AZL-67529
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-67529.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/AZL-67529
- Upstream
- Published
- 2025-09-19T16:15:42Z
- Modified
- 2026-04-01T05:21:14.469621Z
- Summary
- CVE-2025-39842 affecting package kernel for versions less than 6.6.112.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
ocfs2: prevent release journal inode after journal shutdown
Before calling ocfs2deleteosb(), ocfs2journalshutdown() has already been executed in ocfs2dismountvolume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2journalreleasejbdinode().
ocfs2dismountvolume()-> ocfs2deleteosb()-> ocfs2freeslot_info()-> __ocfs2freeslotinfo()-> evict()-> ocfs2evictinode()-> ocfs2clearinode()-> jbd2journalreleasejbdinode(osb->journal->jjournal,
Adding osb->journal checks will prevent null-ptr-deref during the above execution path.
- References