CVE-2025-39842

Source
https://cve.org/CVERecord?id=CVE-2025-39842
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39842.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2025-39842
Downstream
Related
Published
2025-09-19T15:26:17.075Z
Modified
2026-05-28T03:53:14.104550076Z
Summary
ocfs2: prevent release journal inode after journal shutdown
Details

In the Linux kernel, the following vulnerability has been resolved:

ocfs2: prevent release journal inode after journal shutdown

Before calling ocfs2deleteosb(), ocfs2journalshutdown() has already been executed in ocfs2dismountvolume(), so osb->journal must be NULL. Therefore, the following calltrace will inevitably fail when it reaches jbd2journalreleasejbdinode().

ocfs2dismountvolume()-> ocfs2deleteosb()-> ocfs2freeslot_info()-> __ocfs2freeslotinfo()-> evict()-> ocfs2evictinode()-> ocfs2clearinode()-> jbd2journalreleasejbdinode(osb->journal->jjournal,

Adding osb->journal checks will prevent null-ptr-deref during the above execution path.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/39xxx/CVE-2025-39842.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
da5e7c87827e8caa6a1eeec6d95dcf74ab592a01
Fixed
42c415c53ad2065088cc411d08925effa5b3d255
Fixed
e9188f66e94955431ddbe2cd1cdf8ff2bb486abf
Fixed
f4a917e6cd6c798f7adf39907f117fc754db1283
Fixed
85e66331b60601d903cceaf8c10a234db863cd78
Fixed
f46e8ef8bb7b452584f2e75337b619ac51a7cadf

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39842.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.151
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.105
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.46
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.16.6

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2025-39842.json"