad2065088cc411d08925effa5b3d255 cve-icon cve-icon
https://git.kernel.org/stable/c/85e66331b60601d903cceaf8c10a234db863cd78 cve-icon cve-icon
https://git.kernel.org/stable/c/e9188f66e94955431ddbe2cd1cdf8ff2bb486abf cve-icon cve-icon
https://git.kernel.org/stable/c/f46e8ef8bb7b452584f2e75337b619ac51a7cadf cve-icon cve-icon
https://git.kernel.org/stable/c/f4a917e6cd6c798f7adf39907f117fc754db1283 cve-icon cve-icon
https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html cve-icon
https://lore.kernel.org/linux-cve-announce/2025091902-CVE-2025-39842-495f@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2025-39842 cve-icon
https://www.cve.org/CVERecord?id=CVE-2025-39842 cve-icon
History

Mon, 03 Nov 2025 18:30:00 +0000

Type Values Removed Values Added
References

Mon, 22 Sep 2025 10:15:00 +0000

Type Values Removed Values Added
First Time appeared Linux
Linux linux Kernel
Vendors & Products Linux
Linux linux Kernel

Sat, 20 Sep 2025 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 19 Sep 2025 15:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ocfs2: prevent release journal inode after journal shutdown Before calling ocfs2_delete_osb(), ocfs2_journal_shutdown() has already been executed in ocfs2_dismount_volume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2_journal_release_jbd_inode(). ocfs2_dismount_volume()-> ocfs2_delete_osb()-> ocfs2_free_slot_info()-> __ocfs2_free_slot_info()-> evict()-> ocfs2_evict_inode()-> ocfs2_clear_inode()-> jbd2_journal_release_jbd_inode(osb->journal->j_journal, Adding osb->journal checks will prevent null-ptr-deref during the above execution path.
Title ocfs2: prevent release journal inode after journal shutdown
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2025-09-19T15:26:17.075Z

Updated: 2025-11-03T17:43:57.858Z

Reserved: 2025-04-16T07:20:57.141Z

Link: CVE-2025-39842

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-09-19T16:15:42.930

Modified: 2025-11-03T18:16:49.730

Link: CVE-2025-39842

cve-icon Redhat

Severity : Moderate

Publid Date: 2025-09-19T00:00:00Z

Links: CVE-2025-39842 - Bugzilla