{"schema_version":"1.7.5","id":"CVE-2025-39842","published":"2025-09-19T15:26:17.075Z","modified":"2026-07-15T01:49:11.974644591Z","related":["SUSE-SU-2025:03600-1","SUSE-SU-2025:03601-1","SUSE-SU-2025:03633-1","SUSE-SU-2025:03634-1","SUSE-SU-2025:20851-1","SUSE-SU-2025:20861-1","SUSE-SU-2025:20870-1","SUSE-SU-2025:20898-1","SUSE-SU-2025:21074-1","SUSE-SU-2025:21139-1","SUSE-SU-2025:21179-1","SUSE-SU-2025:3725-1","SUSE-SU-2025:3751-1","SUSE-SU-2026:20560-1","openSUSE-SU-2025:20081-1"],"summary":"ocfs2: prevent release journal inode after journal shutdown","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: prevent release journal inode after journal shutdown\n\nBefore calling ocfs2_delete_osb(), ocfs2_journal_shutdown() has already\nbeen executed in ocfs2_dismount_volume(), so osb->journal must be NULL. \nTherefore, the following calltrace will inevitably fail when it reaches\njbd2_journal_release_jbd_inode().\n\nocfs2_dismount_volume()->\n  ocfs2_delete_osb()->\n    ocfs2_free_slot_info()->\n      __ocfs2_free_slot_info()->\n        evict()->\n          ocfs2_evict_inode()->\n            ocfs2_clear_inode()->\n\t      jbd2_journal_release_jbd_inode(osb->journal->j_journal,\n\nAdding osb->journal checks will prevent null-ptr-deref during the above\nexecution path.","affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"da5e7c87827e8caa6a1eeec6d95dcf74ab592a01"},{"fixed":"42c415c53ad2065088cc411d08925effa5b3d255"},{"fixed":"e9188f66e94955431ddbe2cd1cdf8ff2bb486abf"},{"fixed":"f4a917e6cd6c798f7adf39907f117fc754db1283"},{"fixed":"85e66331b60601d903cceaf8c10a234db863cd78"},{"fixed":"f46e8ef8bb7b452584f2e75337b619ac51a7cadf"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39842.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.151"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.105"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.46"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.16.6"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-39842.json"}}],"references":[{"type":"WEB","url":"https://cert-portal.siemens.com/productcert/html/ssa-032379.html"},{"type":"WEB","url":"https://git.kernel.org/stable/c/42c415c53ad2065088cc411d08925effa5b3d255"},{"type":"WEB","url":"https://git.kernel.org/stable/c/85e66331b60601d903cceaf8c10a234db863cd78"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e9188f66e94955431ddbe2cd1cdf8ff2bb486abf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f46e8ef8bb7b452584f2e75337b619ac51a7cadf"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f4a917e6cd6c798f7adf39907f117fc754db1283"},{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/10/msg00008.html"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39842.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-39842"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39842.json"}}