CVEvulnerability
CVE-2025-37839
7.8 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-05-09
- Last modified
- 2026-06-17
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
jbd2: remove wrong sb->s_sequence check
Journal emptiness is not determined by sb->s_sequence == 0 but rather by
sb->s_start == 0 (which is set a few lines above). Furthermore 0 is a
valid transaction ID so the check can spuriously trigger. Remove the
invalid WARN_ON.
Affected configurations
• linux linux kernel (< 5.4.293)
• linux linux kernel (>= 5.5 < 5.10.237)
• linux linux kernel (>= 5.11 < 5.15.181)
• linux linux kernel (>= 5.16 < 6.1.135)
• linux linux kernel (>= 6.2 < 6.6.88)
• linux linux kernel (>= 6.7 < 6.12.24)
• linux linux kernel (>= 6.13 < 6.13.12)
• linux linux kernel (>= 6.14 < 6.14.3)
• debian debian linux 11.0
References
- https://git.kernel.org/stable/c/3b4643ffaf72d7a5a357e9bf68b1775f8cfe7e77 Patch
- https://git.kernel.org/stable/c/9eaec071f111cd2124ce9a5b93536d3f6837d457 Patch
- https://git.kernel.org/stable/c/ad926f735b4d4f10768fec7d080cadeb6d075cac Patch
- https://git.kernel.org/stable/c/b0cca357f85beb6144ab60c62dcc98508cc044bf Patch
- https://git.kernel.org/stable/c/b479839525fe7906966cdc4b5b2afbca048558a1 Patch
- https://git.kernel.org/stable/c/c88f7328bb0fff66520fc9164f02b1d06e083c1b Patch
- https://git.kernel.org/stable/c/c98eb9ffb1d9c98237b5e1668eee17654e129fb0 Patch
- https://git.kernel.org/stable/c/cf30432f5b3064ff85d85639c2f0106f89c566f6 Patch
- https://git.kernel.org/stable/c/e6eff39dd0fe4190c6146069cc16d160e71d1148 Patch
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html Mailing List, Third Party Advisory